
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
File: gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft (raw, json)
Hash identifier: 1BmAcOtgQfJP9LIbobhQil7wFEndWuG/uRXku9lpsfA=
Subject key identifier: 82:EB:57:88:ED:32:0E:7C:1C:33:B3:EA:92:99:6B:3D:36:4E:0C:FD
Authority key identifier: 83:25:D0:C6:8A:AB:CF:D9:AA:C8:9F:6A:ED:68:4D:49:92:EF:3A:75
Certificate issuer: /CN=A91357FC/serialNumber=8325D0C68AABCFD9AAC89F6AED684D4992EF3A75
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
Manifest number: A9
Signing time: Mon 05 Oct 2026 07:32:15 +0000
Manifest this update: Mon 05 Oct 2026 07:32:14 +0000
Manifest next update: Mon 12 Oct 2026 07:32:14 +0000
Files and hashes: 1: gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl (hash: k5hEhUjIHlZ2rL1cdeJ9k3N2LY8zJnyP0lzarcRTRWU=)
2: 11D4EBBABDFA11F08D47856DC4F9AE02.roa (hash: 3X+EOsnNO57Tvw+PE+y9DH9UPpOfFFAiDnB8nkxzx7s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl
rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 07:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91357FC, serialNumber=8325D0C68AABCFD9AAC89F6AED684D4992EF3A75
Validity
Not Before: Oct 5 07:32:14 2026 GMT
Not After : Oct 12 07:32:14 2026 GMT
Subject: CN=6ac3527f-0504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:dd:0d:4f:ae:73:b7:20:c4:8f:f1:6c:e1:
65:74:a1:d8:d4:08:9c:41:f5:3c:ce:17:8f:14:a3:
29:1c:c6:7a:77:89:81:3a:e5:93:d0:65:2b:c8:f6:
d7:55:1d:d6:59:39:46:71:08:aa:66:9d:41:36:a9:
92:38:9a:7a:fa:0f:b2:5b:73:94:dd:3a:2f:af:35:
df:ed:8c:cb:ce:c9:a9:4e:57:3b:af:92:d7:c0:70:
76:4c:80:dd:4d:5c:f6:c9:eb:38:34:a9:09:05:1a:
6b:37:c8:5f:15:fa:52:db:3f:17:e4:f6:dd:58:32:
6b:9c:38:50:89:1c:00:b4:50:71:a1:28:26:32:22:
3b:a2:ce:b8:3d:21:aa:24:39:89:87:4e:ab:86:52:
2b:ee:a6:00:8b:54:f2:f3:09:ae:cd:f0:dd:ad:d3:
c7:f2:01:ba:75:92:83:56:50:23:ce:5a:96:59:30:
5f:4c:cf:c9:43:3c:0a:ae:b7:26:16:6d:e2:02:49:
ca:9c:5b:69:f4:e3:82:06:ea:ff:e0:54:83:8c:5b:
d0:19:dd:33:2b:b7:68:33:c4:b5:64:14:19:d2:bb:
61:4f:42:ce:62:d7:ef:73:5c:5b:50:59:15:5a:4b:
1b:38:dd:cd:02:24:c5:42:c3:f3:ca:12:f6:48:46:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EB:57:88:ED:32:0E:7C:1C:33:B3:EA:92:99:6B:3D:36:4E:0C:FD
X509v3 Authority Key Identifier:
keyid:83:25:D0:C6:8A:AB:CF:D9:AA:C8:9F:6A:ED:68:4D:49:92:EF:3A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:4b:40:9d:8c:a3:dd:04:bd:db:ba:16:fb:e6:2e:7e:6c:37:
