
$ rpki-client -vvf rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
File: gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft (raw, json)
Hash identifier: N3HQbEBUvMqh0sZwk3tAYjVi2AJDs74vG09OMUieyNE=
Subject key identifier: 01:B7:06:CE:82:00:54:6F:D9:FC:36:CF:1D:EA:20:9B:20:71:33:E4
Authority key identifier: 83:25:D0:C6:8A:AB:CF:D9:AA:C8:9F:6A:ED:68:4D:49:92:EF:3A:75
Certificate issuer: /CN=A91357FC/serialNumber=8325D0C68AABCFD9AAC89F6AED684D4992EF3A75
Certificate serial: 3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
Manifest number: 3C
Signing time: Tue 03 Mar 2026 08:06:02 +0000
Manifest this update: Tue 03 Mar 2026 08:06:02 +0000
Manifest next update: Tue 10 Mar 2026 08:06:02 +0000
Files and hashes: 1: gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl (hash: U7jZoYYtxGixNdQQHyUoHRg8Ou6Hl/wq/z9W9yX9JW4=)
2: 11D4EBBABDFA11F08D47856DC4F9AE02.roa (hash: 3X+EOsnNO57Tvw+PE+y9DH9UPpOfFFAiDnB8nkxzx7s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl
rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91357FC, serialNumber=8325D0C68AABCFD9AAC89F6AED684D4992EF3A75
Validity
Not Before: Mar 3 08:06:02 2026 GMT
Not After : Mar 10 08:06:02 2026 GMT
Subject: CN=69a6966a-1390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ab:69:6d:c1:4f:e8:a1:c0:98:61:47:32:c1:
08:4a:56:79:9d:91:cd:14:d1:97:60:a5:12:dc:93:
f5:47:a0:5d:bf:d9:78:b7:c4:53:b3:7e:9c:5c:72:
17:9f:1c:b5:1a:b0:bb:2c:df:1e:ec:bd:50:db:d0:
9d:62:f5:cf:87:f9:5d:9d:3c:49:57:a7:46:ad:73:
6e:49:49:35:a9:54:c3:e0:46:a0:41:2b:09:af:a0:
66:0c:22:ba:8f:58:96:da:65:14:1c:e2:6b:e8:00:
c3:b9:2c:ca:71:2d:c0:8c:ff:f7:5a:b3:ee:71:42:
73:ea:ff:16:6b:e1:fe:2b:a0:12:2d:e3:b7:f8:12:
84:51:5a:d5:0b:02:3d:ba:d1:dc:d2:c6:83:68:a5:
39:35:ad:60:a4:83:f8:35:fa:38:d2:e0:a6:6a:34:
89:3a:ff:70:0e:58:fc:27:6b:0b:90:78:09:45:12:
b6:d3:92:d1:4f:8b:ed:a3:39:09:83:a8:94:e9:b5:
61:af:9e:77:46:af:17:20:ea:76:d2:41:e3:9a:0c:
6b:e0:f8:4b:cb:66:79:88:13:a4:2f:0a:d8:f9:83:
5b:49:86:0d:e3:fb:fb:9b:a6:48:b1:11:97:62:dd:
79:5a:43:5b:21:71:1a:24:ba:ad:d5:63:54:95:2e:
e3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B7:06:CE:82:00:54:6F:D9:FC:36:CF:1D:EA:20:9B:20:71:33:E4
X509v3 Authority Key Identifier:
keyid:83:25:D0:C6:8A:AB:CF:D9:AA:C8:9F:6A:ED:68:4D:49:92:EF:3A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e3:f2:be:a2:55:0f:d3:20:44:8b:01:da:20:19:01:2f:9b:
da:6e:91:64:4d:23:27:4e:ed:e9:a4:0b:b4:52:c5:72:f1:3a:
db:bc:24:6d:5f:22:a3:8a:01:b6:e9:44:da:ef:7c:7f:cd:cd:
00:0f:20:46:41:72:eb:73:4f:72:1c:83:64:ff:0d:6a:4a:e1:
b2:de:23:14:d1:f8:d0:0f:1b:62:f4:6f:f4:1c:ba:3c:0e:5f:
13:ad:c5:ab:c6:c3:0e:55:85:3f:9b:66:3c:d6:35:91:a3:8e:
72:a9:95:0d:5e:51:52:85:52:b1:93:8b:8b:e3:f1:7b:dc:97:
54:cf:3e:b3:48:eb:f3:08:2e:8c:1e:70:f9:4c:7f:f9:7a:a4:
a7:2a:83:d2:79:b8:a3:cf:ae:f6:07:0e:cb:b0:4d:9a:43:a4:
7d:69:e0:42:29:bc:78:be:34:97:ea:4f:1d:0f:c3:06:39:14:
de:dd:26:a2:30:ff:e0:1c:85:e4:2c:31:cb:61:fe:55:73:73:
4e:e2:be:33:87:02:05:af:8c:b5:bb:c1:46:c5:0e:89:b3:3c:
2b:f4:e0:df:83:a9:4e:36:ae:b3:12:5b:e3:a1:be:10:bc:5d:
57:29:02:13:69:9f:6e:6d:9b:8e:08:f5:cc:8e:cc:cb:a0:48:
96:2b:ca:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:00:16 2026 by rpki-client