
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
File: gYu-BREIqaYrBvxp5L-jaX5l4w8.mft (raw, json)
Hash identifier: 63Gr8tdSPoU0aGZ0ORkZJ5UF/tPwSQhX5N8HTUC+aCA=
Subject key identifier: 35:34:23:BE:6E:FC:53:84:2B:99:72:2E:35:4D:3E:11:EE:10:54:B5
Authority key identifier: 81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F
Certificate issuer: /CN=A91FCF44/serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
Manifest number: 87
Signing time: Wed 25 Mar 2026 04:48:23 +0000
Manifest this update: Wed 25 Mar 2026 04:48:23 +0000
Manifest next update: Wed 01 Apr 2026 04:48:23 +0000
Files and hashes: 1: gYu-BREIqaYrBvxp5L-jaX5l4w8.crl (hash: 16WUk0TuG+O18RmbzgcT9DXARGyDB8S7nFAQRcgt1Ao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl
rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCF44, serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F
Validity
Not Before: Mar 25 04:48:23 2026 GMT
Not After : Apr 1 04:48:23 2026 GMT
Subject: CN=69c36917-d721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:43:09:45:99:24:39:c9:23:61:5b:5e:13:
5b:1b:26:20:c6:74:f7:52:27:8a:2b:f2:1e:58:94:
4d:4e:b3:a5:3c:17:05:f7:cd:cb:c0:45:72:1e:2d:
28:93:a1:c6:48:af:1d:45:fc:14:23:cf:73:07:9e:
1b:b9:57:ac:9a:50:3e:6f:7b:e6:a4:ce:71:4a:2b:
23:41:17:04:47:bb:48:34:66:20:5e:9c:e7:8a:cf:
62:62:08:47:13:7c:e3:77:d3:94:7d:5d:95:03:c2:
7c:95:95:88:a2:3a:81:a5:b3:1f:f3:58:2d:66:73:
f7:c9:91:0d:75:ac:a3:ed:c1:01:ff:55:de:af:db:
4c:fd:7a:ba:c6:04:99:8a:2e:08:ca:d3:83:5b:fc:
3e:02:91:3c:0d:fb:74:66:fc:03:a7:6d:1b:80:17:
0e:b4:c1:61:a7:d4:bf:31:40:a2:f7:91:76:f9:95:
13:57:f3:bb:40:b1:7c:75:a4:14:d6:d7:40:ff:3a:
4a:5c:c3:ee:f2:80:da:1d:fb:14:00:de:e2:d2:2e:
bd:19:5f:81:39:36:ec:df:29:b8:c8:bd:4f:f8:a5:
92:46:c0:8d:d7:32:b9:b1:cd:e1:a6:8e:e0:16:86:
77:72:90:af:23:02:df:ef:a8:b1:90:db:57:51:7b:
7a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:34:23:BE:6E:FC:53:84:2B:99:72:2E:35:4D:3E:11:EE:10:54:B5
X509v3 Authority Key Identifier:
keyid:81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:b0:d0:0d:ca:12:77:d4:0e:30:f4:37:d9:1b:e4:56:be:13:
36:ce:19:0f:3b:71:e4:82:45:0c:8a:18:63:e2:e2:b6:3d:bc:
1b:83:fe:25:33:08:42:f0:bb:3b:b2:fe:ee:4d:23:91:66:c6:
ad:3f:0a:b8:de:64:60:e1:e3:fb:cd:69:63:cb:51:50:ab:ac:
bc:63:ac:bc:6b:3b:2b:67:b3:3d:98:90:9a:80:5f:23:63:15:
40:e4:8f:87:de:ed:ca:21:63:2e:4f:9c:22:c8:a6:24:46:ea:
a8:84:76:93:e0:f8:bb:e3:50:13:cc:5f:d5:a9:a9:ac:84:51:
51:c6:ef:fa:37:1b:24:0b:52:50:a0:8b:2e:86:c8:32:37:87:
6d:f5:18:79:a8:35:e5:bb:db:93:91:d2:a7:e2:6e:2d:0c:7e:
99:e5:ce:f4:0c:3a:95:2a:51:1f:30:ed:35:d1:2a:04:00:27:
2b:51:f2:9c:24:f4:19:49:53:98:b5:22:08:42:6d:b2:1f:7b:
54:f0:33:27:33:78:32:63:33:2f:ea:12:f3:14:9c:b6:b8:97:
19:57:8f:f1:63:f8:2b:e4:51:b2:f1:dc:74:23:83:40:c1:0e:
ba:ab:91:ba:2c:12:90:ee:82:f3:21:32:44:93:65:33:ef:b1:
0a:58:1e:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNGNDQxMTAvBgNVBAUTKDgxOEJCRTA1MTEwOEE5QTYyQjA2RkM2OUU0QkZBMzY5
N0U2NUUzMEYwHhcNMjYwMzI1MDQ0ODIzWhcNMjYwNDAxMDQ0ODIzWjAYMRYwFAYD
VQQDEw02OWMzNjkxNy1kNzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArL9DCUWZJDnJI2FbXhNbGyYgxnT3UieKK/IeWJRNTrOlPBcF983LwEVyHi0o
k6HGSK8dRfwUI89zB54buVesmlA+b3vmpM5xSisjQRcER7tINGYgXpznis9iYghH
E3zjd9OUfV2VA8J8lZWIojqBpbMf81gtZnP3yZENdayj7cEB/1Xer9tM/Xq6xgSZ
ii4IytODW/w+ApE8Dft0ZvwDp20bgBcOtMFhp9S/MUCi95F2+ZUTV/O7QLF8daQU
1tdA/zpKXMPu8oDaHfsUAN7i0i69GV+BOTbs3ym4yL1P+KWSRsCN1zK5sc3hpo7g
FoZ3cpCvIwLf76ixkNtXUXt6awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDU0I75u
/FOEK5lyLjVNPhHuEFS1MB8GA1UdIwQYMBaAFIGLvgURCKmmKwb8aeS/o2l+ZeMP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y0NC9DRDZENkM3RTVF
MjAxMUYwQURBQTRCNkZDNEY5QUUwMi9nWXUtQlJFSXFhWXJCdnhwNUwtamFYNWw0
dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2dZdS1CUkVJcWFZckJ2eHA1TC1qYVg1bDR3OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0Y0NC9DRDZENkM3RTVFMjAxMUYwQURBQTRCNkZDNEY5QUUwMi9nWXUtQlJFSXFh
WXJCdnhwNUwtamFYNWw0dzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAELDQDcoSd9QOMPQ32RvkVr4TNs4ZDztx5IJFDIoYY+Litj28G4P+JTMIQvC7
O7L+7k0jkWbGrT8KuN5kYOHj+81pY8tRUKusvGOsvGs7K2ezPZiQmoBfI2MVQOSP
h97tyiFjLk+cIsimJEbqqIR2k+D4u+NQE8xf1amprIRRUcbv+jcbJAtSUKCLLobI
MjeHbfUYeag15bvbk5HSp+JuLQx+meXO9Aw6lSpRHzDtNdEqBAAnK1HynCT0GUlT
mLUiCEJtsh97VPAzJzN4MmMzL+oS8xSctriXGVeP8WP4K+RRsvHcdCODQMEOuquR
uiwSkO6C8yEyRJNlM++xClge0w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:29 2026 by rpki-client