
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft
File: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft (raw, json)
Hash identifier: 725EuLs1tDyE3Y37St8l2anR2lQD/LaB2VO7O23aDA4=
Subject key identifier: 98:CA:35:BA:9D:2B:80:08:92:2F:BE:4E:4F:2B:5F:8F:90:75:90:29
Authority key identifier: DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82
Certificate issuer: /CN=A9185D4E/serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282
Certificate serial: 013D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft
Manifest number: 0135
Signing time: Thu 21 May 2026 05:33:32 +0000
Manifest this update: Thu 21 May 2026 05:33:32 +0000
Manifest next update: Thu 28 May 2026 05:33:32 +0000
Files and hashes: 1: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl (hash: WBbZV7VzYR/Tzb+r+jILauBYDF7KDKPERM2E3hwHpV0=)
2: 75B289249B4311EFA6D2403DC4F9AE02.roa (hash: CxmUBgoG5/CyJ4oi5OpIVw7Gs4zM12EJJkWMArPlfVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl
rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D4E, serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282
Validity
Not Before: May 21 05:33:32 2026 GMT
Not After : May 28 05:33:32 2026 GMT
Subject: CN=6a0e992c-87bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:02:30:be:95:fa:b6:3d:b6:de:b2:46:c7:
e7:0c:99:c5:13:43:2e:e0:03:62:ca:a9:51:7d:5d:
02:bb:1e:fc:28:08:88:69:e8:81:e5:50:f3:a0:c2:
fd:d5:32:4c:d3:98:7f:db:33:a6:f4:2c:3a:de:40:
ed:c5:63:46:b7:b3:4f:7a:28:74:1a:f0:a5:27:ea:
da:54:ee:64:ca:68:cd:14:79:74:ce:5a:df:96:cb:
92:d1:62:ff:f0:16:29:2e:df:ce:c9:f9:b8:fb:d6:
9a:07:20:04:b6:7d:e6:fc:ec:62:b3:ce:22:94:54:
e8:28:8c:97:82:f1:6b:3a:64:39:23:cd:ec:d8:11:
09:cc:ea:d7:36:de:d7:dc:d2:c7:c0:41:83:2b:1f:
64:a9:f6:be:9a:f5:52:19:35:b8:d8:93:85:06:73:
44:97:c7:c8:fe:92:57:52:69:12:5f:32:0a:0a:fa:
ae:cf:f6:1e:54:f9:ae:bc:c4:06:2b:f5:aa:1b:80:
3f:e0:1c:cf:bd:2a:ee:3e:aa:86:6a:3f:7d:88:9c:
69:19:9d:79:4d:df:f5:7c:2d:cd:23:ce:68:be:8b:
63:01:24:30:9f:df:28:04:b0:27:66:05:6d:eb:c7:
e9:10:88:5a:d8:b3:d0:4c:59:10:8a:e7:ac:d5:f0:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CA:35:BA:9D:2B:80:08:92:2F:BE:4E:4F:2B:5F:8F:90:75:90:29
X509v3 Authority Key Identifier:
keyid:DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0e:91:50:45:47:9d:5d:0c:2e:fd:13:a4:e7:a5:3e:d3:e4:
17:f0:57:e9:eb:a9:f9:67:9b:0f:2d:84:9e:d1:f8:7d:07:39:
70:10:a6:04:10:3c:60:38:dd:59:b8:e0:73:2c:c8:b3:fc:11:
89:fe:d7:d8:25:6c:22:59:c7:ba:6d:a6:2d:44:51:1e:3a:af:
5a:d3:d9:a7:2c:23:c7:b2:35:81:61:81:3c:b6:de:ac:dc:de:
ee:d5:b4:86:cf:af:2b:44:0d:42:83:d5:d4:a8:71:4f:7e:5c:
bd:a1:c4:bc:e7:9c:19:a2:ec:e3:35:8c:59:28:90:dc:76:61:
72:b4:64:25:9f:4a:56:b2:c7:ea:6a:8a:ed:22:84:c9:69:b1:
d9:0b:46:e2:76:5c:aa:c3:68:ac:7f:d7:38:a0:b1:bf:46:e4:
74:d4:bd:ee:3f:52:3b:8b:97:c7:64:b7:05:86:90:d7:8d:01:
27:a9:1d:27:be:df:5c:d8:2a:0e:fb:bc:df:c6:75:82:77:b4:
46:0d:23:df:78:0a:9c:f9:e9:85:ba:bf:15:53:c1:9f:59:c4:
65:80:df:86:e3:93:32:49:77:1f:15:44:7c:e5:4f:8f:24:50:
e7:51:44:4a:32:d5:cf:a4:08:48:ef:45:b7:54:c8:7f:f5:50:
bb:3d:cd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:37 2026 by rpki-client