
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
File: gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft (raw, json)
Hash identifier: PRHqXKmJuTLqp8rIs+imfZBMfP/cxDQIF2+n06YKuhw=
Subject key identifier: FC:B7:F6:36:69:10:26:3F:29:5E:2C:84:E6:C6:47:43:55:26:32:07
Authority key identifier: 83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4
Certificate issuer: /CN=A9171669/serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4
Certificate serial: 037C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
Manifest number: 0375
Signing time: Sat 03 Oct 2026 01:08:33 +0000
Manifest this update: Sat 03 Oct 2026 01:08:33 +0000
Manifest next update: Sat 10 Oct 2026 01:08:33 +0000
Files and hashes: 1: gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl (hash: /9eVtzWS5Y5i1JPFzXUeIVPTSOIylbKrB2Nmv5ca+Ys=)
2: 91BBC8880D9711ED8F09C27DC4F9AE02.roa (hash: pq1sN488GNHUbs+EVGc5uH9VNIIGFOPoj1uisyqem+A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl
rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 01:08:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 892 (0x37c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171669, serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4
Validity
Not Before: Oct 3 01:08:33 2026 GMT
Not After : Oct 10 01:08:33 2026 GMT
Subject: CN=6ac05591-5fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:11:fa:f6:23:c7:cd:e7:2b:7f:3d:71:5f:
ae:09:0a:eb:a8:72:da:d6:3a:a1:35:7c:5f:5d:f0:
6c:2d:2a:de:3f:6b:85:fd:2a:44:79:a1:f1:8f:e0:
93:3b:c9:cc:ef:58:43:0c:71:f8:0f:75:f2:82:28:
a1:e6:f8:ab:17:41:03:91:9a:63:de:68:e0:7e:7d:
11:e3:68:56:53:46:e9:ac:83:9c:43:21:44:a0:93:
55:68:e0:55:d7:b1:bc:6d:a2:84:23:06:01:fe:37:
64:9f:4d:e9:de:a9:6b:3a:a3:cc:eb:cf:7a:25:e8:
3b:af:c4:51:8b:ab:b3:ac:d7:97:70:c2:9e:6a:b8:
ee:e9:41:72:a5:67:46:83:aa:31:a2:e5:93:79:f5:
20:69:8e:d0:4a:45:7d:bd:d1:6c:35:eb:52:a5:c9:
62:ff:0b:06:60:fd:7a:3c:3f:f9:84:92:70:b1:c7:
d9:59:af:20:76:ad:1f:d3:ae:ee:ef:9f:a3:72:47:
e5:58:21:1a:59:c9:ee:6d:e6:4d:27:c5:1f:7c:c7:
04:1f:fe:72:e3:33:5d:7b:4e:58:cd:51:6e:7a:bd:
a6:c5:91:1d:ac:83:04:67:5a:13:fd:81:8c:e2:27:
ad:b2:43:04:24:f3:23:65:0b:f8:9a:a7:0a:2c:6e:
84:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B7:F6:36:69:10:26:3F:29:5E:2C:84:E6:C6:47:43:55:26:32:07
X509v3 Authority Key Identifier:
keyid:83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c6:b5:2e:82:c6:3e:db:91:27:37:a9:a5:1b:3c:3f:03:b5:
5c:c9:30:37:33:0a:b3:e7:99:1e:b6:d0:64:9a:83:e1:38:4b:
a0:8d:e6:b7:df:83:e0:88:fe:65:bf:f1:5c:c4:d9:15:0e:b8:
33:ff:23:20:66:4a:c0:1a:22:93:f9:0f:64:b0:99:18:30:de:
1e:9a:22:5d:2d:a7:09:7e:7f:c1:f9:5e:45:a7:42:ad:cb:3e:
86:4b:38:5f:06:10:c2:16:ee:8c:d4:1e:23:78:c2:ac:f5:b8:
82:c4:91:e3:7b:2b:b8:f7:5d:11:12:88:dd:56:ad:c6:22:34:
cd:89:aa:7b:0d:08:1c:ae:ee:37:db:63:9e:0b:62:88:3e:df:
e6:9f:e6:36:65:43:1d:4e:bb:20:56:45:2f:1a:9b:ad:72:d4:
f2:40:3e:04:63:ee:75:6d:5c:a9:1c:69:53:b2:db:d1:b1:b0:
c2:85:56:af:3d:3a:5b:e4:9d:29:17:35:42:f7:fb:67:68:1b:
db:4a:da:85:40:3e:8c:43:f1:95:bf:bb:27:02:f1:84:43:db:
cb:31:a2:9a:58:78:d6:b1:d6:55:8e:38:e3:3d:43:55:92:ae:
38:58:e3:fc:e0:29:da:b5:52:a6:b9:78:c5:66:cb:ce:8c:e5:
15:87:40:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:57:44 2026 by rpki-client