
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
File: gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft (raw, json)
Hash identifier: JVkmQDixziiErzxxJ1UZWmvaInD3PnmbfJBrQMgq5aE=
Subject key identifier: BE:01:A7:85:8C:D7:0A:8D:C7:6D:56:FA:3D:82:BC:69:C2:08:A7:F5
Authority key identifier: 81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E
Certificate issuer: /CN=A916BC97/serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
Certificate serial: 0954
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
Manifest number: 0934
Signing time: Tue 24 Mar 2026 19:59:13 +0000
Manifest this update: Tue 24 Mar 2026 19:59:12 +0000
Manifest next update: Tue 31 Mar 2026 19:59:12 +0000
Files and hashes: 1: gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl (hash: yw4lQimrz1RetwBidMWRo0aWT/tG9tGPJ11aBQ3VbG4=)
2: C011E716845611EFA55F8043C4F9AE02.roa (hash: u8wV0JXRZod3IdfhrSHogJ2mlWeyz7ic8hCWc6YtrKE=)
3: 50998080BCE911EAA0114B70C4F9AE02.roa (hash: BqSvuHBJnIFo2nza0v/IBlEcyJ06tW+FBomYs647wGg=)
4: EF2481168BCA11EDBED45E54C4F9AE02.roa (hash: M8gBRWNkyb25KSgSAvHLqrSUq5bfw5ViCLBT/oJ06sk=)
5: 8867D06A4D8211EF8C95A448C4F9AE02.roa (hash: NtP1TSQFc4+H3iLDCcwfxfBmUZmSonhe1ezKoE5YhGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl
rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:59:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2388 (0x954)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BC97, serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
Validity
Not Before: Mar 24 19:59:12 2026 GMT
Not After : Mar 31 19:59:12 2026 GMT
Subject: CN=69c2ed11-c3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c9:2f:84:85:c3:83:36:90:6a:d7:56:66:cc:
64:7d:19:c3:78:f5:ef:c2:f2:df:a1:ae:0e:56:66:
3d:d7:09:67:99:83:6d:e7:7c:b8:7f:83:e2:f1:a7:
c2:6f:e5:dd:0b:5d:6c:4d:47:4c:e3:8a:1b:27:be:
58:a6:5f:62:48:83:73:09:75:7d:eb:f1:91:a1:71:
94:6f:39:e5:ff:8c:c4:24:c2:01:84:e6:dc:c5:43:
b3:b4:a8:e9:91:c3:d4:5d:77:82:7d:6b:09:f4:38:
d8:59:f1:e8:79:bb:65:51:c9:16:c5:ff:40:98:80:
69:6b:3c:35:fe:b8:6a:1b:7d:a7:c4:00:04:a0:0b:
2c:0a:0c:9b:c8:9f:7a:c2:50:04:f0:92:72:6a:b7:
15:86:cc:a6:54:26:ea:18:97:d3:7d:61:56:31:26:
62:09:e9:6d:78:38:93:e1:3b:a2:a4:52:fd:9c:68:
be:e9:b4:2c:2d:b2:b9:26:33:3b:8c:3b:bc:78:d4:
f3:8a:b8:11:02:10:ff:b9:5c:e9:1b:bf:a6:66:db:
5b:6f:28:88:32:00:25:9d:d5:06:48:16:04:10:69:
28:de:c5:cf:57:bd:55:48:eb:fd:e7:1d:45:dd:fa:
20:64:55:ac:42:a3:51:ba:05:93:fe:6b:67:10:24:
ca:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:01:A7:85:8C:D7:0A:8D:C7:6D:56:FA:3D:82:BC:69:C2:08:A7:F5
X509v3 Authority Key Identifier:
keyid:81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:dd:a8:6d:dc:de:3a:54:e8:0f:e5:b0:41:bc:4d:10:bb:5b:
51:5f:06:96:ea:a4:14:42:9a:9d:35:94:e5:de:9e:8c:da:37:
7d:f0:4a:21:b8:b9:96:1a:29:14:79:3b:39:e9:35:a7:65:7e:
81:d3:c8:da:60:66:d9:5c:56:b0:7d:d4:a5:44:1c:71:38:b4:
a7:a2:af:b2:02:49:b7:6f:9a:d9:7e:31:fe:20:df:a2:bc:42:
7e:77:17:fc:ed:34:1b:53:0d:91:f3:07:0f:f4:c7:fb:29:c9:
3b:b6:22:a2:6f:2c:5c:74:16:a7:e4:ad:6c:ac:a4:cc:0f:4a:
3d:b5:cf:2f:45:b1:7c:c6:3f:a0:a3:75:75:9c:50:a2:b9:30:
fa:50:29:e6:f4:6d:79:dc:bb:29:e2:a7:fc:13:c8:df:30:2e:
ec:84:e0:a8:7d:b7:ad:5f:e1:d8:03:de:b5:40:af:9d:7f:5b:
70:52:48:85:69:95:da:d8:7a:57:d5:5f:5d:92:63:93:65:68:
86:69:33:9d:fa:a8:1a:5d:bc:b5:6d:1d:44:b6:ea:a3:a5:7f:
de:f5:8e:ff:98:8f:96:81:64:f8:ff:3b:c2:df:3a:e2:4d:32:
8a:9d:38:61:e7:02:64:82:64:96:0d:81:46:30:93:f3:1f:04:
b5:9e:c9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:45:02 2026 by rpki-client