
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
File: ByXySRgBUFGFyQaaQBNjXDi1a3I.mft (raw, json)
Hash identifier: jGw71lkMfBQDzIGdMmzp5jAOlcjpB807cxwxNffEO2k=
Subject key identifier: 5F:41:94:96:00:AE:FF:99:F1:31:A1:00:E7:13:7C:92:42:63:4C:16
Authority key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
Certificate issuer: /CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Certificate serial: 0824
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
Manifest number: 1736
Signing time: Fri 12 Jun 2026 17:58:27 +0000
Manifest this update: Fri 12 Jun 2026 17:58:27 +0000
Manifest next update: Fri 19 Jun 2026 17:58:27 +0000
Files and hashes: 1: ByXySRgBUFGFyQaaQBNjXDi1a3I.crl (hash: 3AtQqX0UxWm/gvMxN7dzCqo3k9YI0ibCmZS6vGA0Jeg=)
2: 05144A26BE3911F09CB32457C4F9AE02.roa (hash: BJG7KKwhl8HJLFMiXdJ/ug8z26cqh8GFLSWPDyLzMV4=)
3: CCA402F8BE3811F0B9AAC956C4F9AE02.roa (hash: poKacpxWLem7MXU2cZ8LXl1fQdysy14/f02fKfzvHFI=)
4: 970E5576BE3811F0962A6356C4F9AE02.roa (hash: nisM7JGbV5MRmDC8uhu0E+MPwT1IFHJ1Q6JtOmv7Vk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2084 (0x824)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D808, serialNumber=0725F2491801505185C9069A4013635C38B56B72
Validity
Not Before: Jun 12 17:58:27 2026 GMT
Not After : Jun 19 17:58:27 2026 GMT
Subject: CN=6a2c48c3-295f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:34:eb:82:6c:b7:98:07:69:ed:fe:b6:a4:1f:
a7:d5:c5:35:f0:74:ab:25:4d:a0:1b:99:fc:03:cd:
70:24:09:81:2a:ac:f3:7b:75:36:dd:ad:cf:20:82:
82:de:07:52:99:7f:3f:a5:8f:76:70:b2:0e:6c:ab:
32:fc:6b:ba:94:88:c6:71:e5:fe:7a:f9:4e:4d:64:
ca:a1:1d:16:6b:0c:1a:85:07:44:e3:3e:87:f2:38:
7b:56:97:3b:11:94:54:1d:95:c6:61:7f:ea:d5:5a:
68:32:7b:4c:66:52:57:48:98:10:e4:23:7b:43:60:
19:66:27:44:18:a2:c6:1b:60:b8:b0:82:29:a0:b2:
72:76:b6:77:61:09:23:94:8f:22:3e:8b:b0:97:9b:
7f:0f:e2:68:73:4e:50:23:fc:f3:f5:26:fa:32:3e:
76:e8:81:0b:3f:c6:4e:4b:0d:98:da:48:64:91:a4:
dd:82:b1:91:0f:05:c1:8b:be:ae:86:59:ee:eb:9c:
af:2d:f9:a7:52:de:6d:4d:bc:7d:41:ed:7a:9c:9e:
9b:45:9d:60:2b:c2:c5:14:bf:39:26:68:de:97:e7:
e5:a3:57:a0:99:a3:c2:38:09:0c:8d:ea:5d:88:41:
83:67:e2:c6:9c:8c:f1:72:42:82:50:9d:b5:a4:af:
7d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:41:94:96:00:AE:FF:99:F1:31:A1:00:E7:13:7C:92:42:63:4C:16
X509v3 Authority Key Identifier:
keyid:07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c9:40:22:fd:3a:83:f4:e2:f3:b1:7b:16:82:1d:ce:27:92:
57:58:1c:36:d0:70:06:b4:d0:9a:81:74:85:90:03:10:b7:d2:
ef:3f:a1:28:94:81:fd:0a:58:6c:d9:bf:ca:1f:f4:89:e8:6b:
94:f5:e0:b5:25:35:1a:b4:e1:28:3a:6b:80:01:73:65:51:32:
45:f1:e5:53:ea:5a:7f:2d:ce:3a:fa:1a:24:29:1a:b0:50:b5:
1d:0e:aa:03:8b:44:8f:81:aa:8c:af:fe:67:11:bb:a9:8f:bc:
9d:24:6f:a4:c7:af:ba:26:70:8b:e9:82:00:08:83:fc:62:46:
d5:36:80:60:eb:0f:ef:37:a3:0f:83:1b:44:1a:c5:b9:e2:4c:
50:78:78:44:a0:e8:d4:52:50:62:6d:28:19:14:fc:ff:ec:dd:
56:10:d2:cc:2e:3c:51:3b:88:22:54:a1:1a:de:60:db:d0:a8:
91:d7:b8:eb:d0:45:f4:f4:29:8d:98:57:d2:5f:27:24:56:4c:
fa:4e:34:f2:30:b7:bd:47:05:d3:28:4a:8f:57:49:ad:93:1a:
be:6f:3a:ec:d8:67:ac:73:29:0b:64:47:7c:2e:2d:93:b3:d8:
71:b4:5c:a6:13:d7:6d:17:28:b9:14:78:fd:cc:54:7e:62:f9:
6c:0a:ef:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:52:30 2026 by rpki-client