
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
File: gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft (raw, json)
Hash identifier: 81YWuVWcL1ldY03CeXU0oEZ2dyHpx7ib21Lq4qwhg6U=
Subject key identifier: 5B:FB:3F:D5:5F:80:42:C2:EB:D3:7C:4A:00:AE:22:0B:73:F7:C3:3D
Authority key identifier: 83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4
Certificate issuer: /CN=A9171669/serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4
Certificate serial: 031D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
Manifest number: 0317
Signing time: Sun 05 Apr 2026 00:55:12 +0000
Manifest this update: Sun 05 Apr 2026 00:55:12 +0000
Manifest next update: Sun 12 Apr 2026 00:55:12 +0000
Files and hashes: 1: gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl (hash: mtGLCDVYEHJY1yPRBCjxRGtA1ok8RlZCaq3Wz+hXD8s=)
2: 91BBC8880D9711ED8F09C27DC4F9AE02.roa (hash: 1aa3czYkpSyqjPONv8BwygAakzboZ9Kn6LCrFEhTJOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl
rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 797 (0x31d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171669, serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4
Validity
Not Before: Apr 5 00:55:12 2026 GMT
Not After : Apr 12 00:55:12 2026 GMT
Subject: CN=69d1b2f0-ede6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8a:d2:44:c1:9a:48:68:be:ea:0c:3d:0b:9e:
05:dd:a7:30:54:6e:3c:41:b2:03:9a:49:8d:26:7c:
17:d5:e5:f6:cb:ce:af:f1:e9:e1:8b:05:93:68:27:
2c:a0:de:67:76:1f:29:c6:67:c3:f7:8e:d9:7e:76:
0d:4b:7e:19:b1:6d:4a:67:ab:71:e6:8a:95:7e:a3:
9a:b6:55:eb:55:e0:02:82:34:4d:bb:90:fd:f9:88:
48:ea:65:e8:62:da:0e:6f:57:90:eb:0c:2d:95:47:
26:d9:c5:0e:b4:68:3c:9d:7e:c5:41:2c:e8:a9:9a:
80:c7:df:2a:84:25:a6:2e:ab:d4:fe:b9:e1:e7:0c:
a4:83:ca:f8:39:92:4e:91:09:d5:7c:c4:c9:c6:af:
e0:95:f7:7f:b6:67:bd:7f:e9:71:e6:02:98:7a:73:
c8:6c:bb:c9:4a:c3:f9:9b:4f:c0:36:74:12:90:8f:
5f:15:b8:6b:3a:4a:a6:a2:eb:74:ab:f9:cb:b2:b4:
12:70:3f:da:31:e5:7f:7d:03:b9:f0:4a:c0:f1:2d:
ef:c1:3e:66:0b:a5:e1:eb:ca:0b:20:84:dd:21:59:
5d:79:be:d1:25:40:6b:43:03:b1:1b:00:50:be:75:
65:8d:4d:83:7a:d8:3e:95:a5:9a:d7:0b:a8:de:41:
7e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FB:3F:D5:5F:80:42:C2:EB:D3:7C:4A:00:AE:22:0B:73:F7:C3:3D
X509v3 Authority Key Identifier:
keyid:83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e4:85:a8:58:8f:11:ba:2d:2e:08:60:7c:a6:8b:3a:a1:eb:
da:75:a1:ef:b7:fe:f7:6c:68:6a:6f:7e:cd:c2:d0:b9:0b:05:
d8:4c:70:39:95:ea:1b:c8:9d:02:62:0e:3d:21:a7:da:cd:34:
95:12:6e:03:5b:c2:ae:b5:21:bf:7d:06:c8:4d:a6:95:e1:30:
92:72:7a:28:f4:e4:c2:c1:51:65:96:bc:7e:41:e2:3d:83:76:
b2:05:e1:b8:e9:ab:c7:97:fb:8f:6a:08:a5:55:b6:be:fa:a4:
9f:a6:f1:14:a4:14:2e:cb:99:7d:08:73:29:60:59:a1:f1:3b:
eb:2c:e3:7e:d4:0e:da:30:09:16:06:45:94:06:27:37:1c:83:
39:4b:e8:45:73:8b:1d:56:67:0f:80:e9:17:37:87:38:b2:ff:
b0:bf:59:34:30:54:03:45:38:38:f4:15:67:22:71:bd:c3:33:
e1:b6:16:5e:3c:e3:c4:c6:d8:53:3f:91:0a:c2:c9:67:9f:57:
ff:ef:97:24:42:3b:d2:af:46:e6:fb:e4:00:10:e5:d3:63:72:
2f:b7:88:37:c6:bf:c0:c9:41:95:65:b4:9e:58:e6:7c:da:22:
b3:01:cf:40:17:5a:c8:2a:e0:a0:9f:83:aa:7e:f9:c2:6c:dd:
f4:49:3a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:23 2026 by rpki-client