
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
File: GyXsWdB_k0JLkMItNOyrIq2FKpc.mft (raw, json)
Hash identifier: JKYrEDBChrWyDpIG4UDo1YZCGExumoouFDn+wmO6Cd8=
Subject key identifier: 2E:7B:8A:A1:D0:8D:4F:87:EA:ED:0B:B8:A4:51:1E:2E:A3:1D:67:DB
Authority key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97
Certificate issuer: /CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97
Certificate serial: 0294
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
Manifest number: 028D
Signing time: Thu 21 May 2026 01:48:32 +0000
Manifest this update: Thu 21 May 2026 01:48:31 +0000
Manifest next update: Thu 28 May 2026 01:48:31 +0000
Files and hashes: 1: GyXsWdB_k0JLkMItNOyrIq2FKpc.crl (hash: 4VpUAinCOPE0aWTMvKGlDshH1D4clIEfBqoZU6kvnBE=)
2: 790195326F6411ED83BC230FC4F9AE02.roa (hash: d195UYb4Ma776b6MiFJV4Wd3T3+N6fZWCyC5k9KeQyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl
rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886EA, serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97
Validity
Not Before: May 21 01:48:31 2026 GMT
Not After : May 28 01:48:31 2026 GMT
Subject: CN=6a0e646f-6672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:5d:52:44:4a:28:f7:8f:12:dd:62:14:ec:
c7:c0:6b:85:cc:e3:3c:d9:64:76:31:2e:93:5f:2b:
24:0c:6d:28:ed:e3:61:97:eb:ce:76:cc:34:34:07:
e7:18:2a:84:52:9c:76:c9:7a:9a:de:7e:39:9c:f4:
a2:be:7f:ca:54:3d:c2:af:c4:d4:3e:05:fa:a7:64:
3b:e6:b8:35:1a:5d:ca:ff:69:99:ae:ba:b1:13:95:
99:df:bb:d6:05:43:82:47:95:bd:43:61:37:1e:26:
c8:b7:02:26:03:e2:43:6a:5d:1d:b0:7d:f5:46:7f:
9e:2b:c8:7a:02:a4:0f:fc:70:7d:81:11:10:80:bb:
7e:72:41:4a:02:2c:51:6a:c5:4f:9d:66:4f:87:58:
18:83:dd:6c:21:6c:8d:db:93:9a:67:bd:a4:2a:0b:
3b:50:b5:54:19:eb:37:9c:14:7e:31:7f:fd:6e:4c:
a7:8f:b5:d8:32:d7:52:88:2c:d8:af:9a:4b:fd:79:
58:42:ff:21:00:e4:41:c1:e8:52:27:5f:1f:77:d1:
94:10:61:d5:48:81:94:b5:42:70:49:c0:0b:c8:47:
90:93:a6:c4:a0:df:49:bb:25:00:75:97:20:38:d5:
90:06:41:5c:c3:6a:52:4f:42:ed:70:b8:cc:f4:55:
74:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7B:8A:A1:D0:8D:4F:87:EA:ED:0B:B8:A4:51:1E:2E:A3:1D:67:DB
X509v3 Authority Key Identifier:
keyid:1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:2d:33:6c:95:ab:6d:c1:af:a0:34:e2:30:29:28:a5:0e:3d:
8a:da:75:8c:86:69:12:93:c0:07:00:a9:72:5e:e7:c2:eb:79:
84:57:cc:fc:96:01:d8:3e:03:21:5a:05:dc:12:be:1f:8a:43:
87:a5:70:47:d7:7b:f7:14:60:08:7f:b6:66:19:56:15:be:bb:
ec:46:4a:1e:2b:c2:f8:cd:0f:a1:7d:b0:1e:5d:5c:1d:45:13:
16:53:c0:48:23:c1:87:15:20:5a:a2:dc:23:27:fe:70:2f:7b:
c8:12:80:4d:81:6f:ff:b7:19:4a:a0:10:84:83:3c:7c:6b:8f:
25:ec:49:9d:af:f9:57:d5:1d:2e:61:ec:9c:b0:da:19:43:fb:
0a:60:7d:0a:e8:db:d1:41:a4:aa:09:79:38:35:2b:52:ae:9a:
4b:9a:8c:11:84:89:55:94:a2:28:86:e1:5a:3f:9c:0b:d6:97:
db:7e:0b:21:32:7b:c9:8b:32:17:af:94:90:e0:1e:58:d8:f1:
cb:51:f1:77:08:76:0f:29:7e:56:df:3b:04:d8:49:28:ad:f8:
42:e3:e5:31:ce:4d:dd:a0:0a:77:1e:87:50:91:67:ed:24:96:
35:67:1f:60:84:7e:f7:a2:53:1a:18:85:61:e1:e7:94:3d:b8:
47:c4:32:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 13:22:24 2026 by rpki-client