
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
File: gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft (raw, json)
Hash identifier: uhaAjBUBF0QKc/ktgAjfrpG4ovpM8QrTWg16x6B3gDw=
Subject key identifier: B9:60:9B:0F:13:53:54:3F:E2:C0:B9:C7:F3:4D:DA:BE:50:79:83:97
Authority key identifier: 83:25:D0:C6:8A:AB:CF:D9:AA:C8:9F:6A:ED:68:4D:49:92:EF:3A:75
Certificate issuer: /CN=A91357FC/serialNumber=8325D0C68AABCFD9AAC89F6AED684D4992EF3A75
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
Manifest number: A5
Signing time: Sun 27 Sep 2026 07:43:07 +0000
Manifest this update: Sun 27 Sep 2026 07:43:06 +0000
Manifest next update: Sun 04 Oct 2026 07:43:06 +0000
Files and hashes: 1: gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl (hash: OubWRDFie/C5CkUVL5r0M4CEzVdzwwlQ5KiKdkUTdOM=)
2: 11D4EBBABDFA11F08D47856DC4F9AE02.roa (hash: 3X+EOsnNO57Tvw+PE+y9DH9UPpOfFFAiDnB8nkxzx7s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl
rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 07:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91357FC, serialNumber=8325D0C68AABCFD9AAC89F6AED684D4992EF3A75
Validity
Not Before: Sep 27 07:43:06 2026 GMT
Not After : Oct 4 07:43:06 2026 GMT
Subject: CN=6ab8c90b-4be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6f:39:49:41:25:0d:9a:a6:1d:ee:ff:76:79:
f5:5d:fa:d2:c2:72:b8:2d:e2:76:34:8d:78:41:ff:
01:9d:1a:de:eb:5c:76:bf:02:6c:b3:6b:0b:41:d9:
49:23:f9:2d:3b:59:8b:0d:cb:40:ab:60:ed:4c:86:
27:2e:88:3b:87:97:61:2b:69:4d:d8:d7:1a:e2:71:
8e:c9:6f:bb:9a:d0:d0:d5:0f:e5:85:01:30:43:ea:
fb:1c:b8:ae:23:ad:58:83:d1:f2:b8:7a:7d:64:9f:
00:2d:d3:3e:1c:3a:5c:0c:f0:54:cf:bd:d6:92:b2:
cd:02:75:46:60:2d:b8:78:a0:3e:d0:f1:fb:78:7c:
bf:6a:21:f2:fa:3d:0f:30:b8:2a:0c:05:ea:d3:79:
e0:83:db:c6:2e:57:51:4b:18:ee:67:5e:74:36:61:
e6:4f:cf:6b:df:b3:b9:b1:a9:13:a5:64:3b:da:9d:
f6:94:32:dc:5d:df:16:e6:50:be:60:3c:f0:20:09:
5a:83:60:6a:32:01:98:b3:22:ad:af:5f:5c:48:dd:
a7:f2:59:c4:83:40:e6:52:02:85:b4:d3:ee:78:b0:
66:c5:2a:ff:65:21:e4:ae:d2:bc:3a:44:78:99:cb:
86:96:ff:7e:8f:28:ef:d0:5d:9e:15:18:0b:f8:1e:
a8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:60:9B:0F:13:53:54:3F:E2:C0:B9:C7:F3:4D:DA:BE:50:79:83:97
X509v3 Authority Key Identifier:
keyid:83:25:D0:C6:8A:AB:CF:D9:AA:C8:9F:6A:ED:68:4D:49:92:EF:3A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:f0:90:32:59:9a:ed:1e:ae:41:0e:df:39:b0:d0:e9:50:ac:
68:6d:c3:d4:e4:3a:f2:3c:5b:19:e6:8c:0f:80:e6:92:4e:3b:
4e:24:29:b4:e2:81:da:51:ae:cd:ea:ab:c5:21:c8:03:d8:a3:
c1:7c:dc:98:45:dc:9f:ef:7c:78:70:45:dd:22:e2:4d:0b:2e:
82:1f:df:0d:1f:bc:93:e4:da:46:89:55:c2:5c:e4:47:db:1e:
ad:33:e4:ce:24:6b:b3:8a:dd:03:e0:1a:57:2e:a7:ed:cd:85:
23:3b:8c:97:d1:c1:17:fb:20:e1:65:9d:c8:d7:ab:5d:89:d1:
5c:32:6f:10:38:87:65:31:fc:10:0a:b0:45:2c:46:84:28:dd:
49:4e:54:dc:3d:39:de:1a:60:65:84:5e:29:b5:70:e8:ec:06:
84:de:8d:dd:4e:9e:47:13:98:1e:2a:9f:57:a4:e8:83:a9:c6:
f8:5b:14:ef:48:7c:9a:6b:ec:5c:01:93:2b:47:fc:00:5f:bf:
04:a3:c5:56:72:1a:bd:26:65:08:3b:19:b9:eb:84:d7:d1:b7:
49:53:b1:31:e8:86:57:6f:e1:2f:15:22:7b:14:b1:cd:ed:8e:
fc:bf:6e:2d:1c:64:16:27:46:ef:4a:20:03:7e:b4:20:2b:d1:
10:71:24:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:14:24 2026 by rpki-client