
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
File: gOPDrlGaTxg3WsakP1N6hf96KoI.mft (raw, json)
Hash identifier: Usm5lMZOjE/Ban2o98qOu9+V70sq8MjTwGqyNCYIFd8=
Subject key identifier: 1F:57:61:56:48:20:57:27:D3:91:EE:88:C6:20:02:DD:14:2A:D3:B4
Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
Certificate issuer: /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Certificate serial: 1295
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
Manifest number: 1285
Signing time: Tue 04 Nov 2025 17:11:13 +0000
Manifest this update: Tue 04 Nov 2025 17:11:12 +0000
Manifest next update: Tue 11 Nov 2025 17:11:12 +0000
Files and hashes: 1: gOPDrlGaTxg3WsakP1N6hf96KoI.crl (hash: JqQ9Y0p9l8N9/axQUK7NjAADV4zQBh04jvcNQZnNKng=)
2: 98281C68C74D11EFBDEB795AC4F9AE02.roa (hash: AIVNJI4ml2hm0sk+tjU7ezgPrM6ruoUwi1BLVLUi/kc=)
3: 54EA0F76D36B11EBADF6AD2CC4F9AE02.roa (hash: kdp5b4Y2u+teTC9uos3HG7iOUgfSi1ENZs4RBMTxPNs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4757 (0x1295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177358, serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Validity
Not Before: Nov 4 17:11:12 2025 GMT
Not After : Nov 11 17:11:12 2025 GMT
Subject: CN=690a33b1-ca57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a0:64:dd:56:90:f8:4b:f5:d6:db:ee:f2:aa:
84:02:51:08:f1:89:47:67:ff:ec:f7:d0:d0:91:ef:
e8:2b:ad:97:24:fa:c1:58:80:fe:30:21:48:4d:9e:
1c:85:c8:d1:f9:57:89:be:66:d9:e3:8d:e9:c3:55:
7f:00:97:1d:b7:a9:99:70:5c:84:03:2d:59:08:a3:
62:3d:d2:93:1a:ed:93:0b:ea:1e:5d:86:02:6d:d8:
eb:9c:cb:5b:9e:d3:3d:95:5a:62:c9:e5:ce:ee:02:
f8:30:a0:b3:eb:f8:b3:38:21:d7:87:f1:58:d5:65:
22:89:e5:22:fe:69:c4:1b:3f:54:f6:98:8d:31:f1:
41:f3:54:ef:42:22:3a:00:25:2d:d5:a8:56:99:01:
05:51:a8:01:25:99:37:5d:fd:30:64:e8:38:38:39:
01:82:eb:af:0f:da:af:9d:70:6a:2b:6c:29:88:29:
5f:57:98:cd:2b:a0:2c:44:b5:32:58:fe:85:82:aa:
2d:2f:0c:18:0e:94:8c:7b:54:f7:a4:04:d2:ef:47:
fa:53:9d:9f:1b:9b:90:3d:ed:c1:ed:e4:a7:7a:7a:
6f:7d:ca:04:d3:8d:cc:fa:12:e3:35:17:3c:56:ed:
da:14:c2:2f:9c:eb:6e:29:ba:3d:c4:d0:92:b2:34:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:57:61:56:48:20:57:27:D3:91:EE:88:C6:20:02:DD:14:2A:D3:B4
X509v3 Authority Key Identifier:
keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:40:b7:89:e9:0a:7d:62:5f:7a:56:36:73:0b:6d:bd:58:66:
c8:fb:08:22:db:5a:4d:dd:9a:3e:60:3b:8e:b2:7a:fe:99:0c:
2f:0c:35:11:cf:d7:18:22:78:30:0a:b8:82:56:71:05:87:57:
98:19:d2:45:90:a0:cd:69:4b:da:13:c3:fa:22:95:4a:0f:15:
d2:c8:ef:53:31:5c:ab:1a:21:0f:b3:12:6a:cf:9f:3f:49:97:
1f:51:3d:f3:af:cc:ed:db:5e:bd:85:5b:d4:61:fc:9a:a8:0a:
6e:7b:52:7d:e7:12:b3:71:fb:55:13:30:bd:bc:c1:70:cc:78:
4b:e9:36:7e:19:44:87:0c:b9:ae:7f:2d:53:ff:31:1f:9a:e7:
55:f1:d6:8d:1a:92:7d:9e:63:93:d2:0b:cc:bc:25:63:84:b6:
81:56:35:66:73:b2:52:6d:26:4f:be:35:aa:ac:5f:86:2e:d4:
ab:4e:d2:0a:26:50:4f:ee:ad:8b:85:1b:e9:ab:72:03:c3:90:
0f:c3:3d:4c:57:88:e3:63:70:11:b0:80:0f:fa:c2:dd:c1:03:
4d:55:9c:37:52:9b:9b:38:ee:2c:d6:e1:53:d6:dc:bd:ee:d4:
0b:63:13:35:79:3b:b4:8c:ef:31:fe:fb:9d:2b:d8:b3:d7:18:
69:ad:40:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:39:30 2025 by rpki-client