
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
File: gYu-BREIqaYrBvxp5L-jaX5l4w8.mft (raw, json)
Hash identifier: 7z0uw7p/x90D3X62TO2o3XXPr5VyZ8zxXTxwcnTMGpE=
Subject key identifier: 47:D1:09:9A:0A:E1:AF:C7:E3:69:CF:CD:A1:1B:D3:E0:D5:06:1C:05
Authority key identifier: 81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F
Certificate issuer: /CN=A91FCF44/serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F
Certificate serial: 93
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
Manifest number: 93
Signing time: Fri 17 Apr 2026 05:07:53 +0000
Manifest this update: Fri 17 Apr 2026 05:07:52 +0000
Manifest next update: Fri 24 Apr 2026 05:07:52 +0000
Files and hashes: 1: gYu-BREIqaYrBvxp5L-jaX5l4w8.crl (hash: BBisV9UjxfDqCHKQY6y+pikBEIu28qBAcqNUbT1U43s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl
rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCF44, serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F
Validity
Not Before: Apr 17 05:07:52 2026 GMT
Not After : Apr 24 05:07:52 2026 GMT
Subject: CN=69e1c028-e72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:1b:ac:bf:b8:51:2c:43:2e:1e:34:ef:d6:
c4:a2:fb:f0:96:cd:53:f7:3e:eb:ff:e4:22:37:8d:
6d:33:fc:01:7c:33:95:f7:2b:f8:51:53:30:33:10:
64:40:64:0f:eb:75:6a:30:c9:5a:10:b8:ef:bc:90:
e8:fe:2b:f9:38:0a:0e:c1:ad:88:e3:a2:95:08:ba:
16:12:bd:94:e6:4f:ba:07:45:77:f5:f7:4e:34:7c:
09:70:ca:87:03:bb:6b:16:1b:0f:99:97:be:e0:23:
6a:d8:69:59:03:dc:fb:a0:65:79:ef:4d:4c:20:a5:
64:26:8f:b2:e5:e9:51:9c:28:35:cb:fc:15:1f:d1:
11:d9:9d:94:1c:1f:2c:c9:65:a9:f0:0a:0f:08:a0:
c0:5c:36:64:9b:91:2e:69:3a:20:d5:ba:6c:ec:cb:
46:0a:c0:c0:55:ef:00:ba:d2:e3:f7:0f:66:50:fc:
bf:3d:0b:c5:11:d8:ad:5a:67:12:af:6d:69:d1:3c:
7f:2e:63:98:db:1c:2a:e3:8e:0a:77:3d:c7:85:31:
a5:df:1d:28:b0:8a:06:65:40:1e:f4:cf:37:23:91:
38:91:4e:d6:05:a5:cd:d5:d4:1e:01:a9:51:1a:d9:
51:db:32:4d:18:6b:a5:9a:51:7f:d3:dc:a1:e2:47:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D1:09:9A:0A:E1:AF:C7:E3:69:CF:CD:A1:1B:D3:E0:D5:06:1C:05
X509v3 Authority Key Identifier:
keyid:81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:99:42:5e:f2:8a:aa:7a:d9:7f:54:20:46:c7:98:80:31:d7:
6b:22:ea:03:ba:83:50:e2:40:8a:d1:7a:fc:91:ab:75:32:de:
45:7b:f4:47:a7:75:84:13:54:35:24:67:d6:42:90:ff:f3:a2:
66:6f:c2:fc:fe:3c:80:e3:21:7e:e4:cb:a2:89:ca:8f:9c:4c:
fd:f7:5f:ad:e5:92:c4:6e:0b:f8:f4:01:67:b0:46:15:74:25:
79:5f:a3:f9:56:67:27:8d:69:26:2a:c5:d0:d2:6b:e8:96:6e:
08:19:47:fd:ef:22:56:1b:9e:b5:3a:91:21:50:41:cf:a7:91:
11:b1:ee:99:e0:6e:10:ed:5e:9c:1c:4a:8b:5e:d0:5b:b4:de:
4c:84:c9:60:61:8c:75:70:e2:6b:f5:01:a3:69:be:7e:2d:4a:
e3:63:4a:c7:19:d5:43:a2:bc:f8:fc:80:8d:45:34:d0:27:2b:
9b:2e:bf:24:6c:8d:52:0f:63:32:70:0a:ab:bd:8f:a3:89:30:
71:b8:c6:5e:8f:4d:20:f6:6e:ee:02:ef:bf:5e:f3:e1:0b:af:
81:3e:98:90:b2:f8:43:92:6d:2a:21:e5:b3:b5:e5:db:8f:aa:
b5:d5:a3:36:bb:be:05:7c:4e:b5:38:fb:75:0f:a8:f3:50:dc:
04:6b:f7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:11:23 2026 by rpki-client