
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
File: gyiT0KdSAaIToGRFUyA9Aac8-v8.mft (raw, json)
Hash identifier: oYuaSdl03iyJPvvENcI6eCthimUmiLUQ/8F37sFmJgU=
Subject key identifier: 76:89:44:03:5C:9C:9D:3E:39:61:C9:72:69:BC:99:2A:85:51:ED:78
Authority key identifier: 83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF
Certificate issuer: /CN=A9176632/serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
Certificate serial: E9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
Manifest number: E6
Signing time: Tue 29 Sep 2026 07:00:05 +0000
Manifest this update: Tue 29 Sep 2026 07:00:04 +0000
Manifest next update: Tue 06 Oct 2026 07:00:04 +0000
Files and hashes: 1: gyiT0KdSAaIToGRFUyA9Aac8-v8.crl (hash: tiCVWw0Lh/EMd6XzNTeNsG/Lc0jNjQHdk/8GWsbIx8s=)
2: 9DB90EE05E0F11F09722E15EC4F9AE02.roa (hash: zzsfmTI30Ft4gYlmfvNo3b1GkFos6CSbL7X4CYt+tGQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl
rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176632, serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
Validity
Not Before: Sep 29 07:00:04 2026 GMT
Not After : Oct 6 07:00:04 2026 GMT
Subject: CN=6abb61f4-447b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:bd:89:ee:a4:49:1c:63:36:e9:27:5c:b0:
0b:aa:b4:ea:0b:c8:3d:16:a3:2f:62:8d:da:11:72:
a9:c7:07:31:d7:ee:e3:16:94:43:1c:ed:76:6a:20:
38:44:b9:ce:31:0c:44:1b:3b:54:b1:e4:e1:6f:d9:
ad:9d:ed:c1:7e:32:c1:8e:0d:84:6d:9b:5a:be:47:
6b:82:17:d4:ce:0b:b6:18:49:ff:a5:07:3a:88:6d:
e3:8a:10:a9:5d:5d:17:18:df:9f:92:d7:53:92:09:
81:2f:84:d7:23:6d:90:08:4d:57:da:f5:39:62:d2:
6a:2a:08:f0:a5:67:99:0f:16:4b:25:95:9f:9d:ab:
ee:a4:9a:76:82:ba:79:c6:4e:17:86:49:57:b2:ca:
66:9b:06:61:ed:6f:c0:3c:09:66:42:6e:de:c6:ae:
fd:9e:52:10:79:c5:5a:62:f4:6b:a6:e5:fb:e5:87:
57:8e:3a:78:ef:84:5f:49:69:c1:31:28:c7:a1:28:
a4:c2:f7:45:38:70:63:ed:d0:57:55:55:9e:2e:85:
e7:b6:ef:3b:cb:d4:99:e6:99:ec:0a:64:78:2f:a0:
da:2f:d2:9d:49:f0:59:4e:ee:c0:98:e9:f7:78:9f:
79:61:5b:75:0d:56:fc:48:9a:63:06:b6:bc:a6:52:
bb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:89:44:03:5C:9C:9D:3E:39:61:C9:72:69:BC:99:2A:85:51:ED:78
X509v3 Authority Key Identifier:
keyid:83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:22:39:4e:6f:ce:2e:ee:1e:0d:48:19:4a:a2:b6:d9:9b:c2:
62:94:d3:f1:6b:e2:56:c8:8e:a5:56:71:50:f2:af:5d:22:b4:
ac:49:f4:84:d5:16:be:04:5b:97:e6:11:d6:6b:75:89:e9:8a:
2e:d9:de:8d:cf:04:46:a7:98:d3:b1:59:2b:65:8d:18:3a:0b:
e9:09:64:8e:a7:69:b9:e4:cd:25:a5:7c:f3:45:2f:34:7a:2a:
53:83:ee:c9:73:08:79:8d:55:aa:a4:32:77:34:f5:92:78:9c:
63:5f:0c:98:cd:a5:9b:d1:f1:58:eb:61:01:d1:5e:7d:97:15:
07:97:70:3d:3d:7e:36:25:bc:19:a7:05:76:88:5d:37:d9:42:
5f:e9:a7:a6:e2:0c:3f:86:16:6c:cb:76:21:8c:82:55:a5:6d:
e4:25:05:4f:f9:7f:56:8b:5b:f0:58:50:f4:95:02:92:95:29:
b8:ca:48:60:b4:db:94:1c:fd:3b:a2:85:c8:29:45:17:77:e6:
0b:d3:fe:8b:c8:70:0f:7e:85:c9:12:2c:31:65:d1:94:b3:b5:
4a:16:e9:4d:28:aa:2d:78:c8:ec:37:a7:8b:6b:3f:03:d2:ee:
26:59:8a:87:42:63:b1:24:fb:0d:b0:e4:c2:b4:63:91:98:c0:
50:58:7b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 07:39:14 2026 by rpki-client