
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
File: GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft (raw, json)
Hash identifier: rLYYy09zFzU7+7aH72eaCzYscPVMCaRf8os+ZjeZ62M=
Subject key identifier: F8:11:F6:02:05:BD:FA:C6:47:35:C0:55:C3:13:63:3B:73:BD:BB:E0
Authority key identifier: 19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA
Certificate issuer: /CN=A917B83F/serialNumber=1980355299B6C2237B4235000F723597BFEB33DA
Certificate serial: 15E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
Manifest number: 15D8
Signing time: Thu 24 Sep 2026 16:42:15 +0000
Manifest this update: Thu 24 Sep 2026 16:42:14 +0000
Manifest next update: Thu 01 Oct 2026 16:42:14 +0000
Files and hashes: 1: GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl (hash: XArvEW75S5syLr8RazUoWElT/ssUu6+XMokt6Os5ZzA=)
2: 0964A56EF35511E8AC1ECA17C4F9AE02.roa (hash: NbC/fbC6XQGeqxTw9dujytNOnLDF7yOfjQzVCGBwIeA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl
rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5606 (0x15e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B83F, serialNumber=1980355299B6C2237B4235000F723597BFEB33DA
Validity
Not Before: Sep 24 16:42:14 2026 GMT
Not After : Oct 1 16:42:14 2026 GMT
Subject: CN=6ab552e7-d517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:63:3e:4a:0f:80:b2:d4:31:90:e3:c0:7f:
8b:20:3a:b4:0b:88:75:cb:ad:ea:fb:85:1c:89:61:
bc:5e:ae:42:fe:a6:45:2b:af:52:c3:68:22:11:54:
73:f6:26:71:a3:be:7e:1d:98:75:48:93:8b:90:04:
1a:06:d3:12:ca:8b:af:fe:06:93:b8:e3:8f:ea:79:
f9:0e:1a:51:c3:20:84:f7:38:54:47:86:7f:03:d6:
5d:28:bb:41:7e:df:d8:e9:93:f3:8a:a5:08:c7:fe:
29:8f:e8:bb:88:ba:d9:be:27:65:53:da:e8:17:62:
10:04:02:46:a9:ab:00:cf:3e:60:97:f8:93:e2:09:
39:a7:98:2f:f8:84:05:fe:d3:8e:35:ea:06:ac:48:
61:40:05:f9:9c:1c:9a:f2:59:8b:8a:78:8e:db:e8:
45:1d:3e:6a:24:8f:a1:06:4a:ba:34:ee:45:3b:b4:
e0:b1:43:16:37:65:93:22:93:59:e2:e0:44:44:9f:
66:0c:a7:27:5d:3b:9f:3a:5a:e4:55:8c:4d:f1:e1:
f4:67:14:83:dc:b1:ab:92:49:67:10:9b:ce:4c:ff:
86:04:e2:b9:fb:55:f7:d4:3f:83:48:e5:04:42:70:
a4:7d:5a:c9:8c:52:8f:10:80:d9:ad:fd:cc:82:e4:
34:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:11:F6:02:05:BD:FA:C6:47:35:C0:55:C3:13:63:3B:73:BD:BB:E0
X509v3 Authority Key Identifier:
keyid:19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:8f:98:33:74:58:4d:8b:43:5f:b3:fa:84:bc:9a:87:59:76:
36:fc:03:9b:fb:3a:41:8d:76:a4:ac:55:35:7b:0c:6d:2e:7f:
4d:d9:d8:90:71:3d:f9:c9:72:2f:69:da:df:e4:ae:23:14:33:
ef:c0:8b:d9:97:c3:02:d1:b5:21:68:fb:5c:b9:8a:2f:ef:ed:
4a:7c:b9:86:0e:e6:9f:02:cc:0b:49:3e:26:dd:51:31:da:1f:
ca:19:92:3e:d7:c9:7a:0b:9d:c0:7b:6c:23:b3:9d:b4:8e:a0:
04:70:0b:62:6c:8b:5e:ca:1f:3d:77:63:aa:67:71:ad:02:fb:
d3:01:f5:31:b1:d1:72:04:3d:c3:d0:d7:58:d2:f1:85:8b:ee:
0c:a8:20:e3:a0:92:42:7e:1e:e7:12:86:6b:39:b2:92:5c:0b:
84:76:cb:b4:39:d7:c7:f9:ba:8c:86:1a:c6:a9:34:48:08:ec:
ff:31:24:b3:b1:26:86:9d:70:5a:7f:41:3b:f9:0f:ca:63:4f:
bb:af:e0:40:c1:6a:dc:bb:10:f9:5a:f8:86:f5:24:e5:e4:c8:
fd:61:21:d5:82:f2:32:5d:e0:b4:0b:f5:67:4c:b0:ad:81:f8:
ff:e1:b8:69:6c:8f:32:b8:6f:d0:0f:f9:3c:02:92:87:f7:9c:
b6:b5:5e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:23:04 2026 by rpki-client