
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
File: gYu-BREIqaYrBvxp5L-jaX5l4w8.mft (raw, json)
Hash identifier: R1LVdghF0eMjUdnS2kg/I0qQ8zmnSJFVQb8wTWj1iWs=
Subject key identifier: C1:E0:EF:E1:B6:AA:C6:CA:0E:D5:EF:04:18:62:52:C8:ED:61:4D:C0
Authority key identifier: 81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F
Certificate issuer: /CN=A91FCF44/serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F
Certificate serial: 7B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
Manifest number: 7B
Signing time: Tue 03 Mar 2026 05:18:20 +0000
Manifest this update: Tue 03 Mar 2026 05:18:19 +0000
Manifest next update: Tue 10 Mar 2026 05:18:19 +0000
Files and hashes: 1: gYu-BREIqaYrBvxp5L-jaX5l4w8.crl (hash: uxODDuhOtofe0BeCkM4V/SVZUrITYgvmuKU+su2C1/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl
rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:18:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCF44, serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F
Validity
Not Before: Mar 3 05:18:19 2026 GMT
Not After : Mar 10 05:18:19 2026 GMT
Subject: CN=69a66f1c-6952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:83:05:24:a5:c4:0b:cf:e4:6e:e0:24:63:
b7:9c:d6:63:c6:b0:a3:e7:e6:b5:9b:08:3c:ec:14:
cc:d3:6b:0e:0d:b3:22:fa:2b:ba:b0:2a:d8:35:f1:
1a:cc:02:9b:5a:a6:23:88:5e:d1:92:76:43:f1:b6:
a5:72:be:d3:98:ca:12:1b:d5:cc:6d:05:68:5d:a0:
05:33:30:34:28:73:54:72:14:ab:2c:c0:08:2f:fd:
eb:74:8a:db:c0:71:b0:a5:6b:ef:b4:fd:20:86:de:
4f:e6:64:61:4f:26:70:79:b9:62:93:8b:f5:39:39:
4b:7a:c9:c9:b1:45:f6:46:1b:a4:98:5d:ec:e5:5f:
00:cd:cf:0d:0c:23:26:af:bd:f5:6f:46:97:45:e0:
16:4f:b0:67:d8:f1:ae:7b:b4:5b:8a:0b:e8:ab:57:
c2:d9:f0:23:21:e2:86:bd:63:f7:85:89:2f:b6:c2:
e6:78:32:2a:08:f3:3e:c7:d2:67:b5:af:2a:a6:e4:
6e:0d:3d:ac:d9:d7:21:10:5a:8c:3f:6b:07:5d:91:
bf:94:9d:59:8a:3b:2b:5a:6e:a9:aa:b5:c6:30:f1:
39:0a:f3:11:f5:07:c4:c6:13:ef:d1:33:43:8c:29:
5d:86:54:22:b2:e2:bc:b7:f8:52:d4:d3:1f:fe:c7:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E0:EF:E1:B6:AA:C6:CA:0E:D5:EF:04:18:62:52:C8:ED:61:4D:C0
X509v3 Authority Key Identifier:
keyid:81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:6f:3e:5f:09:99:c1:d3:f4:bf:34:31:33:43:71:7d:5d:b0:
f9:52:7e:a6:49:e8:47:bf:cd:95:58:4c:24:92:4d:fc:18:95:
2f:ea:9d:54:88:12:92:79:78:c7:b8:fb:fd:24:c4:e8:6f:99:
42:2e:ad:d1:10:19:08:55:0e:3f:57:35:23:d7:92:ce:57:a9:
02:19:f6:dc:54:8d:02:59:1d:84:72:cb:59:41:76:3b:c7:85:
93:b1:4d:b9:c6:a3:d9:19:ed:93:d3:7e:d4:67:81:12:62:f5:
34:40:ae:6c:47:2d:3a:1c:bd:eb:ae:2b:5b:5f:25:b3:1e:08:
85:a1:8f:a7:bd:ea:38:ec:b2:d8:ea:3d:ff:2a:0b:61:69:47:
28:c3:ff:ee:5c:8d:15:74:af:77:42:61:4e:3e:01:6a:c5:60:
c8:28:b7:3a:4b:a9:de:51:5f:95:db:9c:3c:0a:3d:86:5a:a7:
c8:21:94:06:fb:46:5f:e6:7b:a7:2f:92:24:50:bd:f9:bd:95:
ab:91:0e:bf:0a:c8:3e:4c:27:8c:58:dd:96:cf:43:fd:ed:a8:
97:84:34:3f:88:b9:03:82:e3:2c:27:bd:e4:eb:d4:0d:15:c2:
94:aa:00:4c:4a:96:89:66:dc:91:42:be:83:66:00:c7:db:fa:
67:ee:3b:cf
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
Q0Y0NDExMC8GA1UEBRMoODE4QkJFMDUxMTA4QTlBNjJCMDZGQzY5RTRCRkEzNjk3
RTY1RTMwRjAeFw0yNjAzMDMwNTE4MTlaFw0yNjAzMTAwNTE4MTlaMBgxFjAUBgNV
BAMTDTY5YTY2ZjFjLTY5NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCuF4MFJKXEC8/kbuAkY7ec1mPGsKPn5rWbCDzsFMzTaw4NsyL6K7qwKtg18RrM
AptapiOIXtGSdkPxtqVyvtOYyhIb1cxtBWhdoAUzMDQoc1RyFKsswAgv/et0itvA
cbCla++0/SCG3k/mZGFPJnB5uWKTi/U5OUt6ycmxRfZGG6SYXezlXwDNzw0MIyav
vfVvRpdF4BZPsGfY8a57tFuKC+irV8LZ8CMh4oa9Y/eFiS+2wuZ4MioI8z7H0me1
ryqm5G4NPazZ1yEQWow/awddkb+UnVmKOytabqmqtcYw8TkK8xH1B8TGE+/RM0OM
KV2GVCKy4ry3+FLU0x/+x8vTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUweDv4baq
xsoO1e8EGGJSyO1hTcAwHwYDVR0jBBgwFoAUgYu+BREIqaYrBvxp5L+jaX5l4w8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDRjQ0L0NENkQ2QzdFNUUy
MDExRjBBREFBNEI2RkM0RjlBRTAyL2dZdS1CUkVJcWFZckJ2eHA1TC1qYVg1bDR3
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZ1l1LUJSRUlxYVlyQnZ4cDVMLWphWDVsNHc4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD
RjQ0L0NENkQ2QzdFNUUyMDExRjBBREFBNEI2RkM0RjlBRTAyL2dZdS1CUkVJcWFZ
ckJ2eHA1TC1qYVg1bDR3OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBVbz5fCZnB0/S/NDEzQ3F9XbD5Un6mSehHv82VWEwkkk38GJUv6p1UiBKSeXjH
uPv9JMTob5lCLq3REBkIVQ4/VzUj15LOV6kCGfbcVI0CWR2EcstZQXY7x4WTsU25
xqPZGe2T037UZ4ESYvU0QK5sRy06HL3rritbXyWzHgiFoY+nveo47LLY6j3/Kgth
aUcow//uXI0VdK93QmFOPgFqxWDIKLc6S6neUV+V25w8Cj2GWqfIIZQG+0Zf5nun
L5IkUL35vZWrkQ6/Csg+TCeMWN2Wz0P97aiXhDQ/iLkDguMsJ73k69QNFcKUqgBM
SpaJZtyRQr6DZgDH2/pn7jvP
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:18:44 2026 by rpki-client