
$ rpki-client -vvf rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
File: gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft (raw, json)
Hash identifier: 1kDgbkDQt2k/q1drUY+FtGCU8HEthTllskxkMI2VnBE=
Subject key identifier: E4:6B:8A:B4:2B:36:F0:F9:E7:0C:89:F1:FD:B4:E4:C8:62:9B:29:F2
Authority key identifier: 83:25:D0:C6:8A:AB:CF:D9:AA:C8:9F:6A:ED:68:4D:49:92:EF:3A:75
Certificate issuer: /CN=A91357FC/serialNumber=8325D0C68AABCFD9AAC89F6AED684D4992EF3A75
Certificate serial: 55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
Manifest number: 53
Signing time: Fri 17 Apr 2026 07:51:44 +0000
Manifest this update: Fri 17 Apr 2026 07:51:44 +0000
Manifest next update: Fri 24 Apr 2026 07:51:44 +0000
Files and hashes: 1: gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl (hash: cNuBUesG/qjDgKEBkr1qR2iZdCeP6iv6uckHYiw99VE=)
2: 11D4EBBABDFA11F08D47856DC4F9AE02.roa (hash: 3X+EOsnNO57Tvw+PE+y9DH9UPpOfFFAiDnB8nkxzx7s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl
rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:51:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91357FC, serialNumber=8325D0C68AABCFD9AAC89F6AED684D4992EF3A75
Validity
Not Before: Apr 17 07:51:44 2026 GMT
Not After : Apr 24 07:51:44 2026 GMT
Subject: CN=69e1e690-6aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:ae:58:5c:a6:b1:c6:a5:77:e3:83:78:f1:
cd:bb:08:dc:66:0d:c1:bf:f8:00:38:4c:43:a6:56:
7f:47:0f:21:8c:63:63:d3:7f:0e:e8:6d:67:f2:55:
f9:43:46:23:93:b1:0c:a0:11:0f:88:59:4b:fd:d8:
f3:4a:3b:4e:4e:7e:9c:45:4c:56:18:fd:34:8b:4e:
34:b8:c8:5d:11:42:9f:2d:a3:ff:aa:5f:e3:44:e7:
d6:77:10:1f:61:24:3f:0e:37:c7:eb:78:fa:6c:82:
70:1f:e0:ad:a2:ea:f4:bd:46:6d:bd:02:5a:11:00:
3d:8b:4e:19:1f:55:77:1c:c1:a4:a9:6c:5e:f6:1d:
13:5d:07:f3:b1:75:45:fe:06:7d:b6:5b:41:1d:40:
5a:fb:97:b3:89:80:33:0c:85:fa:3a:07:f7:1f:ce:
69:15:e4:7f:3a:2d:6f:b7:c2:37:00:a2:59:a1:80:
ab:ef:1f:75:10:b3:b5:c4:2a:8f:fe:bd:47:48:64:
55:65:e4:36:6d:c4:2a:42:29:a3:8c:c4:4e:32:1c:
9f:d7:92:b9:73:5a:42:ee:ec:80:89:46:7a:dc:c1:
7d:10:f6:27:e0:fa:c8:9f:39:75:a1:a3:7f:49:4e:
5c:75:2e:9d:55:ea:4a:30:7d:d5:63:c1:16:c2:ca:
17:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6B:8A:B4:2B:36:F0:F9:E7:0C:89:F1:FD:B4:E4:C8:62:9B:29:F2
X509v3 Authority Key Identifier:
keyid:83:25:D0:C6:8A:AB:CF:D9:AA:C8:9F:6A:ED:68:4D:49:92:EF:3A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:90:bc:9a:16:b9:6e:d1:85:29:c8:15:2b:73:a4:49:91:94:
