
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
File: gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft (raw, json)
Hash identifier: SNN9K2KZ3C0FvJrt4U+3+VAtCRzjtAs0Z0bKfIPNPQM=
Subject key identifier: 8E:9C:C7:53:75:AA:18:B2:CD:A5:01:09:93:AC:A8:70:31:1D:F3:92
Authority key identifier: 81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B
Certificate issuer: /CN=A9160602/serialNumber=818359BCA0F673B7816003FBB89B6537A948075B
Certificate serial: 0251
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
Manifest number: 024A
Signing time: Sun 05 Apr 2026 01:54:42 +0000
Manifest this update: Sun 05 Apr 2026 01:54:42 +0000
Manifest next update: Sun 12 Apr 2026 01:54:42 +0000
Files and hashes: 1: gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl (hash: zU9C0S4mr7zeZ01VUR++L65aIFSTXotSHhQWfYJDDc8=)
2: 2DF8935CAFB411ED8D33ED1FC4F9AE02.roa (hash: +5NtTIbwxadnHyBDEpFgjHeGeTXoY+U2ZLT+JTTuGQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl
rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160602, serialNumber=818359BCA0F673B7816003FBB89B6537A948075B
Validity
Not Before: Apr 5 01:54:42 2026 GMT
Not After : Apr 12 01:54:42 2026 GMT
Subject: CN=69d1c0e2-3a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:40:95:d1:f5:f0:e7:3a:25:ea:d9:06:5d:48:
c8:64:7d:d2:4c:46:9b:89:87:e6:b5:d7:0e:cc:a6:
17:f1:93:95:a6:cf:71:5e:7c:b9:7c:bb:23:f5:1d:
8e:e2:24:8b:c6:3d:fd:18:89:31:e8:28:de:4f:c4:
90:a3:52:29:de:60:a2:49:49:f3:a8:2c:e0:98:b6:
2d:04:96:5d:37:fe:87:3d:a6:52:21:e8:b6:2a:62:
ec:2c:c2:67:12:a5:dd:eb:c4:57:83:98:8b:0b:7b:
fe:41:2a:84:48:67:01:38:5b:8f:39:48:e8:5f:49:
b5:e7:6a:a5:dc:08:95:15:ad:da:c0:b1:cc:cd:20:
82:32:8f:c3:05:8e:de:9d:5a:64:8c:97:d8:5f:ec:
ab:72:b3:e1:06:90:6f:d0:9c:b2:d4:25:43:21:e3:
df:b3:66:25:d7:4d:4b:3c:87:61:af:7c:29:46:3b:
8b:92:af:9c:fd:46:c4:32:ea:49:71:77:e4:db:08:
9c:c6:c5:11:a7:22:db:6e:ea:94:5b:4c:33:f7:c4:
cd:ed:bd:04:b9:7d:be:fe:0b:ba:d9:fc:6e:70:1c:
21:54:e8:db:34:46:8f:6c:0a:88:8a:dc:af:a9:51:
47:32:17:ef:ef:d9:6b:14:20:66:ef:6c:7a:42:10:
13:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9C:C7:53:75:AA:18:B2:CD:A5:01:09:93:AC:A8:70:31:1D:F3:92
X509v3 Authority Key Identifier:
keyid:81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:84:f1:74:15:85:c3:7f:2f:ce:05:f8:9a:a1:a9:b1:4a:f6:
76:26:74:db:41:db:ae:f2:55:b0:b0:cb:15:cb:1d:84:5c:9d:
99:70:39:d0:e6:fa:a9:7a:e4:59:74:11:92:0c:5c:97:0b:88:
30:2b:1e:b8:a1:46:85:a3:18:b1:2f:ea:2d:32:94:33:d0:02:
d0:1d:8c:0d:c7:b2:cc:95:3c:70:98:9f:18:cc:6f:b2:66:1f:
97:37:df:d5:47:c3:67:82:c6:1c:ce:69:6d:cb:24:2a:a9:83:
e1:64:31:da:83:c3:20:8e:2d:5a:3d:1c:6d:d5:37:16:ac:1a:
e7:17:4d:b4:1d:87:9b:d4:b9:fc:cf:ad:3c:fc:8e:d0:a4:20:
f2:9a:2a:db:ec:aa:e8:21:89:88:e6:f3:f4:45:bb:b2:71:31:
0d:9d:99:68:50:1d:69:b5:62:db:b1:dc:6a:19:a2:5b:df:01:
55:b7:62:19:a2:8d:27:7a:4d:2a:11:74:c4:56:37:d6:df:dc:
29:1c:76:3f:3b:d9:60:0e:27:d8:43:07:e7:af:dc:53:9f:6f:
8c:87:f9:46:44:e8:27:20:02:8e:12:ce:a9:86:2e:db:2e:e4:
cc:87:72:84:d2:7c:c8:19:ed:3a:60:e2:39:37:a9:af:e2:81:
8c:5d:65:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA2MDIxMTAvBgNVBAUTKDgxODM1OUJDQTBGNjczQjc4MTYwMDNGQkI4OUI2NTM3
QTk0ODA3NUIwHhcNMjYwNDA1MDE1NDQyWhcNMjYwNDEyMDE1NDQyWjAYMRYwFAYD
VQQDEw02OWQxYzBlMi0zYTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzkCV0fXw5zol6tkGXUjIZH3STEabiYfmtdcOzKYX8ZOVps9xXny5fLsj9R2O
4iSLxj39GIkx6CjeT8SQo1Ip3mCiSUnzqCzgmLYtBJZdN/6HPaZSIei2KmLsLMJn
EqXd68RXg5iLC3v+QSqESGcBOFuPOUjoX0m152ql3AiVFa3awLHMzSCCMo/DBY7e
nVpkjJfYX+yrcrPhBpBv0Jyy1CVDIePfs2Yl101LPIdhr3wpRjuLkq+c/UbEMupJ
cXfk2wicxsURpyLbbuqUW0wz98TN7b0EuX2+/gu62fxucBwhVOjbNEaPbAqIityv
qVFHMhfv79lrFCBm72x6QhAT1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6cx1N1
qhiyzaUBCZOsqHAxHfOSMB8GA1UdIwQYMBaAFIGDWbyg9nO3gWAD+7ibZTepSAdb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDYwMi9GQkNDODk3Q0FG
QjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3ZUJZQVA3dUp0bE42bElC
MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dZTlp2S0QyYzdlQllBUDd1SnRsTjZsSUIxcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDYwMi9GQkNDODk3Q0FGQjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3
ZUJZQVA3dUp0bE42bElCMXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEoTxdBWFw38vzgX4mqGpsUr2diZ020HbrvJVsLDLFcsdhFydmXA50Ob6qXrk
WXQRkgxclwuIMCseuKFGhaMYsS/qLTKUM9AC0B2MDceyzJU8cJifGMxvsmYflzff
1UfDZ4LGHM5pbcskKqmD4WQx2oPDII4tWj0cbdU3Fqwa5xdNtB2Hm9S5/M+tPPyO
0KQg8poq2+yq6CGJiObz9EW7snExDZ2ZaFAdabVi27HcahmiW98BVbdiGaKNJ3pN
KhF0xFY31t/cKRx2PzvZYA4n2EMH56/cU59vjIf5RkToJyACjhLOqYYu2y7kzIdy
hNJ8yBntOmDiOTepr+KBjF1l5Q==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:04 2026 by rpki-client