
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft
File: GTTTDoaMK2LqebeYJrIco-4_N0M.mft (raw, json)
Hash identifier: 1Wcj8p7+4CDI7uzHa5M3x5Na06xK/7YsPZfKDQovWEQ=
Subject key identifier: 45:81:3A:93:52:CB:A0:BB:BD:F3:9F:F6:E3:26:14:7E:86:81:A0:EF
Authority key identifier: 19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43
Certificate issuer: /CN=A9180FA7/serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743
Certificate serial: 0686
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft
Manifest number: 0678
Signing time: Wed 20 May 2026 22:36:23 +0000
Manifest this update: Wed 20 May 2026 22:36:23 +0000
Manifest next update: Wed 27 May 2026 22:36:23 +0000
Files and hashes: 1: GTTTDoaMK2LqebeYJrIco-4_N0M.crl (hash: JfknM+q+/+ZsetKZp7fDms3xGWkrGypB5ozoHorM0wk=)
2: B8EDCB8AC2BC11EBBE9DCF73C4F9AE02.roa (hash: XRwMcTTjDSOyyFcTOr569HHxdOSez2lS7/TiiRb8AfY=)
3: B84C93B4C2BC11EBBE9DCF73C4F9AE02.roa (hash: 9yH2+FodspDw31oxNEYyVZycbfH+KJq1bVEhsaIpFY4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl
rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1670 (0x686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180FA7, serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743
Validity
Not Before: May 20 22:36:23 2026 GMT
Not After : May 27 22:36:23 2026 GMT
Subject: CN=6a0e3767-db99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:87:88:75:1f:4a:0c:03:4e:7b:3f:8f:f1:01:
b1:cf:67:af:dd:1d:aa:a1:05:22:55:2b:38:84:6c:
c5:8c:82:ad:a2:10:dd:d5:9e:f8:af:4b:ad:f4:e5:
db:d5:00:a7:ba:60:09:ed:e2:f5:2f:32:77:d9:26:
9f:7c:24:05:58:6e:f9:f2:27:e1:76:75:8f:8e:ca:
3d:57:ac:8e:e4:35:09:f6:df:7b:6a:fc:6c:f0:fc:
db:46:43:7a:4f:26:d2:01:7c:73:a6:d1:60:04:08:
b3:b3:01:f4:14:2c:df:32:59:db:4f:13:4c:42:6c:
db:ed:bf:45:64:b5:6b:d1:9b:90:17:d0:48:bd:68:
6b:c4:3e:d2:2c:2b:1c:6a:88:25:02:ca:90:fd:0f:
ea:ef:40:af:12:f1:f5:b9:3f:b7:a7:7a:b8:70:98:
df:9e:f0:49:54:07:26:b3:48:00:e7:c7:5a:98:11:
3b:53:e1:b0:96:9f:58:91:7d:4a:23:b6:48:5c:d5:
1e:e7:3a:e0:c3:02:ea:9b:dc:9d:6b:79:8a:8a:1c:
6b:54:e2:60:a4:04:1e:dd:da:b4:e7:db:eb:9a:21:
ef:d2:6a:89:2d:8d:6d:4e:e9:56:07:3a:87:2e:8d:
48:ae:5b:a1:5b:a4:4e:3d:51:c5:e4:8e:06:29:0c:
77:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:81:3A:93:52:CB:A0:BB:BD:F3:9F:F6:E3:26:14:7E:86:81:A0:EF
X509v3 Authority Key Identifier:
keyid:19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:42:7d:fe:5f:ed:0a:f2:f8:c6:dc:aa:8c:72:6a:86:87:b0:
e5:ef:a3:28:38:8a:04:0d:e2:bd:5d:7f:98:fd:1c:7c:92:e2:
80:27:85:55:a2:a6:ab:2d:8d:29:68:11:0b:81:af:26:c6:99:
e0:df:83:e3:98:10:b0:53:a3:2d:dd:65:3c:9c:ef:88:ea:8e:
bc:0b:7f:dd:ab:be:f8:df:67:c7:bc:22:58:34:20:1d:6b:7d:
9c:31:34:f4:44:dc:88:f8:f9:e5:5b:6d:44:67:24:b5:6c:06:
a9:dc:81:39:38:c9:a4:29:e1:d2:20:a0:1a:93:25:35:c6:72:
39:2c:c6:d1:66:0e:fb:39:3b:26:5f:ea:bf:19:fa:2e:63:80:
54:a1:e4:f9:fa:21:40:eb:bc:b3:67:34:ba:5c:2b:ec:db:25:
e8:3f:b1:42:f7:e8:1e:8c:6f:66:c8:5b:f1:c9:96:9e:2b:0a:
c9:e4:37:cf:c4:9f:8f:d2:76:58:76:19:d0:b7:55:7c:a3:04:
f8:7d:de:dd:21:71:16:6f:cd:d2:b8:1f:c1:d3:db:f1:67:f9:
c1:3d:5f:ed:e2:29:7c:2a:d2:77:b4:47:79:53:22:ef:df:d6:
3e:04:9e:a8:06:7d:21:84:34:02:f1:8d:fe:68:df:51:fb:01:
cc:cf:93:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:54 2026 by rpki-client