
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
File: gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft (raw, json)
Hash identifier: F9Qi4opMvgxa3qWJJQ3u4fQu1D2ZOzkPMQesPOPm1Qs=
Subject key identifier: BB:42:C1:BE:11:9F:59:A2:5D:28:87:F6:07:46:AD:BC:27:BD:72:59
Authority key identifier: 83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4
Certificate issuer: /CN=A9171669/serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4
Certificate serial: 0307
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
Manifest number: 0303
Signing time: Sun 01 Mar 2026 02:04:18 +0000
Manifest this update: Sun 01 Mar 2026 02:04:18 +0000
Manifest next update: Sun 08 Mar 2026 02:04:18 +0000
Files and hashes: 1: gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl (hash: mSqpTZ7K7RYD1IsrqU6bpBYfts1U3JHZ/eItQFb8m98=)
2: 91BBC8880D9711ED8F09C27DC4F9AE02.roa (hash: KV+SoYHbA+Q51JP+NigJCe33FcHjWlimMC267ADRQGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl
rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 775 (0x307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171669, serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4
Validity
Not Before: Mar 1 02:04:18 2026 GMT
Not After : Mar 8 02:04:18 2026 GMT
Subject: CN=69a39ea2-8e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:5d:aa:9e:fd:8e:f9:46:00:e9:94:aa:03:
4f:bd:28:ee:48:2c:5e:d3:27:50:52:e4:94:10:e8:
a2:44:5b:dd:76:55:cb:31:06:06:89:c2:bc:a5:b7:
21:69:30:5d:7c:6b:c3:9d:aa:5f:91:5f:3c:82:83:
d2:12:c2:45:c5:e9:64:fa:c1:01:89:d2:e6:9e:95:
47:c6:52:c0:ff:36:6a:1d:c4:53:5e:80:36:c0:b8:
9d:38:7e:23:f9:11:fa:59:ff:d3:df:81:c0:8a:89:
be:e5:29:6a:41:0a:71:a8:a4:34:fa:46:41:14:c5:
88:e2:9f:30:d6:3e:4b:50:84:b6:69:30:25:ab:b3:
8b:9b:da:a2:46:1f:30:bb:90:4d:ef:51:a5:1b:8f:
70:ab:a1:65:21:0c:33:f4:a1:90:a0:b0:63:13:e2:
17:2f:9c:33:9a:a5:a3:45:4f:86:d8:04:66:1f:ca:
27:dd:b8:3d:da:97:f9:d5:bc:58:a7:15:ad:d0:77:
21:48:de:6d:ba:7e:18:2a:8a:c9:62:4a:92:39:3f:
90:32:2e:fb:d1:84:be:ba:5a:79:11:97:45:28:98:
11:58:f2:84:9d:df:6e:14:ec:65:81:a3:39:89:79:
46:3d:5c:42:fc:9f:c0:d4:be:1c:da:a5:77:05:ad:
01:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:42:C1:BE:11:9F:59:A2:5D:28:87:F6:07:46:AD:BC:27:BD:72:59
X509v3 Authority Key Identifier:
keyid:83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:20:9a:e9:c3:13:70:14:35:76:f5:e5:b0:b3:e2:5a:ee:d7:
6b:e6:b8:95:b6:11:83:a3:68:2a:ed:8d:cf:84:1e:32:7d:31:
aa:1d:c5:3a:0f:7c:92:f7:1f:ec:eb:59:40:61:a2:5b:c6:a7:
11:78:9e:e8:b4:ea:82:39:64:bf:59:fe:1c:03:31:8e:59:eb:
01:ad:a3:c7:7d:c4:d7:1f:7c:80:79:a7:29:f6:20:cf:7d:d5:
f2:c1:98:d4:56:4d:0b:42:ed:fb:19:ed:ca:9b:bd:01:65:e7:
7b:0f:c1:8e:d3:ca:ba:5b:23:73:2d:b2:7a:f8:8f:e1:b8:6d:
a2:22:d6:f9:15:aa:5c:34:d0:70:22:55:e0:5c:1a:3b:68:31:
e9:07:00:00:8f:90:48:0c:cb:49:0a:10:ff:82:83:f5:91:34:
91:5c:27:c5:56:0f:87:e6:df:ae:ff:3c:21:ed:4b:6d:29:09:
bb:be:69:be:94:33:f7:f4:f3:86:fe:01:48:90:5a:50:2d:4a:
1c:c4:b2:8f:9d:17:6a:db:77:7d:83:e0:46:cb:66:06:37:ff:
f1:db:25:2e:09:ba:21:47:6a:4b:a2:bf:f6:fd:cf:a9:dd:01:
5a:2c:4f:9e:d1:30:24:39:ee:19:01:79:be:49:c2:73:55:3c:
6b:ee:dc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:12:24 2026 by rpki-client