
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft
File: byPyfwkL70UxgCBy4drPIQ2dQjw.mft (raw, json)
Hash identifier: ANpaD+qVJO5f3iwJrIEd5e7/XkjEbwTfStwvRaW7iJo=
Subject key identifier: 5B:4B:F8:36:C1:7C:44:5A:7C:F0:98:32:24:F7:AE:4B:4E:43:0D:7E
Authority key identifier: 6F:23:F2:7F:09:0B:EF:45:31:80:20:72:E1:DA:CF:21:0D:9D:42:3C
Certificate issuer: /CN=A91AEB80/serialNumber=6F23F27F090BEF4531802072E1DACF210D9D423C
Certificate serial: 0500
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft
Manifest number: 04D0
Signing time: Mon 27 Jul 2026 00:50:18 +0000
Manifest this update: Mon 27 Jul 2026 00:50:17 +0000
Manifest next update: Mon 03 Aug 2026 00:50:17 +0000
Files and hashes: 1: byPyfwkL70UxgCBy4drPIQ2dQjw.crl (hash: BjJWA+Z1L7cWjUgVFTK2tJvvRyJDFbrsHUtGgB/Pjyw=)
2: EDE820B6A26711ECAFB48B53C4F9AE02.roa (hash: WYBCVEow0EGPklBf726NCkW5Rw768+uwmWrbsMCcmoA=)
3: 6637CBD423C311ED9CF26A56C4F9AE02.roa (hash: RYuGQRq/FbuSL/tGVPPk29bnF9tr3D+V3UoeMu9qj84=)
4: 6D7FBCBE129111ED81E82D3DC4F9AE02.roa (hash: p8iD8cfenU/3pDjfOhpGVIznHLU9bOEeNzIUjUfKGsw=)
5: EE8E0F3AA26711ECAFB48B53C4F9AE02.roa (hash: eaV/UGrF9aFYovMPgzh43fqlwfXnc/bh68H1+PCm0Fo=)
6: 6759C60223C311ED9CF26A56C4F9AE02.roa (hash: aR3bjzpkDnEdThgQWD3OGEKxjKyT+bYAYu7gSfFDnMM=)
7: BDB2AB30567411F1AE3800E79D833773.roa (hash: /XCOcDKrUivP4xEZrgWFR7l9LUacEXHXREoQG8qPTbU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.crl
rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1280 (0x500)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEB80, serialNumber=6F23F27F090BEF4531802072E1DACF210D9D423C
Validity
Not Before: Jul 27 00:50:17 2026 GMT
Not After : Aug 3 00:50:17 2026 GMT
Subject: CN=6a66ab4a-80e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:1f:27:7f:0d:3f:67:c0:85:16:82:3f:50:
12:ff:14:cf:40:b5:e0:c7:9b:18:e8:04:c0:ad:a6:
2b:91:d4:4a:50:b7:dc:9f:0d:61:65:01:66:08:72:
ca:92:70:f6:b3:2b:df:c9:58:ea:92:75:9d:14:96:
80:1d:25:b5:b1:7b:e8:61:11:42:29:62:ec:a5:1c:
c5:c7:cf:2a:fd:fe:75:4c:8e:82:d1:98:27:65:22:
17:97:c1:04:73:63:02:7a:67:19:75:9d:f6:1d:bd:
87:83:92:ed:78:85:ed:cc:2f:2b:3f:98:a8:69:48:
bb:1b:09:4d:76:bc:f3:c6:79:a0:58:02:3a:90:d1:
81:33:af:ce:5c:4f:22:01:3e:fa:78:27:d8:c1:62:
83:2d:0a:21:d3:4b:cf:ac:48:55:30:97:f2:a0:07:
cc:8a:4d:9f:3e:63:89:84:81:65:cf:24:bb:54:fb:
48:e8:8e:e1:60:e1:0c:10:6c:ac:5e:53:1b:9e:67:
4b:ba:1b:26:33:bb:8f:4c:75:57:15:1c:0f:1f:e6:
1c:52:3d:3d:ea:ed:22:f9:83:8a:ac:5d:2a:ee:e3:
c1:f8:3a:f8:16:e1:4f:23:5b:0d:14:d5:75:3c:0a:
55:81:75:f0:de:5e:e7:c0:1e:df:0f:34:dc:a7:bd:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4B:F8:36:C1:7C:44:5A:7C:F0:98:32:24:F7:AE:4B:4E:43:0D:7E
X509v3 Authority Key Identifier:
keyid:6F:23:F2:7F:09:0B:EF:45:31:80:20:72:E1:DA:CF:21:0D:9D:42:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:fe:a0:7f:a7:d7:a0:5a:69:de:a6:d5:8c:19:46:87:fb:4c:
53:10:3a:6c:87:87:b0:32:8f:79:ee:a1:72:fa:c5:dc:27:ce:
0f:d5:c8:e8:84:5e:ee:b5:ba:89:89:3f:1f:ae:62:c5:98:25:
04:51:b5:95:42:09:c4:e9:3f:40:9a:8a:c7:9e:44:7d:aa:67:
8f:fa:55:53:50:ad:59:78:98:a5:ef:bb:31:02:82:8a:d3:0b:
fb:34:64:24:ab:74:ea:2c:24:98:b0:43:61:a4:41:90:57:9a:
62:2d:0b:47:c1:14:65:8d:ac:7c:dc:eb:32:88:d9:27:21:56:
78:e5:db:9c:a4:6c:e9:d4:3f:85:88:b8:9f:c7:21:68:c7:6c:
be:14:ca:0b:a4:78:fc:32:bf:b0:bf:29:ad:7c:ba:11:40:6b:
06:02:68:0a:e8:cc:15:d3:de:a2:db:f8:fa:5c:f4:4d:88:b5:
c3:f8:40:5f:ea:00:9c:ce:8f:8c:8a:08:30:ed:84:c4:e8:b0:
4c:6f:34:8d:76:4a:b2:f8:21:bd:0d:67:00:02:ad:dc:e5:6f:
8a:37:99:2c:26:a6:17:c6:ac:20:b8:72:c5:0d:6f:80:c8:8d:
c0:a6:73:76:9d:70:9f:98:33:33:ed:79:6d:ea:9d:39:06:7f:
47:c9:dc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:14:22 2026 by rpki-client