
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
File: RByw2GqSzt--gIPe1peibWI-5lU.mft (raw, json)
Hash identifier: 1GsnYioVGlv+GOELlRIkROAg/qdMZcU7H+mhnfd9uCk=
Subject key identifier: 9C:DC:9E:95:97:51:F8:F9:67:EE:55:BC:24:63:65:0D:86:7B:D9:76
Authority key identifier: 44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55
Certificate issuer: /CN=A9171235/serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655
Certificate serial: 03E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
Manifest number: 03D5
Signing time: Sun 19 Apr 2026 00:28:08 +0000
Manifest this update: Sun 19 Apr 2026 00:28:07 +0000
Manifest next update: Sun 26 Apr 2026 00:28:07 +0000
Files and hashes: 1: RByw2GqSzt--gIPe1peibWI-5lU.crl (hash: Q0me0n0X6aWH2HFu0ursDE5wcxC9rMF7qBeSkaE2uLU=)
2: 9C072F22C9E411EC956B0A3CC4F9AE02.roa (hash: HbxNhJfwCG1ujU694+Ro5Mhy7fzReoL73klO5RKGIM0=)
3: 9CD74392C9E411EC956B0A3CC4F9AE02.roa (hash: vd7/c73lLNTzKiOupkJvInFXPhKY9E+Gw/hTf0zKkVY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl
rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 00:28:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 995 (0x3e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171235, serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655
Validity
Not Before: Apr 19 00:28:07 2026 GMT
Not After : Apr 26 00:28:07 2026 GMT
Subject: CN=69e42198-cccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:a1:83:4f:e5:65:9e:40:04:b6:26:4b:5e:
56:15:c3:59:64:67:0a:0d:97:28:a0:89:07:97:7e:
c0:9f:67:61:43:45:a3:ce:e6:bd:d6:b9:79:61:a5:
6e:b3:6a:3c:cc:7c:a9:63:95:fa:bb:8f:1e:29:83:
d8:50:01:aa:bd:5f:1f:14:be:90:3a:5e:19:4b:c9:
9c:95:0e:c9:30:f8:95:46:b4:0a:e4:9c:eb:40:df:
3c:ea:19:ee:b7:60:68:25:e7:5e:8e:7a:99:a5:15:
bb:3e:ad:84:30:7d:bd:7e:58:31:59:ab:df:24:8f:
13:4c:96:a2:22:ed:34:a2:4f:d5:1a:a3:7b:74:47:
e4:00:51:8f:e6:df:1e:3f:1a:b5:af:a2:21:aa:fa:
9a:cb:5d:35:0d:cc:46:46:20:7d:e2:14:26:9d:60:
7a:5c:e8:75:9d:28:ea:b6:bb:14:3d:5b:ab:6d:cd:
5c:a5:36:ce:3c:36:26:2c:cf:59:e4:c4:91:1b:89:
2c:37:34:c1:04:19:46:b3:41:4d:a2:f2:a2:af:1d:
14:b8:ce:c7:60:65:70:2d:1d:54:e5:01:4e:e8:cb:
52:dd:b4:b4:72:e9:3f:5e:d1:05:81:e0:6b:00:4f:
a0:d2:51:f4:d0:69:7d:1d:fd:4a:9b:c0:4a:98:a3:
f1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DC:9E:95:97:51:F8:F9:67:EE:55:BC:24:63:65:0D:86:7B:D9:76
X509v3 Authority Key Identifier:
keyid:44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e3:aa:89:60:e3:87:90:52:03:35:e7:ef:fb:99:fe:0d:7f:
89:91:74:70:ce:ab:84:9d:76:92:88:e8:7c:90:96:60:9b:ca:
04:9b:af:62:d5:81:7d:c3:18:37:9a:60:28:59:f8:19:46:90:
78:15:b6:40:8a:57:75:33:ac:ac:2a:05:28:37:25:43:6d:65:
81:4b:29:f1:4a:e8:6e:ed:09:47:e1:a7:2a:09:98:cb:7f:19:
28:84:67:01:00:de:64:77:8f:a1:d8:93:83:88:ce:aa:27:da:
d9:16:ba:c5:d7:19:e2:48:35:a2:6e:29:a5:a9:69:ff:b1:e8:
35:01:a6:10:02:23:33:d8:e7:a5:67:6f:9c:14:8a:81:6b:7c:
4e:aa:54:ba:66:31:d6:7d:6e:85:4a:71:a2:3b:cb:71:c4:83:
a2:44:21:d6:26:14:b5:24:90:0d:47:43:ef:f3:17:88:c3:d9:
03:a7:46:ff:0d:f1:a8:91:b9:21:50:7e:a4:b1:79:ef:ff:50:
06:bc:d5:0c:5a:5d:51:c2:6e:c9:28:52:95:6f:c4:ff:0b:6f:
ba:67:2e:6d:da:b7:05:2e:2d:14:43:43:aa:33:0c:32:f4:7f:
4d:85:6f:e6:b1:2c:b6:fc:c7:84:24:f8:cc:a2:1e:11:9b:91:
9a:f2:cc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:00:34 2026 by rpki-client