
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
File: GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft (raw, json)
Hash identifier: 8WT38H0Yop+20UOzUx1IxUyu5/FUJtfnn67eIcdbeLw=
Subject key identifier: 25:9A:51:24:0D:0A:FB:BE:61:A8:45:AE:29:32:E0:1C:F6:CE:AC:1B
Authority key identifier: 19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA
Certificate issuer: /CN=A917B83F/serialNumber=1980355299B6C2237B4235000F723597BFEB33DA
Certificate serial: 1579
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
Manifest number: 156C
Signing time: Mon 02 Mar 2026 00:09:31 +0000
Manifest this update: Mon 02 Mar 2026 00:09:30 +0000
Manifest next update: Mon 09 Mar 2026 00:09:30 +0000
Files and hashes: 1: GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl (hash: /QG57nwy7+Kkg8H2PVJsvvCxXWi+E/t+24oV9uJvuwE=)
2: 0964A56EF35511E8AC1ECA17C4F9AE02.roa (hash: eG2+Dg5b/oCUqgZG7mXNqvSu0hsi4Mr+XueozIi6Lxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl
rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5497 (0x1579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B83F, serialNumber=1980355299B6C2237B4235000F723597BFEB33DA
Validity
Not Before: Mar 2 00:09:30 2026 GMT
Not After : Mar 9 00:09:30 2026 GMT
Subject: CN=69a4d53b-2709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:12:f8:a9:f5:a2:31:a8:7b:e7:e9:58:87:
ce:8f:50:5a:3e:ca:06:ba:d2:01:01:43:5e:69:67:
88:e6:7f:ac:21:a6:ed:7e:94:1b:38:cc:3b:4f:2f:
de:f7:1f:d0:82:54:ce:b0:46:97:f3:50:d9:a9:f3:
e7:6a:2d:61:d5:61:1e:76:25:ae:d3:5b:7c:e0:a6:
ed:c8:f3:30:56:50:95:6b:32:37:20:fb:7e:93:ad:
d5:b4:89:d5:7e:75:e4:44:ca:e5:75:eb:18:43:fd:
91:d7:9c:d1:05:ea:ff:ab:35:c6:78:d3:4e:af:b5:
f2:ed:8b:8d:9f:27:21:0e:5f:a0:49:d8:58:29:52:
fc:fe:65:4a:c8:63:48:dd:bf:61:60:75:c7:d1:75:
4d:e3:2d:a9:96:b4:c3:f5:df:fc:ba:f1:82:0c:6c:
58:f1:6a:22:4c:1a:08:12:83:33:b7:67:07:3d:b7:
1a:03:e9:00:8b:ed:39:f1:21:7b:99:a2:7b:2f:5e:
45:38:ea:68:2f:e4:d9:9a:0b:e0:fb:05:4f:8f:11:
7c:bd:a4:aa:d5:46:c0:d5:48:f6:04:a3:dd:b0:fa:
c8:99:2b:e3:15:df:4d:b9:36:b2:f6:fd:05:4b:38:
f5:8f:fb:54:4d:49:fe:bd:e4:a3:73:1e:24:b0:03:
44:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9A:51:24:0D:0A:FB:BE:61:A8:45:AE:29:32:E0:1C:F6:CE:AC:1B
X509v3 Authority Key Identifier:
keyid:19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:76:56:2e:42:a3:c3:ed:cb:d3:1e:16:f8:24:b0:e5:26:73:
b8:9e:a4:bd:f1:4a:73:1e:01:e6:ee:6d:2a:b6:f8:5e:9f:50:
f7:d0:29:27:e2:b3:db:71:14:f7:10:e9:12:05:3c:02:26:70:
fd:d6:e4:67:22:19:6f:1b:34:d2:9d:d9:c0:f1:ab:29:0c:58:
ae:0a:f3:16:1b:09:fb:fd:47:fe:0e:67:5d:89:c9:ff:0e:36:
95:ad:d1:83:c8:63:e3:51:98:78:cb:e8:1e:db:0d:7d:bc:0d:
f5:3c:5d:d8:dc:fd:4e:3a:6b:cd:95:13:92:4c:96:cd:46:14:
52:23:44:16:b7:43:d5:e9:7a:59:5a:9b:c2:20:a7:2c:d1:ee:
13:17:e9:63:6b:71:01:69:cc:98:a5:98:b1:95:db:cb:aa:7b:
10:37:d2:72:a3:93:83:8b:00:5a:63:ba:cc:4e:e4:27:08:76:
c4:e8:40:9a:62:f2:6c:1e:9d:70:d5:8f:50:e4:dc:c3:7e:05:
38:c6:99:b3:70:54:87:02:68:d7:b0:1b:25:4f:9f:12:aa:01:
e0:34:6b:23:fe:49:ba:8c:6e:e5:08:3a:64:59:29:ae:42:67:
32:66:0a:27:0d:41:9d:6c:cf:6e:26:b4:5a:75:bd:b8:5c:d9:
5c:36:84:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:57:02 2026 by rpki-client