8f:99:f4:4c:c6:e2:2d:a8:ec:c3:07:c1:4d:8b:5f:1a:54:ec:
69:fc:2a:e5:37:65:e7:02:70:83:ae:9c:32:4a:79:0d:4f:d8:
42:43:61:82:ea:bc:38:da:a4:3a:ec:19:5b:10:ff:1e:7d:89:
11:ef:8c:bc:9b:56:aa:cb:73:0c:39:5a:b5:2f:33:d4:15:2d:
11:93:17:f1:09:5d:e6:34:03:b6:02:83:6a:4f:72:a4:07:22:
6a:83:42:b8:77:55:ab:37:60:91:37:4b:f9:64:d5:00:29:78:
f5:c7:43:27:f1:fe:18:09:03:fe:13:e2:72:49:a9:18:0f:36:
5c:c9:f8:31:7a:ef:d5:ee:b5:5a:27:34:b9:6e:9d:9e:e4:e5:
06:09:a6:5a:43:2e:fd:aa:d7:9a:6f:2d:7c:d3:b3:43:1d:b5:
ca:a2:59:bb:f4:08:c8:5a:33:eb:13:1b:b0:44:d3:8d:64:18:
e8:c7:d4:59:fa:76:6f:0d:e0:3f:be:b3:52:53:9e:89:22:d1:
51:26:bd:d8:b4:90:55:bb:25:25:fc:bf:1e:1b:ac:10:34:c2:
92:c6:4f:18:fe:ac:b0:41:7e:65:be:fa:f0:af:2d:d6:c8:82:
90:d0:77:fe
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NTdGQzExMC8GA1UEBRMoODMyNUQwQzY4QUFCQ0ZEOUFBQzg5RjZBRUQ2ODRENDk5
MkVGM0E3NTAeFw0yNjA0MTcwNzUxNDRaFw0yNjA0MjQwNzUxNDRaMBgxFjAUBgNV
BAMTDTY5ZTFlNjkwLTZhYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIlq5YXKaxxqV344N48c27CNxmDcG/+AA4TEOmVn9HDyGMY2PTfw7obWfyVflD
RiOTsQygEQ+IWUv92PNKO05OfpxFTFYY/TSLTjS4yF0RQp8to/+qX+NE59Z3EB9h
JD8ON8frePpsgnAf4K2i6vS9Rm29AloRAD2LThkfVXccwaSpbF72HRNdB/OxdUX+
Bn22W0EdQFr7l7OJgDMMhfo6B/cfzmkV5H86LW+3wjcAolmhgKvvH3UQs7XEKo/+
vUdIZFVl5DZtxCpCKaOMxE4yHJ/XkrlzWkLu7ICJRnrcwX0Q9ifg+sifOXWho39J
Tlx1Lp1V6kowfdVjwRbCyhcbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5GuKtCs2
8PnnDInx/bTkyGKbKfIwHwYDVR0jBBgwFoAUgyXQxoqrz9mqyJ9q7WhNSZLvOnUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1N0ZDLzkwQjlGRDE4QkRG
OTExRjA4MkNENTI2Q0M0RjlBRTAyL2d5WFF4b3FyejltcXlKOXE3V2hOU1pMdk9u
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZ3lYUXhvcXJ6OW1xeUo5cTdXaE5TWkx2T25VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1
N0ZDLzkwQjlGRDE4QkRGOTExRjA4MkNENTI2Q0M0RjlBRTAyL2d5WFF4b3Fyejlt
cXlKOXE3V2hOU1pMdk9uVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBPkLyaFrlu0YUpyBUrc6RJkZSPmfRMxuItqOzDB8FNi18aVOxp/CrlN2XnAnCD
rpwySnkNT9hCQ2GC6rw42qQ67BlbEP8efYkR74y8m1aqy3MMOVq1LzPUFS0Rkxfx
CV3mNAO2AoNqT3KkByJqg0K4d1WrN2CRN0v5ZNUAKXj1x0Mn8f4YCQP+E+JySakY
DzZcyfgxeu/V7rVaJzS5bp2e5OUGCaZaQy79qteaby1807NDHbXKolm79AjIWjPr
ExuwRNONZBjox9RZ+nZvDeA/vrNSU56JItFRJr3YtJBVuyUl/L8eG6wQNMKSxk8Y
/qywQX5lvvrwry3WyIKQ0Hf+
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:45:05 2026 by rpki-client