
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
File: gYu-BREIqaYrBvxp5L-jaX5l4w8.mft (raw, json)
Hash identifier: EczWvO1ZLCbo3KCKo3i/JpjejBaxRiHje+a7epW9udc=
Subject key identifier: 85:00:CA:1E:54:9B:E7:CB:2A:CE:C3:3F:95:8B:70:B4:B9:D0:EC:F8
Authority key identifier: 81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F
Certificate issuer: /CN=A91FCF44/serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F
Certificate serial: 78
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
Manifest number: 78
Signing time: Sun 01 Mar 2026 06:47:10 +0000
Manifest this update: Sun 01 Mar 2026 06:47:10 +0000
Manifest next update: Sun 08 Mar 2026 06:47:10 +0000
Files and hashes: 1: gYu-BREIqaYrBvxp5L-jaX5l4w8.crl (hash: EFxG3J2xDePdjkAMli6OTyVN37AZ1ar5xY9wvEjJ5sQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl
rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCF44, serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F
Validity
Not Before: Mar 1 06:47:10 2026 GMT
Not After : Mar 8 06:47:10 2026 GMT
Subject: CN=69a3e0ee-a082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:88:3c:31:ef:bb:b0:94:0b:3d:67:03:e3:6e:
2f:83:19:eb:db:05:d0:30:d8:13:37:bf:2c:e9:d2:
8a:94:67:5a:68:4c:99:a7:c4:ec:07:01:37:36:e4:
5b:43:94:6c:88:49:5d:70:87:84:c3:d8:5f:1f:2d:
05:87:fd:de:11:0a:92:90:41:75:4b:6f:4a:db:a3:
98:53:04:f3:7f:b4:20:bb:9e:68:e8:4b:b4:02:71:
48:26:a1:f2:b7:53:43:1d:db:c5:de:ca:c6:06:aa:
fc:4b:84:77:50:87:01:47:44:95:a0:42:af:35:d2:
a8:d8:85:2d:96:ba:ee:bd:f1:3f:52:79:90:e0:44:
ec:3f:db:28:bf:23:fb:5b:0c:d2:c1:a3:10:d1:55:
4c:c5:95:e0:60:a2:50:d8:65:6b:d4:ea:90:fc:78:
a6:c6:08:ac:34:25:b6:0b:5c:cf:37:e7:1e:7a:1c:
c1:34:83:ac:ab:aa:fe:b4:8b:9e:93:0e:c1:5a:c5:
10:ef:3a:8c:c0:cf:f2:54:3b:92:18:ef:4e:27:f0:
ce:39:cd:5c:e1:43:c1:0d:3c:9c:50:d6:9e:b5:ab:
9d:d9:48:3b:2c:ab:1d:13:01:66:b8:c1:e7:ae:0b:
9b:d0:91:e3:1e:aa:1f:33:63:e5:6d:af:3e:1e:30:
48:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:00:CA:1E:54:9B:E7:CB:2A:CE:C3:3F:95:8B:70:B4:B9:D0:EC:F8
X509v3 Authority Key Identifier:
keyid:81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:34:3e:d8:76:cb:23:c4:ac:4b:cc:43:3c:78:01:2d:58:23:
8c:f1:84:37:ef:fc:b0:3d:c1:bd:a1:97:f5:ef:36:2c:d1:9b:
1f:99:a8:28:0e:c6:92:91:ff:99:73:0d:ce:35:c3:83:ee:52:
0a:91:2b:37:fd:dc:51:13:5e:2b:b3:b8:72:ea:29:6d:43:c4:
c0:ec:1a:56:8d:17:4e:07:21:7b:c4:48:0d:81:b7:32:6a:da:
86:69:b0:c7:be:c3:0a:21:31:9d:4d:4d:3e:90:bb:5c:9b:d0:
b3:b6:29:ec:72:d0:15:1a:57:c9:c7:6a:e2:12:03:ab:a4:f8:
8a:5c:9c:05:39:65:e0:f1:26:4f:16:74:45:c2:23:1e:35:ab:
fc:34:a3:9e:6a:a3:56:c4:5d:f3:dd:1f:33:2d:2e:25:31:72:
d1:12:30:fe:f3:4b:41:e5:22:eb:23:05:b8:00:f7:37:d8:82:
c3:ab:24:8e:d2:6b:1e:e5:e9:1f:3f:e1:a1:1a:ed:41:99:b8:
72:3e:fd:83:43:7f:be:1f:d7:7d:c4:28:db:6d:91:fe:06:a4:
7c:84:64:84:85:19:f6:87:fa:e8:0c:27:73:3e:4a:fe:05:cd:
72:84:42:b0:9f:f3:f5:01:ee:a4:20:f0:c9:94:8c:a0:2a:f2:
2d:55:ad:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:21:51 2026 by rpki-client