
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
File: gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft (raw, json)
Hash identifier: m0Zzq3XsSBniXlB7udqSLH8ikXwtAK3KVttgYWarITg=
Subject key identifier: 9D:05:45:F0:E4:83:D9:DB:66:D7:D2:50:F9:E4:93:08:CE:32:0F:59
Authority key identifier: 83:25:D0:C6:8A:AB:CF:D9:AA:C8:9F:6A:ED:68:4D:49:92:EF:3A:75
Certificate issuer: /CN=A91357FC/serialNumber=8325D0C68AABCFD9AAC89F6AED684D4992EF3A75
Certificate serial: AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
Manifest number: AB
Signing time: Fri 09 Oct 2026 07:46:47 +0000
Manifest this update: Fri 09 Oct 2026 07:46:46 +0000
Manifest next update: Fri 16 Oct 2026 07:46:46 +0000
Files and hashes: 1: gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl (hash: 5J6hPUe9HzPnpeu8HcxX2GQ84dV9s7mHeQ+9GZ9lENs=)
2: 11D4EBBABDFA11F08D47856DC4F9AE02.roa (hash: 3X+EOsnNO57Tvw+PE+y9DH9UPpOfFFAiDnB8nkxzx7s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl
rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91357FC, serialNumber=8325D0C68AABCFD9AAC89F6AED684D4992EF3A75
Validity
Not Before: Oct 9 07:46:46 2026 GMT
Not After : Oct 16 07:46:46 2026 GMT
Subject: CN=6ac89be6-747a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:b6:d0:6f:be:40:fc:95:1d:6b:8d:62:f7:
f4:3f:1a:68:53:dd:47:d2:11:6a:4c:34:f9:a2:dc:
68:a6:12:45:2a:5c:b7:12:d9:90:da:43:66:d1:53:
90:2d:0c:b7:3a:2d:07:a1:62:da:4e:1b:39:df:5e:
89:3c:43:49:15:bb:8a:23:61:f0:c3:c2:10:29:09:
88:19:52:7a:26:8e:6a:0a:d9:00:09:36:4e:9a:75:
0c:1e:0f:a5:76:11:f5:52:63:a3:39:52:0f:2a:e0:
b3:75:48:75:f1:4e:2f:ec:c2:8e:9e:9e:cf:97:55:
bd:99:76:d1:b0:4a:56:d8:32:55:bc:0f:f9:dd:b3:
3c:b9:ea:6f:5d:99:b4:2d:e2:79:51:0b:65:f9:32:
f5:64:27:f9:1b:b6:aa:ca:12:b4:96:1e:a8:6c:cb:
8d:49:f7:e6:a8:bb:6f:f3:76:35:97:63:ae:bc:30:
ac:0a:41:f0:a2:dd:2b:7e:7c:56:ad:3c:38:2d:e7:
29:66:a1:92:5a:7f:2b:8a:06:06:68:3a:7f:d2:b0:
61:de:2d:17:f3:88:e2:ab:78:9f:99:70:2e:71:ca:
60:88:e8:11:94:63:80:22:24:2d:95:2b:f5:78:af:
e5:3b:ee:30:0e:30:48:8a:22:82:27:b4:18:50:dc:
b6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:05:45:F0:E4:83:D9:DB:66:D7:D2:50:F9:E4:93:08:CE:32:0F:59
X509v3 Authority Key Identifier:
keyid:83:25:D0:C6:8A:AB:CF:D9:AA:C8:9F:6A:ED:68:4D:49:92:EF:3A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7f:97:99:ba:6f:87:1d:58:8b:89:8b:f7:10:9f:71:d5:31:
10:44:fb:06:8d:07:84:52:11:70:e7:89:95:ee:f8:68:0d:d8:
09:3c:88:8a:65:87:ab:d3:31:39:70:db:f5:8d:c5:70:c5:84:
34:cd:5a:87:3d:10:07:63:11:6a:eb:80:cd:4f:64:40:b0:1b:
da:0c:e0:f6:02:36:78:f9:02:20:54:cc:a2:f3:a2:d1:1b:ea:
28:b6:73:a3:cd:8a:16:7b:ac:57:6b:f5:fb:53:0f:55:85:c7:
e8:42:f3:06:9b:f9:96:62:48:a9:aa:62:bb:60:a0:f7:9c:47:
1f:f3:2b:11:6f:d6:b7:62:95:93:97:6e:25:f6:1c:01:e0:2e:
87:33:17:44:c9:1b:44:66:d6:f1:eb:ab:37:ad:a3:5c:66:f3:
77:b8:47:ae:a0:f0:67:58:27:36:f8:36:11:68:9b:49:39:b1:
db:89:da:3b:6b:27:22:0f:ab:dd:b1:df:22:6f:9a:49:90:93:
a2:2d:5f:9e:ba:f1:9e:4a:01:2b:96:da:f2:34:06:f4:d2:49:
ee:db:ba:79:51:8d:53:64:60:10:f1:31:ac:d1:1b:37:4f:6b:
a8:59:6e:0d:a4:df:f3:c6:56:d6:1f:e5:24:3e:ae:89:f5:bd:
19:60:be:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:14:48 2026 by rpki-client