
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
File: GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft (raw, json)
Hash identifier: s2R711D2PqAsrkaQdOFdKNEWaQYHZ4TbwxSgQ6VXZFM=
Subject key identifier: 2C:4A:D5:B8:A8:22:FE:88:E4:BA:90:DC:F9:09:07:7C:85:60:6B:EC
Authority key identifier: 19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA
Certificate issuer: /CN=A917B83F/serialNumber=1980355299B6C2237B4235000F723597BFEB33DA
Certificate serial: 15ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
Manifest number: 15DF
Signing time: Thu 08 Oct 2026 16:47:05 +0000
Manifest this update: Thu 08 Oct 2026 16:47:04 +0000
Manifest next update: Thu 15 Oct 2026 16:47:04 +0000
Files and hashes: 1: GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl (hash: NiaQtJPfPS9FFiw28c8cxfcQzKPVUKdkBXVJ/gQF4zU=)
2: 0964A56EF35511E8AC1ECA17C4F9AE02.roa (hash: NbC/fbC6XQGeqxTw9dujytNOnLDF7yOfjQzVCGBwIeA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl
rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 16:47:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5613 (0x15ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B83F, serialNumber=1980355299B6C2237B4235000F723597BFEB33DA
Validity
Not Before: Oct 8 16:47:04 2026 GMT
Not After : Oct 15 16:47:04 2026 GMT
Subject: CN=6ac7c909-4e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:bc:65:49:de:be:fd:98:e9:6b:39:b6:49:
ba:5e:32:ed:b4:ee:f3:1d:86:47:79:a4:24:33:80:
12:b0:1b:4d:90:66:79:7e:63:0e:8f:07:f7:55:a6:
74:a7:bd:be:a8:fb:b7:00:45:cd:86:59:89:b5:bb:
68:1a:8d:57:7a:2e:ea:50:e1:cb:8e:fd:e3:a6:6d:
ee:e6:d7:2a:8d:9b:a9:11:00:e0:7b:92:31:e8:9c:
f3:90:a7:2f:7e:ca:d0:d7:87:93:41:77:0e:4d:11:
93:38:58:19:b7:64:8d:30:5d:a9:a0:28:ef:e6:2d:
e4:9c:21:59:1d:68:72:b3:c4:8c:20:f4:8b:3b:0b:
ac:2a:fa:73:c8:ba:63:dc:74:17:09:24:4f:93:7a:
4a:38:88:34:0b:73:a9:6a:81:c6:33:91:35:a3:de:
db:71:e7:63:4b:8d:57:8c:de:c0:e0:e6:b5:a3:81:
f8:fa:dd:2a:7f:b7:6d:2f:62:ca:39:1a:d4:8a:ce:
74:c5:fb:27:bd:c4:97:a9:7e:3d:74:78:83:49:24:
39:9e:0a:b6:cf:8b:97:82:cf:ca:30:f7:49:9b:b2:
cc:e1:0a:72:79:1a:5e:1f:97:51:f8:f1:ab:07:6d:
49:05:28:13:ed:2b:22:66:32:7b:bf:9f:a3:67:fd:
13:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4A:D5:B8:A8:22:FE:88:E4:BA:90:DC:F9:09:07:7C:85:60:6B:EC
X509v3 Authority Key Identifier:
keyid:19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:1a:0a:05:12:44:68:0e:ec:20:46:e1:e1:ce:90:84:6f:c2:
85:21:5c:fc:09:f4:a0:b3:76:5b:31:99:16:f7:6b:42:a6:ef:
3c:94:a7:28:08:51:3e:b2:37:c4:47:a6:eb:00:9d:16:3a:10:
a5:d5:07:3e:2f:10:51:4c:38:41:6c:16:16:09:a1:86:82:ed:
ce:89:b1:f0:a6:3b:ae:77:51:7a:f6:f2:68:68:8c:01:97:e9:
40:4a:ae:61:c9:45:17:0f:ff:65:4c:53:cc:a9:e3:f3:43:82:
8c:67:7a:c1:ea:cc:e7:2b:cc:67:f6:42:2d:b3:ad:89:2f:aa:
ed:9f:7a:f8:c4:ea:0b:46:e4:c8:93:32:6b:44:e7:31:e2:47:
05:66:8a:6b:64:96:b3:f6:46:7b:b8:52:63:b8:15:36:43:3f:
45:d0:31:00:fe:05:cd:e2:85:7d:7d:34:eb:f7:70:e7:d1:99:
f1:52:9e:6b:03:a8:d3:80:c9:6c:1a:24:44:57:0a:a8:f8:1c:
42:92:7d:2e:b1:7e:c8:c6:6e:fb:9c:ca:d1:6c:94:f5:3f:68:
4f:18:3a:f4:ce:e4:f3:4b:9e:0f:9d:d2:cd:4f:d2:c7:d3:72:
39:90:1a:d8:44:33:32:a5:07:94:75:6b:c3:9d:55:a3:d3:81:
ec:50:67:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:20:12 2026 by rpki-client