
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
File: GyXsWdB_k0JLkMItNOyrIq2FKpc.mft (raw, json)
Hash identifier: HLxugBvzVyEqeMrx3mg5B0TNECaRNWME55/fH+NDUMo=
Subject key identifier: 66:37:CC:95:17:05:DB:EE:D3:84:F9:BC:C7:46:69:D2:8A:86:90:89
Authority key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97
Certificate issuer: /CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97
Certificate serial: 02B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
Manifest number: 02AE
Signing time: Mon 27 Jul 2026 02:47:36 +0000
Manifest this update: Mon 27 Jul 2026 02:47:35 +0000
Manifest next update: Mon 03 Aug 2026 02:47:35 +0000
Files and hashes: 1: GyXsWdB_k0JLkMItNOyrIq2FKpc.crl (hash: Ujvbseb4E2JjZm/sM7QOaKH6zj0n1vZy7pQirtO01es=)
2: 790195326F6411ED83BC230FC4F9AE02.roa (hash: d195UYb4Ma776b6MiFJV4Wd3T3+N6fZWCyC5k9KeQyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl
rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693 (0x2b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886EA, serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97
Validity
Not Before: Jul 27 02:47:35 2026 GMT
Not After : Aug 3 02:47:35 2026 GMT
Subject: CN=6a66c6c8-215d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:03:41:a0:09:79:c5:de:f6:02:18:51:bc:
60:cd:c3:23:ca:78:ce:d6:1f:f8:5f:d2:53:22:2f:
a4:fe:28:ff:8c:2f:a6:76:82:f3:5b:1a:ba:44:69:
c7:ee:9f:3c:f6:09:53:48:4c:93:5a:02:1c:43:e8:
fa:6d:84:b8:24:63:61:c9:e1:bc:56:b9:52:83:6e:
99:78:ae:de:36:a9:b7:2f:e7:90:78:3d:ed:9d:1f:
3b:ab:30:89:52:f7:e8:d3:c7:87:c1:67:90:39:68:
60:a1:0d:86:b9:d9:5e:1d:a6:38:34:00:ff:1a:f9:
cc:07:45:50:2b:c0:33:1b:93:0e:03:f0:fa:0c:85:
7e:06:e5:73:29:54:25:b7:01:bb:22:a4:3e:ee:b7:
17:1c:f6:8c:ec:73:fa:6f:30:42:61:8c:01:97:cf:
68:a8:2e:d2:b1:7a:06:f6:46:c2:1f:0f:9f:66:1b:
c6:22:90:58:7b:3a:c5:c3:ca:48:a2:d7:f9:34:a3:
f2:10:78:32:62:60:c8:2f:2d:39:3b:76:ce:ae:25:
a7:9c:dd:c2:bf:dc:36:57:ac:97:f1:e9:e8:e5:06:
0a:8c:8c:0e:69:87:93:15:75:c0:25:8e:c8:3c:ed:
d6:59:09:d2:09:8f:c2:a6:5c:6a:99:2c:ac:54:a4:
0c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:37:CC:95:17:05:DB:EE:D3:84:F9:BC:C7:46:69:D2:8A:86:90:89
X509v3 Authority Key Identifier:
keyid:1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4a:f0:06:8d:33:2d:45:b0:40:1c:37:3f:b0:27:f6:0b:ab:
1b:44:87:5a:09:85:aa:4b:8e:7c:54:31:fe:e6:89:85:6f:43:
8f:1c:d1:3f:fe:6f:c1:44:12:81:e7:30:15:2e:2b:14:44:1d:
71:9b:dc:2a:b2:a1:de:70:ec:11:24:dc:a9:8d:fe:8a:6a:16:
c4:a8:d3:c3:2a:6d:b1:22:d8:08:e2:db:bf:f9:09:02:e4:f8:
72:02:d1:59:ac:38:bb:d7:40:ff:47:53:29:6b:5d:0e:08:f5:
eb:9f:37:5c:11:92:b4:f6:48:44:69:df:1e:99:c2:21:87:cf:
fb:d3:0a:c8:28:3b:0c:e8:f8:29:6e:3e:8d:57:d2:78:73:ae:
70:16:9f:99:b6:b4:78:c4:06:23:21:61:28:62:60:90:e9:28:
f8:db:dd:53:60:fd:62:64:05:fd:18:47:ab:0c:2f:04:44:72:
83:c1:aa:74:53:8d:f8:ac:c5:9e:ed:ca:42:14:2d:b4:3e:17:
2f:cd:0d:b9:cd:67:61:0b:a5:cf:17:be:88:f2:7b:1c:f8:4e:
a9:a2:35:66:b6:a6:72:ab:59:bf:06:45:64:64:af:d6:fe:39:
f6:29:ab:ea:e4:21:2b:bb:05:2c:a4:f0:76:6c:5d:0b:39:47:
3c:9c:ea:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:23:57 2026 by rpki-client