
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
File: GyXsWdB_k0JLkMItNOyrIq2FKpc.mft (raw, json)
Hash identifier: KESTWtGTgOhJIDBS6pbhgOG1LPBiGPHb8cT4QU/a6n8=
Subject key identifier: BB:F4:13:77:84:51:E2:E9:81:FD:AA:29:60:EF:D9:2F:3B:17:29:2F
Authority key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97
Certificate issuer: /CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97
Certificate serial: 0277
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
Manifest number: 0270
Signing time: Wed 25 Mar 2026 01:26:29 +0000
Manifest this update: Wed 25 Mar 2026 01:26:28 +0000
Manifest next update: Wed 01 Apr 2026 01:26:28 +0000
Files and hashes: 1: GyXsWdB_k0JLkMItNOyrIq2FKpc.crl (hash: RVcqL9fdOrXjPAO3sbhvslBUDFtwjPKgrimlUACSnx8=)
2: 790195326F6411ED83BC230FC4F9AE02.roa (hash: d195UYb4Ma776b6MiFJV4Wd3T3+N6fZWCyC5k9KeQyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl
rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:26:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 631 (0x277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886EA, serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97
Validity
Not Before: Mar 25 01:26:28 2026 GMT
Not After : Apr 1 01:26:28 2026 GMT
Subject: CN=69c339c5-c6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fe:dc:db:14:8c:02:72:ff:b5:2a:ca:4d:bb:
6d:13:48:3b:94:13:74:7d:d2:d0:dd:e6:92:96:84:
70:8d:45:08:66:90:1c:43:68:e2:1f:f8:d7:96:7b:
0d:b5:ea:40:67:5d:04:6c:9c:77:51:1c:53:fe:98:
ea:eb:18:65:12:10:52:ed:4b:d6:1c:c1:63:0e:f2:
6a:d2:d8:94:8f:a1:7c:a2:5e:d7:30:4d:42:c3:5c:
c3:59:39:db:85:60:ab:b2:cc:e7:bc:69:50:23:7b:
5e:b7:48:a9:85:27:35:b0:24:73:cf:65:b5:e8:55:
a8:e4:e3:93:db:92:0f:e3:8e:84:7a:f0:dd:d0:0a:
50:79:2d:35:76:de:a4:da:a2:78:5a:3f:51:bf:75:
93:49:fa:5f:14:a0:7c:b5:49:b2:e8:bb:f1:a6:f3:
6e:b1:24:f9:a7:7c:aa:2d:58:ac:55:62:12:be:98:
1b:be:f2:61:1a:d8:51:fe:d9:7b:a0:33:89:c5:43:
79:94:fa:95:bb:c0:91:30:94:18:5d:10:3e:c2:77:
05:ee:7d:f3:6a:be:a6:5c:68:bf:1d:23:cb:79:d0:
95:0b:c5:14:4c:df:03:55:7d:cb:8c:da:3c:09:1d:
76:c7:3b:8a:15:58:f9:37:88:94:87:5c:74:18:6f:
3d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F4:13:77:84:51:E2:E9:81:FD:AA:29:60:EF:D9:2F:3B:17:29:2F
X509v3 Authority Key Identifier:
keyid:1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:0c:28:ee:e4:0f:77:4a:b7:e8:d4:7f:58:86:da:e6:fd:3d:
7d:61:74:be:6f:18:7f:3f:03:0c:c8:66:10:93:b9:11:0b:89:
fb:b3:71:74:c7:19:9b:ef:23:69:a8:e2:84:ed:81:7f:e2:90:
da:7e:bb:a7:99:a6:77:71:20:0c:74:91:6f:cf:17:4a:17:89:
46:81:c2:ff:f1:9b:fa:ca:cc:ee:44:c6:ba:00:77:a8:35:e8:
54:9a:0e:44:a8:9a:db:a4:a8:a5:1a:df:8e:92:0d:98:cd:e1:
58:9b:27:21:a8:57:3f:e1:f2:d9:99:07:1b:fa:71:7e:bd:d6:
81:3f:a3:e3:f9:24:77:3e:e0:11:2a:cd:28:e5:d3:75:f7:6c:
49:fa:65:ad:33:2b:6a:9e:3c:73:30:50:fc:d7:71:bf:f9:bf:
9d:a6:75:08:f9:97:01:4e:67:fe:28:68:1f:79:ae:69:08:8e:
bd:19:8c:9f:a7:6a:b9:d4:14:b1:57:be:24:dd:6d:2c:c6:7a:
72:2d:3a:47:ad:de:b1:72:f9:cd:a7:e3:31:44:da:e1:14:f4:
8c:6d:43:33:12:80:a5:20:62:0a:37:b0:d5:1d:b3:79:26:e2:
9c:3b:b0:aa:2d:b2:82:79:7a:4a:aa:8b:2a:e4:d6:be:fc:75:
3c:ab:55:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODg2RUExMTAvBgNVBAUTKDFCMjVFQzU5RDA3RjkzNDI0QjkwQzIyRDM0RUNBQjIy
QUQ4NTJBOTcwHhcNMjYwMzI1MDEyNjI4WhcNMjYwNDAxMDEyNjI4WjAYMRYwFAYD
VQQDEw02OWMzMzljNS1jNmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6/7c2xSMAnL/tSrKTbttE0g7lBN0fdLQ3eaSloRwjUUIZpAcQ2jiH/jXlnsN
tepAZ10EbJx3URxT/pjq6xhlEhBS7UvWHMFjDvJq0tiUj6F8ol7XME1Cw1zDWTnb
hWCrssznvGlQI3tet0iphSc1sCRzz2W16FWo5OOT25IP446EevDd0ApQeS01dt6k
2qJ4Wj9Rv3WTSfpfFKB8tUmy6LvxpvNusST5p3yqLVisVWISvpgbvvJhGthR/tl7
oDOJxUN5lPqVu8CRMJQYXRA+wncF7n3zar6mXGi/HSPLedCVC8UUTN8DVX3LjNo8
CR12xzuKFVj5N4iUh1x0GG89nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLv0E3eE
UeLpgf2qKWDv2S87FykvMB8GA1UdIwQYMBaAFBsl7FnQf5NCS5DCLTTsqyKthSqX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZFQS81Mjk4ODRFMDZG
NjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2swSkxrTUl0Tk95cklxMkZL
cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d5WHNXZEJfazBKTGtNSXROT3lySXEyRktwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODZFQS81Mjk4ODRFMDZGNjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2sw
SkxrTUl0Tk95cklxMkZLcGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsQwo7uQPd0q36NR/WIba5v09fWF0vm8Yfz8DDMhmEJO5EQuJ+7NxdMcZm+8j
aajihO2Bf+KQ2n67p5mmd3EgDHSRb88XSheJRoHC//Gb+srM7kTGugB3qDXoVJoO
RKia26SopRrfjpINmM3hWJsnIahXP+Hy2ZkHG/pxfr3WgT+j4/kkdz7gESrNKOXT
dfdsSfplrTMrap48czBQ/Ndxv/m/naZ1CPmXAU5n/ihoH3muaQiOvRmMn6dqudQU
sVe+JN1tLMZ6ci06R63esXL5zafjMUTa4RT0jG1DMxKApSBiCjew1R2zeSbinDuw
qi2ygnl6SqqLKuTWvvx1PKtV/A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:31 2026 by rpki-client