
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
File: GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft (raw, json)
Hash identifier: 0Veukqt7TueZ7pIS5p4dpg8m3CRhhDa0+xa3s4DaEDo=
Subject key identifier: 82:4D:60:7A:A9:4C:84:B4:90:85:D4:97:F8:50:E7:0A:8E:A4:30:FD
Authority key identifier: 19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA
Certificate issuer: /CN=A917B83F/serialNumber=1980355299B6C2237B4235000F723597BFEB33DA
Certificate serial: 1585
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
Manifest number: 1578
Signing time: Tue 24 Mar 2026 16:40:27 +0000
Manifest this update: Tue 24 Mar 2026 16:40:27 +0000
Manifest next update: Tue 31 Mar 2026 16:40:27 +0000
Files and hashes: 1: GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl (hash: zinsT8/93Jo4iCU68G00u8yaZcZjiIrIgTw2O0bDcLg=)
2: 0964A56EF35511E8AC1ECA17C4F9AE02.roa (hash: eG2+Dg5b/oCUqgZG7mXNqvSu0hsi4Mr+XueozIi6Lxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl
rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:40:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5509 (0x1585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B83F, serialNumber=1980355299B6C2237B4235000F723597BFEB33DA
Validity
Not Before: Mar 24 16:40:27 2026 GMT
Not After : Mar 31 16:40:27 2026 GMT
Subject: CN=69c2be7b-5e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:a8:1b:4d:e2:68:f1:fa:16:49:28:be:66:
c9:e4:67:09:60:cf:af:ca:ca:9d:7d:b8:45:16:f6:
11:a1:47:22:c6:bf:97:20:e1:3d:37:8b:23:65:71:
70:da:6e:af:79:b9:89:cd:d9:1f:ee:9e:71:f4:ef:
ff:66:b2:11:22:a8:8c:95:81:f1:8b:f3:cf:dc:20:
dd:fa:37:b4:4e:c2:39:0c:10:9f:8b:13:b9:7c:82:
ca:36:a5:e5:71:2f:d5:9b:43:e7:e5:fd:74:1b:25:
c1:2e:a3:21:02:65:71:d4:80:eb:51:a2:45:67:a6:
bd:24:11:87:6c:ce:e8:c8:e1:16:3b:2e:1e:d4:59:
0e:02:bf:ec:85:fb:a1:23:9d:5b:06:a7:d6:61:2b:
32:f6:48:7a:f6:1f:47:89:05:5d:1b:4a:a4:c1:a6:
e9:9a:32:a1:c4:7e:4e:f5:b7:9c:d3:f2:f4:42:7f:
d0:07:a2:9a:f7:c4:99:51:9b:86:3c:b9:97:97:48:
ed:ee:29:57:c4:3d:23:21:55:4e:0e:1f:7f:79:92:
e8:1b:d6:71:05:fe:b2:0e:56:19:49:3a:2f:24:e7:
91:69:4c:bd:ff:a4:8f:23:24:df:66:1a:f5:76:b2:
db:70:06:1a:e2:36:d9:90:17:97:0d:72:73:0f:9a:
a8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4D:60:7A:A9:4C:84:B4:90:85:D4:97:F8:50:E7:0A:8E:A4:30:FD
X509v3 Authority Key Identifier:
keyid:19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ba:4c:1b:e0:d1:b1:6e:75:01:c5:a6:14:5a:15:5d:78:40:
22:49:f6:8a:aa:9f:12:c7:a9:8c:2e:11:19:1c:7f:da:2d:3e:
f3:e3:5f:2b:eb:77:94:5d:82:3e:62:60:73:e9:4c:8a:75:41:
2d:99:04:ab:97:84:f9:c5:04:c7:9b:52:71:b3:ab:95:fe:e4:
8a:9c:7c:49:b6:f4:b3:44:37:a8:c4:41:70:d8:3b:cc:ef:c0:
43:38:ca:80:7e:15:1f:97:a8:3d:71:7b:29:78:a5:42:10:73:
21:dc:17:62:f7:e6:f2:4c:1d:b4:c9:46:7b:31:d7:1f:b4:7a:
9e:46:88:de:50:0f:ed:21:5b:90:1b:a8:e6:af:e5:99:5f:42:
60:c7:f7:ee:23:b2:ad:c1:f1:bd:15:c3:17:ff:62:7f:6f:bc:
b4:df:98:15:f9:69:25:90:8c:a2:fd:78:23:e5:1e:80:d5:01:
57:7a:84:a3:c3:65:dc:40:e6:9f:fa:79:84:03:e5:05:f7:fd:
77:83:36:67:55:55:0a:28:e7:79:fe:9a:27:28:a2:cc:d6:17:
53:f8:57:33:3c:31:71:e4:21:79:c1:67:f4:f6:a4:1b:dd:50:
1b:ab:ed:0c:91:e9:57:31:2e:bd:9c:72:26:f8:a6:92:ec:94:
32:c3:73:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:06 2026 by rpki-client