
$ rpki-client -vvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
File: bYD-tReA9_EG5hkNw-LufOdO77s.mft (raw, json)
Hash identifier: T7COXko9zuITZ0wNklhR+JXgKJ86EHSYRbm38EXX4Tc=
Subject key identifier: 8F:48:27:B5:27:94:58:25:CA:73:B9:54:88:72:50:0E:91:29:FA:1E
Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB
Certificate issuer: /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB
Certificate serial: 03C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
Manifest number: 03B8
Signing time: Fri 17 Apr 2026 00:34:09 +0000
Manifest this update: Fri 17 Apr 2026 00:34:08 +0000
Manifest next update: Fri 24 Apr 2026 00:34:08 +0000
Files and hashes: 1: bYD-tReA9_EG5hkNw-LufOdO77s.crl (hash: 2gZ7rFLP+pT+raDT7HDbEW1GJ6Sn8UGdDWIQJFMFSg4=)
2: 57883938B4E411F0AEF0381FC4F9AE02.roa (hash: tRVxcIftzJMb6hfa4ByEW74xsmKnvcvfoDwWiT9x6XQ=)
3: 58699F5EB4E411F0AEF0381FC4F9AE02.roa (hash: SjCwwc0/l3mFASjbgIcuYJLD81TjGrpnKmBVX4rmehQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl
rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960 (0x3c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917624C, serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB
Validity
Not Before: Apr 17 00:34:08 2026 GMT
Not After : Apr 24 00:34:08 2026 GMT
Subject: CN=69e18001-180b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:8d:80:ab:80:d7:50:ef:6a:af:6b:9b:79:
9c:1d:16:ee:c9:9b:a4:79:c2:ff:1f:ce:c2:50:8d:
ad:04:8f:cb:96:21:24:ad:5e:f0:ef:92:48:73:04:
98:51:b8:95:9d:23:b3:eb:03:ce:ba:cd:dc:e2:04:
71:70:06:ec:d5:a6:67:2a:81:72:55:97:76:33:f7:
17:9f:c0:7d:8f:91:d1:ae:9d:0f:89:1c:ae:58:01:
8c:0d:ea:4b:42:3a:7e:43:b7:6d:25:19:17:68:f7:
02:c8:35:27:79:d5:6b:6c:55:e0:45:06:4d:08:23:
71:78:d0:36:1c:a5:a5:5a:25:36:2d:f2:7d:d6:9a:
19:eb:b3:59:c0:88:1d:5b:35:2c:2d:4b:46:b6:4c:
ca:81:53:3f:95:5c:09:6d:ad:b8:c8:91:0f:5a:34:
04:47:13:ff:d4:97:72:03:08:b9:39:81:77:49:c6:
10:5c:4f:94:0a:17:96:08:fe:36:f9:9e:3a:d7:09:
85:55:20:08:48:29:5e:68:e4:1a:f2:58:1c:13:20:
ae:d8:78:2d:62:44:23:e6:39:aa:5b:59:56:98:44:
cf:34:25:52:e5:86:0e:b1:b0:c6:91:3b:ab:36:b0:
c2:b6:82:60:9f:6f:32:ea:ad:15:71:6c:92:eb:b7:
e3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:48:27:B5:27:94:58:25:CA:73:B9:54:88:72:50:0E:91:29:FA:1E
X509v3 Authority Key Identifier:
keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:95:7c:0e:ad:3d:ed:6b:0d:7a:ef:89:74:92:72:3c:02:89:
e6:67:08:94:e8:c3:e9:75:24:69:82:77:8a:e0:b0:83:57:ad:
ea:92:ab:62:8b:7f:fa:f1:ca:51:bb:d7:cc:23:89:46:29:52:
e0:2c:a4:60:6e:0a:bd:97:f1:59:4b:99:cf:94:7d:ea:99:e9:
54:a5:e4:1f:3a:b2:2b:90:92:d3:58:c1:1a:4b:e5:d4:60:28:
ed:81:04:a9:08:aa:4b:83:84:c7:79:13:2c:8b:88:b1:c8:28:
05:a6:03:47:60:c7:b1:dc:50:15:56:7a:2c:84:23:8a:27:b5:
98:fc:c5:ea:7a:c4:e9:9c:8d:51:40:c7:b5:b0:9d:ac:85:8c:
ed:37:d4:53:fc:a0:fd:10:1d:92:7e:93:14:df:c2:e2:91:93:
ea:1d:98:08:96:74:68:84:46:3e:b2:aa:6d:cd:94:7b:93:0b:
41:27:58:83:57:2e:7b:d9:0d:63:c6:c9:50:f4:f0:66:68:7f:
ff:34:74:a2:80:cc:d2:c1:dd:9a:06:d3:6a:17:33:a5:54:08:
90:88:1b:ca:65:b3:55:2a:8c:61:8e:b8:23:da:07:86:b8:b6:
82:7b:b9:fc:ee:00:dd:19:7c:8c:37:71:7d:6c:79:48:04:0d:
7b:0f:da:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:36 2026 by rpki-client