
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
File: ByXySRgBUFGFyQaaQBNjXDi1a3I.mft (raw, json)
Hash identifier: BMPV3xaf1IC9Fa2XtoI7onou+5CShMiF0xtJYhijcgI=
Subject key identifier: AC:3F:42:D3:2A:AA:27:9E:32:8B:CC:80:36:8E:39:01:C0:2E:DD:C3
Authority key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
Certificate issuer: /CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Certificate serial: 07EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
Manifest number: 16FF
Signing time: Sat 28 Feb 2026 18:11:33 +0000
Manifest this update: Sat 28 Feb 2026 18:11:32 +0000
Manifest next update: Sat 07 Mar 2026 18:11:32 +0000
Files and hashes: 1: ByXySRgBUFGFyQaaQBNjXDi1a3I.crl (hash: JnB6cQ3vxxri/oTL1SQ5EnW9N6PZUA60W4HkS7CX6ug=)
2: 05144A26BE3911F09CB32457C4F9AE02.roa (hash: vSIeAjqd8gDmwAauFKXajPF+c9MKk4xOp3bG+WiS7CI=)
3: 970E5576BE3811F0962A6356C4F9AE02.roa (hash: AcviFd+PtnSFvlgNS+BnOoi4dKiwPFo8IVXgK3DA+5I=)
4: CCA402F8BE3811F0B9AAC956C4F9AE02.roa (hash: gtTpVW5LqxqfvKC2N4TARLuSjiGbRhdHo4ieYNHeMFc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:11:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2026 (0x7ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D808, serialNumber=0725F2491801505185C9069A4013635C38B56B72
Validity
Not Before: Feb 28 18:11:32 2026 GMT
Not After : Mar 7 18:11:32 2026 GMT
Subject: CN=69a32fd5-b5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:10:4a:db:1d:bd:f8:a6:d2:09:13:cd:25:
b2:30:a2:f0:50:08:fe:25:ec:69:ea:11:67:05:8e:
ce:d9:90:d8:0f:1b:42:b2:79:28:64:7a:43:78:58:
93:15:66:c2:dc:0c:2a:c0:17:01:e1:2d:d8:f6:e3:
72:aa:a3:b1:68:6a:65:2a:a4:2a:6e:51:9b:b4:c2:
39:72:9a:66:a2:9b:62:a8:ed:8f:b9:6d:b3:3c:b1:
e9:f3:8f:7f:71:bb:e1:73:9a:43:e9:9f:ab:61:9e:
04:5c:c7:46:68:0e:af:94:08:92:c4:ff:90:f7:01:
4b:23:12:2a:97:6d:c3:8f:84:e8:49:01:63:31:a9:
fd:40:b3:ee:c0:1b:64:2f:24:4d:69:d8:1c:4b:69:
aa:bc:79:2a:fb:45:fa:bf:2c:0d:2e:ca:60:48:52:
ea:97:90:8d:3b:5a:b7:25:e9:47:f3:e5:3b:16:83:
8b:c7:e7:58:1e:7e:04:ba:18:0d:b1:b6:78:48:f3:
b8:d5:03:6d:77:10:83:6d:e5:e8:88:93:79:28:4b:
c4:b5:2d:dc:71:35:64:8f:dd:c6:9f:4c:3f:d3:48:
0b:f1:f6:8a:6f:fe:c1:16:3b:ba:b1:5e:42:68:83:
96:57:19:19:2b:96:23:42:6a:a9:6c:d8:50:92:34:
da:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3F:42:D3:2A:AA:27:9E:32:8B:CC:80:36:8E:39:01:C0:2E:DD:C3
X509v3 Authority Key Identifier:
keyid:07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:13:87:9d:af:86:35:33:04:f0:bc:f2:3e:72:bc:5b:16:1a:
90:4a:bf:5d:bf:22:25:3e:e8:84:62:34:7b:03:bf:78:25:94:
c0:c0:ec:25:49:3c:64:26:13:75:8b:a3:b9:c1:57:11:9d:44:
a2:3c:92:7c:50:ce:30:0c:4f:54:ff:fd:ab:7d:4b:cc:15:c1:
7f:bb:34:14:4e:f6:c6:90:41:3a:ae:40:2f:3e:7d:63:fb:6b:
11:b1:09:b6:2a:3a:05:1b:16:ad:08:43:52:04:d8:fc:49:f8:
00:93:67:d0:da:0c:fb:d7:25:09:58:72:0f:4d:51:28:25:f2:
a0:27:a3:e5:1b:86:9f:a1:4e:eb:a0:a0:62:b1:f2:f5:92:2e:
f4:1c:a9:a6:c7:fb:53:35:6d:b9:f9:ce:23:1b:eb:a9:bf:5a:
72:ce:c8:29:15:e5:38:44:34:48:6c:38:ef:d3:e9:0f:0e:83:
db:ad:6e:1e:21:a6:5e:7f:46:8f:48:c8:f5:d0:db:3e:03:7e:
1e:07:5a:10:46:6d:4b:3b:7a:96:5f:1d:e5:fb:b9:80:24:0a:
f2:44:4b:d9:b7:8a:02:8d:41:64:1c:5b:6f:c0:c2:95:2e:a6:
4c:19:13:e5:78:7a:c4:9e:9a:83:01:ee:a0:4e:35:7f:f6:b5:
4b:cc:33:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:38 2026 by rpki-client