
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
File: GyXsWdB_k0JLkMItNOyrIq2FKpc.mft (raw, json)
Hash identifier: g2G0HDc7/30YJjTGCsIMAkLgnMGFGNM/aXqKNwuHURU=
Subject key identifier: 2D:AF:13:E0:B1:8B:F8:3B:56:EC:FF:A4:BF:A9:83:62:BB:6B:01:CC
Authority key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97
Certificate issuer: /CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97
Certificate serial: 02DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
Manifest number: 02D6
Signing time: Tue 13 Oct 2026 01:35:34 +0000
Manifest this update: Tue 13 Oct 2026 01:35:34 +0000
Manifest next update: Tue 20 Oct 2026 01:35:34 +0000
Files and hashes: 1: GyXsWdB_k0JLkMItNOyrIq2FKpc.crl (hash: o2CQ28krEr297FuFQLTcbNE2ZkW7lTf0z3o8gFjP93g=)
2: 790195326F6411ED83BC230FC4F9AE02.roa (hash: d195UYb4Ma776b6MiFJV4Wd3T3+N6fZWCyC5k9KeQyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl
rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 01:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733 (0x2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886EA, serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97
Validity
Not Before: Oct 13 01:35:34 2026 GMT
Not After : Oct 20 01:35:34 2026 GMT
Subject: CN=6acd8ae6-886d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:eb:66:0c:80:63:82:d7:27:28:9f:ab:d9:bb:
4e:07:3a:03:97:aa:51:8c:f5:b9:f1:00:73:0f:6e:
a9:73:e4:53:f3:22:18:6e:79:b9:4e:07:04:a7:11:
e1:95:e3:0b:22:cb:01:6a:5a:fc:03:22:11:55:fc:
e0:b1:ec:27:cb:7f:ee:c8:d4:65:7f:14:1d:3c:77:
09:79:a9:88:69:c6:e9:b4:4b:95:e5:25:5f:80:59:
3d:78:51:ef:8b:f5:28:f1:f1:91:81:73:1b:d8:6e:
a1:da:54:0f:e9:12:f9:90:49:1c:e6:b2:b2:ad:68:
74:64:ca:f0:b4:29:8d:df:51:ab:ca:02:6c:c1:74:
b5:f6:26:40:0d:66:19:bf:06:64:64:f0:bf:ce:68:
9e:8b:fb:43:cc:93:8d:54:1d:91:af:0e:0c:bb:84:
96:e7:a7:7a:a5:b5:c9:8a:76:7e:50:49:a1:96:86:
44:ea:f6:1e:d3:eb:53:54:98:ac:22:e4:c5:9f:ca:
41:c3:d4:bc:22:7c:40:99:49:24:23:39:ee:37:05:
13:29:82:e5:75:54:49:2d:dc:55:d2:e3:a5:d0:c5:
65:62:77:68:97:07:e9:23:b8:2c:bd:26:74:df:64:
15:7e:1a:5e:aa:26:42:83:c3:f4:20:de:42:22:90:
b3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AF:13:E0:B1:8B:F8:3B:56:EC:FF:A4:BF:A9:83:62:BB:6B:01:CC
X509v3 Authority Key Identifier:
keyid:1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:07:98:89:6e:4b:78:f9:06:e2:df:c5:18:55:05:0a:ea:d5:
41:52:9c:cb:69:d7:32:56:6d:c9:7b:63:79:eb:d6:a3:68:10:
92:ae:61:86:ad:a9:18:9e:1f:45:b8:f7:e1:fc:86:a3:71:1c:
0a:06:eb:57:a3:6f:52:a5:de:86:18:13:e5:c7:7d:2c:5e:db:
16:84:47:08:a5:8c:ce:8c:8d:50:15:c5:f3:8f:ed:71:89:ad:
d4:0f:23:6e:68:4f:9a:17:b0:59:6e:3e:bc:f9:ed:b3:e3:d3:
c2:7c:6c:36:a1:66:76:00:a2:0f:72:05:3a:eb:76:5e:e7:d2:
a0:bd:95:06:a6:93:19:02:a7:6f:4e:d0:6a:ee:71:2f:a5:54:
21:dd:ff:0c:11:7a:34:37:de:6a:1a:a5:9c:82:71:95:87:18:
bd:75:48:6d:a8:4a:fc:6d:4d:fe:04:9a:15:be:22:fa:1a:f5:
f7:ac:af:6e:e9:6e:f6:33:85:a5:69:4b:51:d4:70:5f:83:4d:
1e:17:b0:35:15:a8:6d:61:e8:fb:82:4d:79:17:11:3d:16:85:
21:e0:67:dc:c2:c8:69:68:4d:24:2d:50:55:8e:b9:8c:7c:29:
4e:3b:01:e4:82:65:49:08:78:85:53:52:da:5c:fb:19:d5:a8:
b3:04:ab:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:18:55 2026 by rpki-client