
$ rpki-client -vvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
File: bYD-tReA9_EG5hkNw-LufOdO77s.mft (raw, json)
Hash identifier: gWGKKXQSbGIP/aSOn3WQ3a3+3wJYrHYlyVuxkHl7BaY=
Subject key identifier: EC:B8:E0:3D:C2:D0:EC:94:9C:0F:0A:ED:E3:30:F9:18:A8:AA:02:8A
Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB
Certificate issuer: /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB
Certificate serial: 03E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
Manifest number: 03D7
Signing time: Sat 13 Jun 2026 00:35:52 +0000
Manifest this update: Sat 13 Jun 2026 00:35:51 +0000
Manifest next update: Sat 20 Jun 2026 00:35:51 +0000
Files and hashes: 1: bYD-tReA9_EG5hkNw-LufOdO77s.crl (hash: hNgo/8O+4S/n46XCQBK9iv3nVyyeUfPbYgbeUboai6g=)
2: 57883938B4E411F0AEF0381FC4F9AE02.roa (hash: 9onO7ekhgdzofU803Czih23svkSna7ihyULHHXLuzu4=)
3: 58699F5EB4E411F0AEF0381FC4F9AE02.roa (hash: L/vmxqfg593SScOQfruYyTi5w3IbWEPucz1arAKQfq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl
rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 993 (0x3e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917624C, serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB
Validity
Not Before: Jun 13 00:35:51 2026 GMT
Not After : Jun 20 00:35:51 2026 GMT
Subject: CN=6a2ca5e8-8475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:3c:d9:44:c7:47:ed:6b:81:01:78:d8:eb:
9e:8d:7a:b4:28:62:44:7c:f1:53:d6:3d:41:f1:d5:
39:48:c4:97:9c:07:66:fa:a0:a7:f6:bc:b5:81:b6:
c5:4f:2c:0a:90:a7:92:f7:1c:0f:79:c9:58:72:19:
8e:61:90:a8:8a:d1:4d:8c:fc:5a:32:3f:c2:6c:4b:
86:ac:5c:fa:34:9e:71:f3:de:11:5d:7e:6f:4e:d6:
d1:e3:bf:68:15:97:10:93:94:0f:9f:e2:72:d2:50:
56:97:e6:1b:b9:05:e8:48:fd:33:ec:69:5b:1f:db:
c2:2a:b8:cf:1c:f9:3f:9e:60:0f:21:d6:a7:9f:3f:
8a:7e:c2:a6:fd:fd:32:a8:3c:2a:b4:99:df:7b:34:
73:24:a0:52:03:4e:85:b5:ed:ff:26:65:3b:fd:eb:
d7:49:e0:c2:35:57:c5:ee:09:00:69:c8:8a:58:cf:
e7:1d:0b:7c:0c:08:c4:45:3d:12:e1:81:d9:e5:81:
9a:27:c7:b7:a7:a2:64:8e:31:37:25:af:7e:55:c9:
a1:0f:76:b1:0a:25:7e:b2:ff:33:8e:65:96:ac:a5:
16:20:c9:52:ff:49:8a:ac:15:da:8d:c4:06:6d:5b:
7c:1d:50:ec:f9:24:55:3b:4b:52:24:63:9e:b4:a2:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B8:E0:3D:C2:D0:EC:94:9C:0F:0A:ED:E3:30:F9:18:A8:AA:02:8A
X509v3 Authority Key Identifier:
keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:0d:6a:a3:53:7c:bd:17:39:c0:9c:51:ef:d3:72:9d:f8:ff:
3a:86:72:dc:4c:e1:36:b9:5a:66:9b:32:16:dd:c2:fb:16:cd:
54:53:f9:c9:88:35:50:ff:2c:9a:ce:e1:ac:97:63:4e:b4:c1:
0e:0f:3b:bb:b6:3e:4a:80:08:a8:b2:d2:e2:3e:4b:6b:d5:0c:
77:98:9a:d6:e2:21:61:74:66:e7:8c:0e:84:0a:54:89:35:f8:
1e:96:0a:57:01:c6:bc:58:c5:fd:61:8a:17:a5:9d:8e:e5:9f:
fa:16:fc:2c:5b:21:10:f3:f6:2b:36:b3:d1:10:45:b5:8f:45:
36:46:05:55:93:00:39:a4:51:2b:45:c1:6b:50:49:9b:7b:73:
eb:ca:34:de:52:3a:8b:1b:d7:f9:c8:e9:d3:9d:aa:bc:b0:db:
39:ff:71:a2:61:24:7a:eb:60:3a:6c:0d:1c:d5:9a:f0:8e:a8:
04:07:10:6c:76:c7:22:de:cc:fc:28:3a:45:c7:f7:83:79:a2:
21:77:26:3e:70:26:ea:9b:59:0f:c1:f0:0f:11:18:f8:18:2b:
81:1f:3c:b3:af:39:c9:7b:72:cd:f5:44:cb:ab:44:24:4a:95:
ae:f7:8f:3c:0f:ab:4e:ce:4d:7e:4f:f0:2e:fa:da:5a:ec:f8:
49:48:fb:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzYyNEMxMTAvBgNVBAUTKDZEODBGRUI1MTc4MEY3RjEwNkU2MTkwREMzRTJFRTdD
RTc0RUVGQkIwHhcNMjYwNjEzMDAzNTUxWhcNMjYwNjIwMDAzNTUxWjAYMRYwFAYD
VQQDEw02YTJjYTVlOC04NDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtBA82UTHR+1rgQF42OuejXq0KGJEfPFT1j1B8dU5SMSXnAdm+qCn9ry1gbbF
TywKkKeS9xwPeclYchmOYZCoitFNjPxaMj/CbEuGrFz6NJ5x894RXX5vTtbR479o
FZcQk5QPn+Jy0lBWl+YbuQXoSP0z7GlbH9vCKrjPHPk/nmAPIdannz+KfsKm/f0y
qDwqtJnfezRzJKBSA06Fte3/JmU7/evXSeDCNVfF7gkAaciKWM/nHQt8DAjERT0S
4YHZ5YGaJ8e3p6JkjjE3Ja9+VcmhD3axCiV+sv8zjmWWrKUWIMlS/0mKrBXajcQG
bVt8HVDs+SRVO0tSJGOetKJ9KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOy44D3C
0OyUnA8K7eMw+RioqgKKMB8GA1UdIwQYMBaAFG2A/rUXgPfxBuYZDcPi7nznTu+7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjI0Qy9CQjUwRDlEMEQw
NkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlfRUc1aGtOdy1MdWZPZE83
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JZRC10UmVBOV9FRzVoa053LUx1Zk9kTzc3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjI0Qy9CQjUwRDlEMEQwNkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlf
RUc1aGtOdy1MdWZPZE83N3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlQ1qo1N8vRc5wJxR79Nynfj/OoZy3EzhNrlaZpsyFt3C+xbNVFP5yYg1UP8s
ms7hrJdjTrTBDg87u7Y+SoAIqLLS4j5La9UMd5ia1uIhYXRm54wOhApUiTX4HpYK
VwHGvFjF/WGKF6WdjuWf+hb8LFshEPP2Kzaz0RBFtY9FNkYFVZMAOaRRK0XBa1BJ
m3tz68o03lI6ixvX+cjp052qvLDbOf9xomEkeutgOmwNHNWa8I6oBAcQbHbHIt7M
/Cg6Rcf3g3miIXcmPnAm6ptZD8HwDxEY+BgrgR88s685yXtyzfVEy6tEJEqVrveP
PA+rTs5Nfk/wLvraWuz4SUj71g==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:25:07 2026 by rpki-client