
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
File: gyiT0KdSAaIToGRFUyA9Aac8-v8.mft (raw, json)
Hash identifier: zUNpDx5ziz9TuCPJ9rYMGMuTdEc2dqJcftKCSmcRxFs=
Subject key identifier: B4:D7:A6:79:4C:F9:F1:08:7D:BA:73:85:BD:23:1A:3B:D8:3E:69:2F
Authority key identifier: 83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF
Certificate issuer: /CN=A9176632/serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
Manifest number: 9D
Signing time: Mon 11 May 2026 07:29:31 +0000
Manifest this update: Mon 11 May 2026 07:29:31 +0000
Manifest next update: Mon 18 May 2026 07:29:31 +0000
Files and hashes: 1: gyiT0KdSAaIToGRFUyA9Aac8-v8.crl (hash: BQF+Asw6Zpm/mblCRBZEGh+TgW7G5C0IAO9jD7Ll9J4=)
2: 9DB90EE05E0F11F09722E15EC4F9AE02.roa (hash: R+yKKJFZUpnxPKJ79z1OaMA2OB1A9rsyasLFDhiY1WY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl
rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176632, serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
Validity
Not Before: May 11 07:29:31 2026 GMT
Not After : May 18 07:29:31 2026 GMT
Subject: CN=6a01855b-70ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:4b:a8:db:f5:bd:e4:d4:63:f7:b2:67:f9:
21:da:8e:43:21:2c:bf:48:3c:5d:4e:30:1f:28:d7:
3d:1d:a7:26:9d:cc:3c:6d:7a:74:b7:42:bc:a5:1d:
b1:42:04:c0:76:a0:db:f6:77:1d:a1:3f:dc:29:a3:
4f:93:b1:5c:d9:3c:f8:2c:22:03:c9:ba:d0:f6:33:
44:32:2b:e9:f1:ac:f4:0a:a3:08:ab:00:c4:ce:8c:
bf:c0:f4:7a:88:5c:2c:c8:14:9c:0b:0a:7c:fe:cc:
3d:ea:a1:77:6d:a7:8b:47:18:58:fe:e0:39:4c:90:
d9:90:12:02:6b:da:12:d1:2a:14:97:14:e7:ff:ff:
48:c2:26:99:51:99:ed:2f:51:b4:34:60:4b:e5:58:
ba:68:0b:47:62:cd:8f:e4:37:40:f9:f8:92:8d:4a:
f4:5f:78:f0:1c:b3:9d:74:0d:c7:23:30:84:b9:f2:
92:4d:75:e4:18:4e:28:72:53:a1:d3:58:9f:dd:57:
7c:44:ee:fc:97:8d:4c:44:a0:f6:72:52:14:aa:1d:
2b:d6:80:ce:97:b0:9f:37:51:d5:eb:54:e2:ab:dd:
0f:8e:87:e2:a5:2f:0b:0b:ac:e7:33:22:5e:ba:85:
9a:2d:9a:e9:f4:1c:a9:11:8e:d8:04:a5:4e:bb:89:
7d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D7:A6:79:4C:F9:F1:08:7D:BA:73:85:BD:23:1A:3B:D8:3E:69:2F
X509v3 Authority Key Identifier:
keyid:83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:b5:db:e6:b8:60:9f:9b:a2:3b:32:96:3a:3b:6b:e2:0d:63:
80:f9:2c:0e:71:b0:2d:fc:3d:cd:4c:36:c5:17:37:b7:48:24:
c4:b0:9b:51:c4:3c:9b:0e:1a:c8:8d:3d:66:01:2b:8d:df:f0:
0f:33:e3:2d:f2:c4:ed:7b:90:19:5e:ca:9d:4a:d5:66:05:37:
33:13:47:5b:2b:89:8d:7b:13:38:28:89:25:e3:f5:57:b3:1e:
0e:00:d0:e7:c6:ff:54:8b:c9:be:19:36:fa:67:66:57:43:bd:
fd:75:19:24:b6:d4:52:e8:9e:c6:97:d9:e2:68:1e:27:1d:d0:
ec:77:59:ae:84:33:80:b4:43:12:87:df:ad:0f:a3:ae:99:b3:
1f:c5:b1:a8:a5:2e:45:93:f5:e6:54:0a:c3:5e:dd:95:2b:55:
a4:44:60:ba:a6:8b:1d:bf:da:10:64:8c:54:30:d1:64:ce:3e:
75:35:1e:ee:86:09:6e:18:17:31:d5:2b:9e:c8:a0:5c:3e:8a:
78:cb:a9:cb:fa:34:31:79:63:e7:e4:8a:35:60:49:42:1e:ac:
58:2a:c0:3f:a4:bb:e7:5f:7d:60:cc:c5:b4:1b:36:10:32:ad:
f0:1d:a4:58:76:d7:8b:73:44:ba:a3:14:28:77:7d:38:68:57:
84:31:a9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:18:40 2026 by rpki-client