
$ rpki-client -vvf rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
File: gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft (raw, json)
Hash identifier: OpOqTe8SXBNb1vW/UtKPi912NbbqiswuPEYF2eHenSs=
Subject key identifier: BB:6A:18:05:88:46:DE:9B:7C:28:8A:8B:EE:70:5E:92:BF:56:C4:A9
Authority key identifier: 83:25:D0:C6:8A:AB:CF:D9:AA:C8:9F:6A:ED:68:4D:49:92:EF:3A:75
Certificate issuer: /CN=A91357FC/serialNumber=8325D0C68AABCFD9AAC89F6AED684D4992EF3A75
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
Manifest number: 85
Signing time: Mon 27 Jul 2026 09:45:43 +0000
Manifest this update: Mon 27 Jul 2026 09:45:42 +0000
Manifest next update: Mon 03 Aug 2026 09:45:42 +0000
Files and hashes: 1: gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl (hash: xrfb/qb3KSyxpV7Djrosp6v2+bWpz7hQuIF2lxk6KjI=)
2: 11D4EBBABDFA11F08D47856DC4F9AE02.roa (hash: 3X+EOsnNO57Tvw+PE+y9DH9UPpOfFFAiDnB8nkxzx7s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl
rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91357FC, serialNumber=8325D0C68AABCFD9AAC89F6AED684D4992EF3A75
Validity
Not Before: Jul 27 09:45:42 2026 GMT
Not After : Aug 3 09:45:42 2026 GMT
Subject: CN=6a6728c7-477f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:76:84:de:96:47:13:49:65:46:98:be:e4:bd:
3c:da:93:f5:d9:17:97:fa:3a:1f:af:b3:31:ec:58:
de:0d:dd:c7:fc:54:ad:8d:ec:74:ad:41:47:ab:fa:
17:1b:85:78:63:dc:6f:68:00:da:c0:f2:f9:7b:27:
48:f6:42:5f:07:08:db:ee:4e:c1:55:98:ca:4d:e3:
e5:84:83:bb:5d:ce:fa:eb:42:76:84:0a:06:6d:1a:
f7:6b:4c:db:96:b4:c7:3a:eb:80:b3:d1:54:ed:17:
09:70:7a:57:60:53:a2:4b:00:45:32:20:44:60:cc:
2a:8d:33:e8:03:45:ac:fa:4e:bf:0a:b4:77:e2:57:
97:16:9e:9c:f9:b1:09:25:ce:2d:ef:fc:4a:ca:6f:
ca:1c:c0:47:fd:27:c3:fa:a2:16:eb:f4:f0:e2:6f:
83:04:7f:55:87:c6:b4:76:d6:6c:eb:d8:23:2e:e8:
aa:6a:22:74:a4:3e:05:46:70:d2:b4:95:a9:7d:7d:
9b:b5:a3:fd:f4:69:ff:70:4e:0e:d1:9c:95:8a:f9:
20:94:12:f9:8a:bb:27:16:db:64:6c:32:5a:ed:19:
46:e5:de:1c:02:39:84:52:93:2a:1e:21:5d:0e:96:
29:0e:a0:82:9c:1e:eb:7b:35:66:7b:e2:60:40:24:
6f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6A:18:05:88:46:DE:9B:7C:28:8A:8B:EE:70:5E:92:BF:56:C4:A9
X509v3 Authority Key Identifier:
keyid:83:25:D0:C6:8A:AB:CF:D9:AA:C8:9F:6A:ED:68:4D:49:92:EF:3A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:61:df:4d:54:65:0a:5b:01:d2:ab:c2:01:b2:c3:d9:5c:29:
3e:99:86:d5:c3:8d:70:e6:e7:74:0e:e1:92:45:03:ef:9f:4c:
f0:2b:ff:71:0c:ce:d9:1a:1b:42:a9:f2:7f:be:57:58:b5:c6:
e1:bf:bc:ec:af:f6:f2:9a:db:30:66:2a:fd:7a:20:45:b7:42:
ba:1f:54:42:38:12:30:eb:50:7e:9b:75:e8:8a:51:e3:db:80:
90:17:e3:85:53:85:30:30:5f:36:c7:6d:43:da:c8:ef:f1:f1:
b1:51:77:28:6a:cb:87:2d:4f:45:7b:b8:74:7b:cc:56:fe:63:
aa:a1:ad:c1:0d:73:0f:d1:4a:43:01:6c:3b:51:02:c9:a5:1b:
42:a7:6a:87:2b:0c:88:08:6b:cd:1c:5b:05:99:59:ee:0e:ca:
dc:b9:99:8b:63:c6:c0:61:34:12:a0:6e:79:d8:12:56:45:b1:
db:b3:de:d1:21:4e:94:8b:0a:07:f8:fe:70:6a:55:6f:99:39:
9f:d8:60:a2:8e:12:3f:0a:18:16:f6:ca:a4:e2:dd:3f:e1:0c:
fa:a0:c9:21:18:f3:f3:80:79:b2:f1:ca:16:e9:ea:23:cf:53:
b6:4e:c7:c5:3a:75:32:6e:8b:3b:ab:1a:6a:cd:04:1b:42:f2:
bf:ec:0b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:32:57 2026 by rpki-client