
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
File: ByXySRgBUFGFyQaaQBNjXDi1a3I.mft (raw, json)
Hash identifier: WBCbYHr96uEMk/75nnCUswBDVr/Et+jJ4PrJD198nXc=
Subject key identifier: B7:2D:84:39:45:12:EF:F2:26:96:ED:53:B9:C4:99:F2:3F:ED:7E:C9
Authority key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
Certificate issuer: /CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Certificate serial: 083A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
Manifest number: 174C
Signing time: Sun 26 Jul 2026 18:14:24 +0000
Manifest this update: Sun 26 Jul 2026 18:14:24 +0000
Manifest next update: Sun 02 Aug 2026 18:14:24 +0000
Files and hashes: 1: ByXySRgBUFGFyQaaQBNjXDi1a3I.crl (hash: FglO1dtHrAJV1AOLQ7KxWhD0QbmlDLbmkV9XlDkTV9Y=)
2: CCA402F8BE3811F0B9AAC956C4F9AE02.roa (hash: poKacpxWLem7MXU2cZ8LXl1fQdysy14/f02fKfzvHFI=)
3: 05144A26BE3911F09CB32457C4F9AE02.roa (hash: BJG7KKwhl8HJLFMiXdJ/ug8z26cqh8GFLSWPDyLzMV4=)
4: 970E5576BE3811F0962A6356C4F9AE02.roa (hash: nisM7JGbV5MRmDC8uhu0E+MPwT1IFHJ1Q6JtOmv7Vk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 18:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2106 (0x83a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D808, serialNumber=0725F2491801505185C9069A4013635C38B56B72
Validity
Not Before: Jul 26 18:14:24 2026 GMT
Not After : Aug 2 18:14:24 2026 GMT
Subject: CN=6a664e80-1710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:bd:7c:33:0f:83:73:c3:4d:a4:fc:59:95:
35:c7:b6:f4:7d:f2:28:f4:80:8a:9b:a3:23:34:78:
1b:ab:e1:3e:1f:53:9a:51:af:9a:bd:39:d0:c7:61:
59:f6:98:d3:2c:9b:3c:97:92:43:1a:44:0a:0f:70:
77:b0:2a:9c:2b:09:12:1e:b7:f4:d5:0c:39:2e:fc:
73:1b:2b:bb:e8:9f:f6:ff:2b:b6:50:b1:92:5e:63:
81:72:47:fd:3e:9a:16:56:8b:1a:69:d2:be:a6:ee:
43:6d:4c:77:df:8b:09:b1:07:16:ca:c1:15:10:95:
d6:5c:82:e8:4c:c9:3d:2e:24:ce:7c:e8:fc:48:17:
bf:31:28:92:97:59:84:5e:ee:9f:6a:b2:53:42:d7:
79:14:27:59:b0:04:71:3e:db:5a:a7:06:6b:e9:e3:
10:96:b4:f7:63:c1:de:88:a3:9d:4a:bd:cd:98:43:
a4:6a:3b:48:21:da:c8:f5:16:cc:f9:7c:32:d2:45:
67:36:68:42:63:63:50:e2:c5:dc:7d:d7:e9:86:08:
69:77:a8:86:18:b3:76:06:2c:fd:44:b3:7a:04:5d:
24:1a:e6:93:48:f8:70:e0:c8:b9:5f:14:a9:81:42:
ef:3f:89:32:fe:3c:a9:96:34:c1:bf:c0:5b:6a:02:
89:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2D:84:39:45:12:EF:F2:26:96:ED:53:B9:C4:99:F2:3F:ED:7E:C9
X509v3 Authority Key Identifier:
keyid:07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:8e:3e:a1:1f:00:75:02:7c:20:16:b0:72:fb:f4:e7:eb:95:
60:48:f0:b8:06:75:3b:bd:f7:61:f1:06:25:51:1e:4f:2c:b2:
de:32:76:f2:00:05:c1:5f:9f:f3:2e:4a:93:bf:17:fd:28:b9:
ea:80:8b:9e:01:7f:74:34:7d:72:1f:95:ac:81:b8:64:af:e7:
ef:ec:67:28:33:3c:cd:d2:78:c2:20:28:ff:e6:92:57:31:1f:
b0:16:da:ca:da:78:b6:6f:1d:97:8d:10:b0:2c:60:96:a0:f4:
16:32:1f:80:50:91:bd:3a:c7:f3:c1:f5:d2:88:04:44:cc:a2:
70:de:6c:2e:4d:62:06:2d:55:81:1e:19:da:4b:10:8e:f3:58:
79:27:6e:e5:72:66:9e:c7:fa:04:f2:19:90:cd:67:77:7e:1e:
be:ea:07:02:eb:b5:0d:1b:07:48:20:48:eb:63:4c:22:24:4d:
47:74:cd:91:34:01:5e:74:76:c1:cb:75:ff:56:94:b3:fb:21:
56:8e:70:a7:a1:41:40:77:2e:f4:17:89:4b:28:9f:dd:bf:b1:
63:b3:bd:d9:e3:46:c4:8f:10:ce:9e:9d:41:dc:75:ba:f3:52:
0f:d9:ec:ea:07:1b:da:31:b6:eb:33:7b:5d:a6:bb:57:90:57:
f1:cb:00:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:17 2026 by rpki-client