
$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
File: BYl-c1406PZYdVSprzc0CCziidk.mft (raw, json)
Hash identifier: PkXJnwhiVCO+DZeQvWAobAlh3/HelVyl/SdBwVvjPnc=
Subject key identifier: DE:F6:AB:52:67:FE:B6:5F:8E:C8:96:CD:C4:C0:72:7D:A5:E0:28:B0
Authority key identifier: 05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9
Certificate issuer: /CN=A91389E7/serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
Manifest number: 9F
Signing time: Fri 17 Apr 2026 07:03:55 +0000
Manifest this update: Fri 17 Apr 2026 07:03:55 +0000
Manifest next update: Fri 24 Apr 2026 07:03:55 +0000
Files and hashes: 1: BYl-c1406PZYdVSprzc0CCziidk.crl (hash: Fu2lb/JXFVYTZmllZ5UruMrvskwueiHmcysA8MFHZps=)
2: 2C3D8AAA50B511F09288303CC4F9AE02.roa (hash: 6W/VukXB5c5TI5sHg/exLjmPP5EzgCxNCDZkTAkJ9NI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl
rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91389E7, serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
Validity
Not Before: Apr 17 07:03:55 2026 GMT
Not After : Apr 24 07:03:55 2026 GMT
Subject: CN=69e1db5b-e786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:4e:96:7d:97:88:0c:5a:83:0c:9c:11:81:
b9:dd:96:7d:f0:c6:a4:34:5d:5c:cf:ab:6c:56:aa:
ab:1f:90:39:6e:fe:e0:dc:28:db:09:16:48:03:03:
7c:7d:aa:c1:a2:a0:90:04:6d:65:68:ed:bb:fe:c6:
cb:7a:49:a2:0e:8c:7c:cf:c4:12:9b:6b:23:20:db:
30:f3:8d:60:6d:c1:5d:42:e3:ad:e6:fb:51:19:5e:
4e:33:0f:be:af:be:75:ed:2f:b1:19:ba:98:0e:c3:
90:85:b6:4a:6a:3e:dc:11:9f:15:fb:45:1f:43:4d:
f7:dc:b0:dd:00:3c:18:15:59:8b:e6:e8:11:83:9d:
3c:bc:13:70:64:66:0b:d9:4e:45:8f:b6:50:1c:cb:
a7:be:b8:40:9d:c8:eb:9a:5d:ea:80:15:35:e7:b7:
00:31:9d:48:0b:77:a4:d8:63:c5:ab:33:65:ce:24:
71:f8:f1:2d:17:87:da:d9:bf:50:e1:fc:6a:aa:cf:
a5:3f:3e:f7:f6:80:48:8d:81:e7:9b:4f:7b:12:6a:
2c:be:76:40:0c:24:bd:eb:7d:84:e7:b0:b0:2b:31:
b2:05:96:d3:ff:9d:15:09:e9:1c:e8:f8:e2:51:30:
93:cc:ec:6f:39:c4:4f:ef:09:ab:c6:37:60:97:82:
ac:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F6:AB:52:67:FE:B6:5F:8E:C8:96:CD:C4:C0:72:7D:A5:E0:28:B0
X509v3 Authority Key Identifier:
keyid:05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:51:03:d4:a3:49:48:a1:9b:16:94:8f:8e:d6:2d:2c:69:2f:
db:50:b8:86:36:d0:e3:5e:a1:92:23:e1:3c:45:fa:ce:8b:e8:
a2:42:27:52:27:8c:f5:05:41:85:83:51:4b:19:10:54:0d:c2:
9f:c7:6b:d6:8d:18:be:56:8e:77:2a:f4:5b:da:e7:38:5c:82:
f7:d8:0c:d6:0b:b2:e9:0b:af:38:74:6c:5a:bf:4a:22:9f:28:
eb:be:27:16:d2:5c:74:b2:b5:3a:fd:0b:eb:6a:5b:df:d7:9f:
06:fb:15:1f:c6:49:17:51:32:70:36:3a:55:79:65:56:a8:94:
8d:63:71:5d:36:be:94:c2:6e:92:0c:0b:e3:64:27:c2:26:cb:
88:8c:88:b4:74:5d:b9:b1:48:f5:c2:44:34:da:ba:90:dd:e4:
9c:3e:31:36:c5:65:fd:37:af:cb:98:f4:65:1c:49:5c:c5:42:
2a:d8:db:ff:bf:8f:bf:a3:d1:88:70:72:ca:94:db:35:bd:3c:
8f:5f:87:54:c0:2e:08:60:1f:f0:88:41:45:db:2b:a5:32:5b:
a5:03:ae:ed:dc:af:82:e4:94:25:61:2f:08:63:0e:d5:c5:39:
7a:f1:05:d2:5e:b8:81:93:cd:5c:b2:b1:6c:c3:76:18:a9:bd:
a9:e6:86:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:45 2026 by rpki-client