
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
File: gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft (raw, json)
Hash identifier: xQm8q6Hb/u2zaaIKXj/z/gKoFefO4XtITZ96c5beV10=
Subject key identifier: AC:C1:20:FC:1E:4E:65:7D:BB:AC:3B:B0:EB:26:E0:68:DD:0D:39:CA
Authority key identifier: 81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B
Certificate issuer: /CN=A9160602/serialNumber=818359BCA0F673B7816003FBB89B6537A948075B
Certificate serial: 0295
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
Manifest number: 028E
Signing time: Wed 19 Aug 2026 02:16:03 +0000
Manifest this update: Wed 19 Aug 2026 02:16:02 +0000
Manifest next update: Wed 26 Aug 2026 02:16:02 +0000
Files and hashes: 1: gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl (hash: WZyzk/hfT/dFZqsl3xxmW0r5LE4LXff8oDpeR69oEeg=)
2: 2DF8935CAFB411ED8D33ED1FC4F9AE02.roa (hash: +5NtTIbwxadnHyBDEpFgjHeGeTXoY+U2ZLT+JTTuGQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl
rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661 (0x295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160602, serialNumber=818359BCA0F673B7816003FBB89B6537A948075B
Validity
Not Before: Aug 19 02:16:02 2026 GMT
Not After : Aug 26 02:16:02 2026 GMT
Subject: CN=6a8511e2-e3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f8:4e:60:fa:53:04:6c:a6:d7:ce:5d:f2:e2:
64:df:b7:fd:fe:96:81:f2:cf:6a:47:1c:20:58:08:
c4:c9:67:9d:66:23:26:29:52:d3:e5:14:b6:0e:d0:
75:9f:8e:1a:29:5f:b9:4a:6e:dd:e4:43:bb:4d:5d:
20:7b:5e:7b:10:1c:42:cd:cc:64:40:40:99:49:25:
8d:02:da:c5:fd:62:6d:51:8e:50:ea:c4:5f:bd:4c:
41:a2:65:00:32:ea:5b:4c:04:54:40:28:66:48:be:
a1:6e:dd:f0:12:2b:de:25:c4:8e:98:e1:99:00:bb:
3f:d0:a4:8b:00:c4:72:61:bc:fd:c1:cc:94:9d:49:
5c:ad:64:c9:6e:c8:b0:e7:09:ef:ca:89:5c:08:fe:
c9:ea:87:90:1b:f1:cc:92:76:85:1d:fa:25:89:04:
34:1f:ff:80:04:52:f8:4d:22:23:95:3e:ff:61:f8:
df:4e:36:4d:00:ab:b0:b0:8c:a9:9f:e3:84:bc:21:
e4:95:05:be:12:f6:37:ce:bf:8d:29:94:4c:26:7f:
a2:52:31:87:13:ff:21:91:ca:74:06:e6:c5:64:63:
5b:54:c0:88:07:ff:8d:07:de:bd:ed:1e:46:46:4b:
7b:e6:c2:15:40:b5:2e:7b:9d:b7:fa:21:3d:fb:58:
00:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C1:20:FC:1E:4E:65:7D:BB:AC:3B:B0:EB:26:E0:68:DD:0D:39:CA
X509v3 Authority Key Identifier:
keyid:81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ef:42:66:b6:15:5f:d7:f6:73:ba:31:cb:22:41:ea:de:d3:
85:6a:b3:7f:ad:0f:8e:71:0a:a7:e2:30:bc:e1:b1:c8:5a:65:
91:30:e2:72:20:12:e1:bf:ce:52:91:4b:0e:eb:93:0a:ab:0f:
d6:7e:23:c8:02:30:c9:04:3a:53:a3:d8:bc:b6:a2:35:a6:f3:
99:ab:d7:9d:b3:85:06:5f:6a:6d:f0:78:1f:6f:35:58:b1:49:
05:18:c6:d0:82:61:e0:d1:ab:62:4d:41:a1:10:09:3a:cc:aa:
33:41:20:b1:f4:76:8a:2e:b1:0a:3c:e7:20:3d:74:7f:6a:f7:
6c:ae:ec:db:6d:a4:9a:92:68:98:88:58:74:fd:ce:a6:4d:ad:
62:b7:1e:6a:df:67:77:ed:8a:32:10:66:72:0b:02:43:e5:25:
7d:af:9d:37:bd:14:c3:d9:a7:83:3c:67:f3:e6:a3:a2:cb:74:
a5:ff:53:4b:bd:44:41:2a:0e:ae:04:91:e2:a6:59:be:e6:e0:
00:74:d7:69:cc:eb:8f:51:5b:58:2e:9f:6d:d9:51:93:16:09:
3e:f6:cb:80:93:f9:ee:86:33:bf:eb:a2:cd:35:67:bd:82:8a:
cd:67:ab:0e:44:c7:94:0a:3f:63:bc:5a:9d:79:86:39:e0:31:
6e:17:85:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:04 2026 by rpki-client