
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
File: gOPDrlGaTxg3WsakP1N6hf96KoI.mft (raw, json)
Hash identifier: 9uzaoLC2ygodhq7XEdBi4Fj7dJTc6CFG5pxqvkNbL3E=
Subject key identifier: BE:7C:6F:06:5C:9F:21:5D:46:AB:04:EA:A9:31:AB:E0:DB:A5:F3:95
Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
Certificate issuer: /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Certificate serial: 1357
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
Manifest number: 133B
Signing time: Sun 04 Oct 2026 17:02:00 +0000
Manifest this update: Sun 04 Oct 2026 17:01:59 +0000
Manifest next update: Sun 11 Oct 2026 17:01:59 +0000
Files and hashes: 1: gOPDrlGaTxg3WsakP1N6hf96KoI.crl (hash: 1lTLgvk2DWdYCIaO5jov6vVrStgPjOTXSbTqYRSrlZk=)
2: FCE4373ECAA011F0BE834809C4F9AE02.roa (hash: tZukN75APhSScUoC/I4H/NT8GRXX5KYKrXgWcXFLnoo=)
3: 0E7E95E63C8B11F186364B569C833773.roa (hash: 5t+Odc3kzlHJOT49HQha5G542XKsnZRtShbX2b003G0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4951 (0x1357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177358, serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Validity
Not Before: Oct 4 17:01:59 2026 GMT
Not After : Oct 11 17:01:59 2026 GMT
Subject: CN=6ac28687-71cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:71:3c:71:0e:ed:b7:0b:13:80:3b:68:4f:74:
fc:0e:5f:cb:c3:5b:32:8e:fb:5f:bb:17:6b:29:e1:
07:b2:5c:9e:2c:cb:f7:59:f4:93:82:3c:db:67:e9:
fc:62:fc:75:af:b0:67:ed:a2:f4:6f:84:5c:04:ae:
1d:8e:9d:96:fc:d1:a3:fc:09:aa:6a:78:0e:7a:20:
cf:a0:44:a0:cc:60:9b:4f:3e:4b:83:3f:db:f5:05:
9d:83:8a:43:75:96:1b:46:7e:bd:df:1e:db:b4:1a:
44:48:80:87:f5:ab:67:1e:2a:c3:a9:eb:12:26:95:
59:4e:5c:ba:1d:df:b4:92:af:92:9f:50:1e:af:e9:
4b:6e:fd:de:63:50:3d:32:8d:66:65:0e:02:87:98:
59:0c:42:bc:bc:4e:10:99:ae:ac:f6:e9:c9:b4:93:
01:ed:a3:9d:a5:93:93:53:5d:b1:6a:3b:c3:50:9a:
84:e3:71:98:2b:0b:e4:94:eb:70:a8:db:17:e2:62:
cf:98:99:59:57:1f:99:5f:f1:00:ff:d9:6e:c1:a3:
32:36:bc:ff:60:9e:56:00:22:24:03:7e:f0:82:3a:
eb:e0:31:20:61:23:56:10:12:a4:0c:6e:7d:c7:05:
cd:cb:89:72:60:e4:4c:fa:80:3f:91:2b:a5:96:ff:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7C:6F:06:5C:9F:21:5D:46:AB:04:EA:A9:31:AB:E0:DB:A5:F3:95
X509v3 Authority Key Identifier:
keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:ec:23:2b:cd:b3:e7:bc:e6:26:9d:f0:28:6c:38:be:79:93:
28:11:8b:77:e4:4e:35:b4:48:e9:ce:e5:64:ad:35:bf:fe:ce:
d5:86:10:99:69:b1:56:e7:5d:b2:75:bb:0c:a1:c7:ad:94:45:
cb:4f:19:70:0a:15:8f:3a:dc:16:bb:f9:3f:f1:d3:ac:95:66:
a6:8b:e0:23:a1:32:ce:fa:86:8c:49:65:5f:f2:c5:50:92:41:
5d:12:4c:8c:2b:b9:c6:4f:46:24:3a:86:5b:c9:25:bc:88:c5:
ee:ac:21:13:e9:14:e7:b3:c1:86:c8:8b:d6:1d:d0:7d:ea:63:
37:78:be:79:dd:56:79:86:e0:19:df:f1:69:8e:ac:21:42:63:
7c:da:1d:a4:c3:4b:94:69:0c:ed:89:32:22:d1:5a:97:c7:00:
c7:09:b9:bb:c6:08:4a:02:c6:8a:d7:0a:a1:b3:d0:20:fd:06:
37:30:7e:5b:12:0a:57:bc:8e:9b:ec:7a:e7:4d:bd:d6:d9:0e:
ec:27:d3:29:67:12:98:77:bf:9b:d5:05:d6:0e:72:8f:1d:b5:
06:60:cb:20:48:18:68:66:5b:75:86:e6:ae:4e:57:e4:9b:9e:
82:8b:ae:62:ff:d5:3f:78:b1:a9:b9:fc:8d:2b:aa:1c:2e:0c:
a4:84:01:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzczNTgxMTAvBgNVBAUTKDgwRTNDM0FFNTE5QTRGMTgzNzVBQzZBNDNGNTM3QTg1
RkY3QTJBODIwHhcNMjYxMDA0MTcwMTU5WhcNMjYxMDExMTcwMTU5WjAYMRYwFAYD
VQQDEw02YWMyODY4Ny03MWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7HE8cQ7ttwsTgDtoT3T8Dl/Lw1syjvtfuxdrKeEHslyeLMv3WfSTgjzbZ+n8
Yvx1r7Bn7aL0b4RcBK4djp2W/NGj/AmqangOeiDPoESgzGCbTz5Lgz/b9QWdg4pD
dZYbRn693x7btBpESICH9atnHirDqesSJpVZTly6Hd+0kq+Sn1Aer+lLbv3eY1A9
Mo1mZQ4Ch5hZDEK8vE4Qma6s9unJtJMB7aOdpZOTU12xajvDUJqE43GYKwvklOtw
qNsX4mLPmJlZVx+ZX/EA/9luwaMyNrz/YJ5WACIkA37wgjrr4DEgYSNWEBKkDG59
xwXNy4lyYORM+oA/kSullv+khwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL58bwZc
nyFdRqsE6qkxq+DbpfOVMB8GA1UdIwQYMBaAFIDjw65Rmk8YN1rGpD9TeoX/eiqC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzM1OC9CRTg0RjA5NERE
MEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4ZzNXc2FrUDFONmhmOTZL
b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dPUERybEdhVHhnM1dzYWtQMU42aGY5NktvSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzM1OC9CRTg0RjA5NEREMEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4
ZzNXc2FrUDFONmhmOTZLb0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQOwjK82z57zmJp3wKGw4vnmTKBGLd+RONbRI6c7lZK01v/7O1YYQmWmxVudd
snW7DKHHrZRFy08ZcAoVjzrcFrv5P/HTrJVmpovgI6EyzvqGjEllX/LFUJJBXRJM
jCu5xk9GJDqGW8klvIjF7qwhE+kU57PBhsiL1h3QfepjN3i+ed1WeYbgGd/xaY6s
IUJjfNodpMNLlGkM7YkyItFal8cAxwm5u8YISgLGitcKobPQIP0GNzB+WxIKV7yO
m+x650291tkO7CfTKWcSmHe/m9UF1g5yjx21BmDLIEgYaGZbdYbmrk5X5Juegouu
Yv/VP3ixqbn8jSuqHC4MpIQBdw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:09:17 2026 by rpki-client