
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
File: gyiT0KdSAaIToGRFUyA9Aac8-v8.mft (raw, json)
Hash identifier: zcYGpjlw43RJKLzBwZu35cEDco6NPoP+t2M3ea2kX8o=
Subject key identifier: 72:6C:96:4A:34:D4:86:5A:BF:2C:3C:B1:BB:BC:12:87:85:5F:A2:34
Authority key identifier: 83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF
Certificate issuer: /CN=A9176632/serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
Manifest number: 85
Signing time: Wed 25 Mar 2026 06:50:37 +0000
Manifest this update: Wed 25 Mar 2026 06:50:37 +0000
Manifest next update: Wed 01 Apr 2026 06:50:37 +0000
Files and hashes: 1: gyiT0KdSAaIToGRFUyA9Aac8-v8.crl (hash: PrbxK+ewmmLBAxzA1hX7xJCoLlFyWI3+aJd9f3PZKec=)
2: 9DB90EE05E0F11F09722E15EC4F9AE02.roa (hash: R+yKKJFZUpnxPKJ79z1OaMA2OB1A9rsyasLFDhiY1WY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl
rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176632, serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
Validity
Not Before: Mar 25 06:50:37 2026 GMT
Not After : Apr 1 06:50:37 2026 GMT
Subject: CN=69c385bd-d47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:27:c0:46:af:7c:a8:cc:89:f4:3d:d6:68:
57:ce:47:fe:6f:ac:bf:f1:8d:ee:ca:08:31:b8:3a:
ea:eb:3b:fe:43:c8:ee:f8:20:64:b5:ed:29:b8:e0:
57:e5:b6:28:ee:a8:ea:ac:95:49:ae:40:2b:b0:98:
97:ec:7c:05:ec:22:d1:a8:f5:4e:20:6b:ca:7e:26:
bf:a4:46:80:12:d3:7a:45:21:78:96:ad:7d:30:6d:
72:1a:5c:4a:40:ba:ff:4a:49:80:43:91:e4:86:e4:
8b:ac:cd:7f:fb:c8:41:79:d5:a5:f3:54:f0:11:f6:
72:05:66:06:e7:99:29:68:35:fe:12:94:b9:02:37:
e8:2e:3c:66:c5:99:55:e7:90:7e:73:c1:ba:ce:98:
0b:8d:a8:e4:a1:22:17:81:83:4d:98:42:e6:46:93:
47:5f:b6:1e:43:30:b1:0b:38:50:fb:4b:c9:53:90:
1b:83:c2:bd:dc:c5:a2:41:21:57:13:bb:a1:59:fe:
26:01:8e:90:0b:cb:07:7e:6c:16:29:a1:c9:b7:ea:
23:c1:e0:32:54:a3:97:ac:3f:99:24:cb:22:f0:59:
52:53:51:a3:cc:e1:cc:df:7f:32:6a:23:5a:59:22:
32:3e:67:9a:63:eb:da:1a:f6:15:4c:70:3f:e9:ef:
c7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6C:96:4A:34:D4:86:5A:BF:2C:3C:B1:BB:BC:12:87:85:5F:A2:34
X509v3 Authority Key Identifier:
keyid:83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:10:79:80:7b:8d:32:d3:1f:55:cf:16:b8:f2:c3:60:30:93:
42:42:ae:07:3a:fd:49:ee:27:66:cb:29:c6:2a:3a:17:51:69:
1d:3c:a8:f2:05:95:a3:86:c7:30:17:12:d2:54:8f:f1:1e:a2:
fe:6d:49:c9:c5:d2:81:ab:37:43:c0:2f:8b:7a:bb:47:4b:43:
c0:be:f1:0c:bc:13:e8:8d:cb:19:68:d8:58:b7:c1:ab:2b:0b:
2a:63:70:c4:c8:cb:62:9f:c7:b1:31:ad:1e:23:75:cc:a4:2a:
57:19:a8:b1:8b:f8:60:2d:47:f1:f2:03:2c:8b:c8:fc:83:87:
bc:eb:92:99:3a:58:f6:05:98:ea:3f:9c:cd:e9:30:ea:07:69:
6f:e5:b0:d6:9e:02:5a:0c:d4:11:ca:74:a0:84:f9:1f:2c:c2:
6e:9d:93:3e:83:96:b1:8d:77:f2:a6:ef:ca:83:3f:4e:9a:8f:
2c:6a:a6:41:70:2b:ac:24:fa:55:ce:aa:04:6d:56:d5:fc:35:
83:a9:1d:d9:e5:73:0b:53:20:04:28:40:7b:83:d3:bc:d6:35:
9c:47:4f:2f:0f:88:fd:8b:65:ab:57:ee:38:1a:de:98:ba:32:
92:ce:5c:af:a4:e8:11:ae:1e:f6:1b:d9:38:b5:24:da:cd:7d:
c9:7a:9e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:40:57 2026 by rpki-client