
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
File: gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft (raw, json)
Hash identifier: nVJZKxpYc5T7GOTec2wsXAeJtxIlYXztcr9/+iVRv9s=
Subject key identifier: 15:56:75:E7:A2:A9:56:05:1F:7E:61:31:24:E3:0F:09:17:E7:A7:34
Authority key identifier: 81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E
Certificate issuer: /CN=A916BC97/serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
Certificate serial: 09C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
Manifest number: 099F
Signing time: Tue 06 Oct 2026 20:07:35 +0000
Manifest this update: Tue 06 Oct 2026 20:07:34 +0000
Manifest next update: Tue 13 Oct 2026 20:07:34 +0000
Files and hashes: 1: gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl (hash: ESMUb7mWzBq97g0nSwymlSsGpKvlTg1DbgS318dKxMg=)
2: 50998080BCE911EAA0114B70C4F9AE02.roa (hash: BqSvuHBJnIFo2nza0v/IBlEcyJ06tW+FBomYs647wGg=)
3: 8867D06A4D8211EF8C95A448C4F9AE02.roa (hash: NtP1TSQFc4+H3iLDCcwfxfBmUZmSonhe1ezKoE5YhGg=)
4: 07D1B6FC38CF11F1A1A095919E833773.roa (hash: ZkQAnp0lRERbmMA1/RjVQsfhBU7hZ8rgz7dbI/EiSA0=)
5: 5FFD91DA352211F1950FCB59A6833773.roa (hash: 97b78IUrIqrRhaDv4NX6CINMpODfe1VZFxZZ6iZOUlM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl
rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2499 (0x9c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BC97, serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
Validity
Not Before: Oct 6 20:07:34 2026 GMT
Not After : Oct 13 20:07:34 2026 GMT
Subject: CN=6ac55507-981d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0a:05:6c:32:4f:e8:cf:c4:f9:65:31:69:ca:
a2:ea:ec:eb:f5:67:ce:d7:ef:54:ee:36:86:68:d4:
2e:d5:a7:a4:61:1c:a1:8b:fd:a5:78:8d:9e:4d:42:
1f:c8:e4:ff:3d:09:b4:5c:21:bd:9f:6c:db:d9:d5:
8b:6f:07:1e:c4:e1:51:5a:ad:94:42:28:67:a3:cb:
35:c9:ec:9f:03:fa:93:ab:af:ca:50:e8:5e:f9:90:
3d:46:64:9d:ad:74:66:5a:5a:7c:7a:0d:9f:21:69:
bd:49:bb:d5:04:28:8c:14:61:19:be:42:73:49:c8:
09:d9:b1:5d:e0:61:05:ff:e3:8d:5e:bb:80:47:70:
7d:03:81:81:73:73:2a:f0:45:0c:f3:f8:44:27:b3:
3c:83:ca:ea:00:36:66:94:2d:69:1d:91:99:5c:b7:
d6:41:c4:86:2e:b3:cc:60:e3:93:83:bb:22:9a:e2:
55:e7:df:44:09:ad:e6:fd:87:18:95:f9:71:91:00:
44:06:57:40:32:5b:36:e2:b5:9f:89:f4:83:ae:4a:
ec:99:17:9c:38:d1:76:fc:f5:38:a7:45:e5:62:c6:
52:da:29:df:e9:77:83:ea:c6:28:b5:c7:f2:e5:c9:
27:ba:e6:a0:7a:32:a8:13:26:c4:e6:b1:c1:65:94:
aa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:56:75:E7:A2:A9:56:05:1F:7E:61:31:24:E3:0F:09:17:E7:A7:34
X509v3 Authority Key Identifier:
keyid:81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:94:80:c8:1d:85:c3:4a:f2:b4:45:c1:03:4d:aa:d2:b1:36:
cc:b6:c4:de:ee:92:03:5a:9b:fe:1d:00:85:78:c4:cc:21:4c:
29:9b:13:21:dd:06:8c:f8:4d:4c:7d:2a:98:f9:24:9d:13:f1:
12:8f:36:7a:14:ab:42:91:00:6e:25:19:43:30:c8:67:82:a9:
d8:7d:71:32:66:07:9d:5c:55:44:b0:5f:0a:de:48:a1:51:01:
f4:d7:4f:60:c0:2f:47:ee:05:f2:24:f6:89:5d:77:d8:03:33:
76:ab:85:4b:90:4f:f3:04:60:da:14:66:36:f9:70:6f:d4:29:
8b:ad:6f:10:1b:1d:2f:d8:8f:aa:f3:dc:da:58:b8:a3:96:d3:
3b:24:4e:55:b9:96:8a:2d:85:47:f8:48:a1:ab:75:5c:bd:86:
1b:75:42:3d:7e:a4:fc:1e:53:56:0a:79:30:0d:7f:ad:07:ed:
01:b1:ff:0b:d5:58:99:0f:cd:7d:2a:c1:64:f0:6b:d7:f1:9f:
d9:b4:85:2b:61:f3:4a:30:56:e1:50:58:ed:ec:41:c0:28:5e:
da:9c:73:bb:5b:3d:74:28:2a:1d:5c:c6:94:94:53:0a:cd:f6:
36:36:ce:48:16:92:79:dc:02:73:14:5e:b4:6b:3c:eb:86:e0:
88:0a:11:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:39:16 2026 by rpki-client