
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft
File: gyJEswLRZc14vcOiErC35vkL_GA.mft (raw, json)
Hash identifier: RYVcthEN9BWB+2C1S0ggl232OJM7wjJjlVFXzTDfPKw=
Subject key identifier: 53:6D:BA:56:F0:57:47:94:41:28:B6:6C:66:14:C8:57:C5:8A:AB:7A
Authority key identifier: 83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60
Certificate issuer: /CN=A91F5AAD/serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60
Certificate serial: 0753
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft
Manifest number: 0749
Signing time: Sat 10 Oct 2026 21:57:29 +0000
Manifest this update: Sat 10 Oct 2026 21:57:28 +0000
Manifest next update: Sat 17 Oct 2026 21:57:28 +0000
Files and hashes: 1: gyJEswLRZc14vcOiErC35vkL_GA.crl (hash: +oCwPAHihdiy0QezGtVNSlu4ywYYyaikuKzROSHgtIQ=)
2: D9A63D2E9D0711EBB708700BC4F9AE02.roa (hash: cDr/3Xs5cjJWfG7LyYDYX18lP6W3STlLXw7xl6t5lM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl
rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 21:57:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1875 (0x753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5AAD, serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60
Validity
Not Before: Oct 10 21:57:28 2026 GMT
Not After : Oct 17 21:57:28 2026 GMT
Subject: CN=6acab4c9-1bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:80:a7:7e:ea:0b:38:77:cc:86:4c:7b:4a:
1e:ec:b2:5f:e4:6a:0b:1d:6b:34:f0:94:60:42:f6:
45:39:66:fd:e4:6c:36:ad:82:d4:e9:29:4e:6b:21:
2a:d7:43:a6:7d:74:04:d1:f1:44:32:dd:01:c5:97:
f3:6c:55:91:ff:fb:66:37:83:56:19:0f:fa:67:9d:
07:a4:0e:bf:c0:6f:32:52:fd:82:5f:d5:c4:da:b8:
46:ac:39:4f:f8:4e:5b:cf:19:9b:5f:e3:5e:0e:1f:
7e:da:d0:3c:ba:de:e8:7e:7a:c2:7c:09:b2:99:9e:
75:a4:d6:c5:20:7b:47:8c:39:a4:da:a0:6c:fd:c6:
d1:1a:40:0c:de:55:96:57:6d:5f:6f:9d:5f:98:c9:
33:a4:dc:36:3c:06:19:85:e8:df:93:df:56:72:a3:
9d:72:dc:3b:98:28:d7:ab:91:de:1c:36:ef:58:68:
48:22:3b:4a:a7:3f:46:46:9e:51:12:d4:7e:29:64:
bc:03:40:51:c5:b2:a8:2a:cf:1b:6c:89:ba:0e:6c:
4e:a3:a3:a5:40:81:bd:12:10:79:d8:db:a6:05:a7:
96:e7:5b:a9:d9:fd:d7:ba:53:61:0e:39:ad:38:72:
0d:f3:82:20:fb:6c:66:30:6c:21:ce:df:75:75:6b:
dc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6D:BA:56:F0:57:47:94:41:28:B6:6C:66:14:C8:57:C5:8A:AB:7A
X509v3 Authority Key Identifier:
keyid:83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b7:4f:10:38:99:8f:11:88:04:57:4a:41:ac:22:a0:76:00:
52:03:e5:89:a0:df:07:0b:da:f6:e8:89:99:34:0f:e1:59:72:
c1:38:b9:63:b9:b0:00:6a:5c:0d:ba:57:16:f4:af:f6:0e:6a:
91:88:83:24:81:69:07:37:7c:e5:c2:ec:aa:e5:7f:ca:c7:52:
82:ca:03:89:fc:d9:27:62:0e:83:69:da:ba:ec:d5:26:77:e8:
87:d5:34:59:d7:82:d4:81:4d:51:23:a4:3d:fb:65:b7:45:4a:
ac:0e:17:cc:7a:fd:24:3b:da:6a:b9:3b:05:7c:21:64:5c:e1:
b1:84:25:16:c0:51:ef:aa:3a:92:7f:bc:6d:ac:ac:ad:57:32:
27:9e:8e:1f:e5:03:9b:79:3a:3f:66:c2:ee:42:6c:87:59:78:
fa:4b:f4:e0:9e:49:0e:90:84:42:59:29:0a:ab:6e:b3:8e:c9:
6e:21:22:75:d2:a2:4c:84:0b:b3:85:f2:9e:37:14:71:12:f1:
87:be:55:a1:c6:d7:38:81:67:2b:22:58:58:55:bd:ef:89:3d:
f7:f4:41:bf:7f:b0:07:4e:e7:a8:40:53:f3:11:58:b4:c4:00:
e9:eb:dc:c4:f2:de:08:4c:dc:a8:dd:b0:a9:19:81:63:2c:b4:
88:4a:9f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:30:00 2026 by rpki-client