
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft
File: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft (raw, json)
Hash identifier: vi9mP7pTELHThNFA4PGLvnIVMcMyrNRGGl28O2ryfjw=
Subject key identifier: 3A:98:79:0A:1F:FE:0B:9C:09:C3:03:CD:87:C9:1F:01:41:F5:A4:0E
Authority key identifier: DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82
Certificate issuer: /CN=A9185D4E/serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282
Certificate serial: 0138
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft
Manifest number: 0130
Signing time: Mon 11 May 2026 05:37:10 +0000
Manifest this update: Mon 11 May 2026 05:37:10 +0000
Manifest next update: Mon 18 May 2026 05:37:10 +0000
Files and hashes: 1: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl (hash: HDa/gtkxN1S70QvXyXx3hC3/eJ0vnhVifNZrJQ7s2tg=)
2: 75B289249B4311EFA6D2403DC4F9AE02.roa (hash: CxmUBgoG5/CyJ4oi5OpIVw7Gs4zM12EJJkWMArPlfVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl
rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:37:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D4E, serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282
Validity
Not Before: May 11 05:37:10 2026 GMT
Not After : May 18 05:37:10 2026 GMT
Subject: CN=6a016b06-e663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:46:66:c9:65:35:bd:7c:2b:b9:34:82:68:17:
bd:a4:e3:9c:ac:c6:c5:f9:c4:ab:9a:57:49:06:0b:
00:2e:56:48:f3:cc:df:03:e7:e3:fb:aa:ee:52:9a:
44:f0:58:ae:b6:4d:82:15:43:e6:8a:23:54:ff:94:
3f:51:9a:4a:29:fb:b0:a7:a3:e8:b1:9e:b0:61:a5:
5e:00:70:d9:21:66:ed:b3:66:16:06:bd:2b:51:3d:
66:77:19:9d:f4:29:7c:a2:aa:19:2a:70:e5:a1:fd:
92:28:e2:4b:50:58:74:b0:54:04:45:53:89:37:35:
11:db:49:10:81:97:3d:ae:21:ea:ed:7e:57:5f:3d:
d2:b3:da:40:58:ea:15:cf:3d:0a:ef:32:62:4d:e4:
c9:73:38:50:8c:74:34:28:bd:96:dc:98:25:cd:77:
52:6d:1d:54:70:c1:7f:1b:90:b6:8d:b1:70:3f:ec:
a5:e8:cf:a2:b0:d4:a0:e5:ea:49:db:e7:46:69:ff:
a1:7f:2d:7b:4f:0d:65:b3:6a:cc:5c:37:3f:55:53:
90:f8:6d:4b:54:3e:72:82:cd:7c:0e:73:f8:0c:ee:
de:e3:f3:d3:4b:4e:61:5c:7d:3d:03:0b:3d:0a:e0:
77:69:26:1e:29:db:29:2d:ab:06:f2:39:7b:a3:e8:
0a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:98:79:0A:1F:FE:0B:9C:09:C3:03:CD:87:C9:1F:01:41:F5:A4:0E
X509v3 Authority Key Identifier:
keyid:DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:42:06:26:a8:c0:f0:2a:63:70:64:44:fc:5c:cd:a0:ce:67:
4e:94:8f:dd:c4:82:d7:7f:e3:3a:85:db:e1:5f:17:e8:14:43:
11:0c:a6:88:78:7f:1d:6b:a8:11:6a:3b:b5:df:ed:b6:e3:a6:
a7:b0:74:3d:4f:5c:62:cf:87:48:52:96:49:4d:a8:fd:4c:31:
ad:2a:e2:06:2d:6b:72:57:84:f4:25:34:1e:f5:dd:3f:4d:3a:
81:15:ec:ec:1d:86:c1:a7:0b:18:1d:a2:53:b0:7a:24:b5:a2:
d9:69:d6:2f:17:d7:7b:33:fd:f1:c9:94:18:d3:78:5e:13:39:
7a:c5:90:83:53:29:d0:de:df:a0:f6:10:2b:83:59:19:5c:41:
0e:5f:44:6f:89:4c:f9:6e:6c:6f:57:68:50:69:61:43:e3:85:
a9:7d:4f:17:b7:f3:e7:35:2f:61:ba:d1:7b:d4:99:5e:a7:46:
c6:63:9c:86:c3:56:15:c8:98:b5:a3:36:aa:d3:20:a5:df:23:
8c:32:99:3d:ab:97:0a:c9:9e:de:c3:02:9d:22:a3:40:5e:4a:
c1:71:c1:d7:93:6c:fd:7b:76:dc:8c:e0:e5:2d:ea:91:97:b6:
9a:ae:a9:1b:30:0e:eb:a3:61:b5:03:c8:75:7c:c1:47:41:b1:
b0:a4:3a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:23:46 2026 by rpki-client