b6:c8:60:36:8c:28:bd:ca:92:a4:c8:2e:ef:b7:b2:f2:aa:e9:
eb:11:13:62:99:1f:ed:b9:cb:cc:ec:d7:4a:69:39:3e:ef:03:
b1:a8:8b:a5:00:cc:09:90:55:62:78:5b:7b:b2:7f:c3:42:b0:
ae:0d:bd:66:8b:1a:b3:88:ba:0d:02:0d:45:1a:b4:69:53:20:
ac:63:a8:bd:31:4c:9a:e3:1a:b1:2d:03:bc:94:db:6d:ac:c9:
b6:7b:a7:87:99:84:5f:f1:a5:50:94:3e:1b:00:a4:74:f9:04:
14:2b:42:ce:a6:7d:1e:c3:aa:75:f0:4c:83:f2:81:e0:2f:ee:
a7:4d:1c:34:18:96:80:9b:37:0a:e8:af:32:a9:85:5e:b7:12:
ae:63:d1:da:d5:c1:cf:b2:fe:42:b0:c2:0d:a9:58:12:cb:ef:
90:24:5e:2f:fb:39:fb:ff:a9:2e:56:a4:08:af:7e:5e:2e:b4:
b3:d0:df:b6:7a:40:bd:70:6f:99:08:39:f0:25:d5:62:5a:2e:
21:59:cd:09:90:fe:73:38:e0:eb:1e:37:75:71:4c:69:b9:30:
97:53:4e:c8:3c:30:c3:28:fe:c3:d5:5b:b4:65:16:8c:c0:9f:
02:96:a4:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzU3RkMxMTAvBgNVBAUTKDgzMjVEMEM2OEFBQkNGRDlBQUM4OUY2QUVENjg0RDQ5
OTJFRjNBNzUwHhcNMjYxMDA1MDczMjE0WhcNMjYxMDEyMDczMjE0WjAYMRYwFAYD
VQQDEw02YWMzNTI3Zi0wNTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvQjdDU+uc7cgxI/xbOFldKHY1AicQfU8zhePFKMpHMZ6d4mBOuWT0GUryPbX
VR3WWTlGcQiqZp1BNqmSOJp6+g+yW3OU3TovrzXf7YzLzsmpTlc7r5LXwHB2TIDd
TVz2yes4NKkJBRprN8hfFfpS2z8X5PbdWDJrnDhQiRwAtFBxoSgmMiI7os64PSGq
JDmJh06rhlIr7qYAi1Ty8wmuzfDdrdPH8gG6dZKDVlAjzlqWWTBfTM/JQzwKrrcm
Fm3iAknKnFtp9OOCBur/4FSDjFvQGd0zK7doM8S1ZBQZ0rthT0LOYtfvc1xbUFkV
WksbON3NAiTFQsPzyhL2SEZ16QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFILrV4jt
Mg58HDOz6pKZaz02Tgz9MB8GA1UdIwQYMBaAFIMl0MaKq8/Zqsifau1oTUmS7zp1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTdGQy85MEI5RkQxOEJE
RjkxMUYwODJDRDUyNkNDNEY5QUUwMi9neVhReG9xcno5bXF5SjlxN1doTlNaTHZP
blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d5WFF4b3FyejltcXlKOXE3V2hOU1pMdk9uVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTdGQy85MEI5RkQxOEJERjkxMUYwODJDRDUyNkNDNEY5QUUwMi9neVhReG9xcno5
bXF5SjlxN1doTlNaTHZPblUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhEtAnYyj3QS927oW++Yufmw3tshgNowovcqSpMgu77ey8qrp6xETYpkf7bnL
zOzXSmk5Pu8DsaiLpQDMCZBVYnhbe7J/w0Kwrg29Zosas4i6DQINRRq0aVMgrGOo
vTFMmuMasS0DvJTbbazJtnunh5mEX/GlUJQ+GwCkdPkEFCtCzqZ9HsOqdfBMg/KB
4C/up00cNBiWgJs3CuivMqmFXrcSrmPR2tXBz7L+QrDCDalYEsvvkCReL/s5+/+p
LlakCK9+Xi60s9DftnpAvXBvmQg58CXVYlouIVnNCZD+czjg6x43dXFMabkwl1NO
yDwwwyj+w9VbtGUWjMCfApakrg==
-----END CERTIFICATE-----
Generated at Mon Oct 5 22:52:32 2026 by rpki-client