
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
File: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft (raw, json)
Hash identifier: lHZxzMYGvdyy/+O4x1aKlIFYFsZOeqruRlFh0TuDYV0=
Subject key identifier: B1:69:94:41:F8:3B:97:2F:C6:9C:22:BF:43:31:84:D7:F6:42:AB:BB
Authority key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
Certificate issuer: /CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
Manifest number: 017F
Signing time: Mon 27 Jul 2026 06:27:19 +0000
Manifest this update: Mon 27 Jul 2026 06:27:18 +0000
Manifest next update: Mon 03 Aug 2026 06:27:18 +0000
Files and hashes: 1: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl (hash: PQ4aiL7pakp1N4r1qBid4+mPZ4aTe0NbTPodC2JvMXI=)
2: C2838C8245B011EFAE60CC76C4F9AE02.roa (hash: RzM5XYHpAe7uWEPFy0Uicf76LJbJuN++zhp1wy8rKjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl
rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:27:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEE85, serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
Validity
Not Before: Jul 27 06:27:18 2026 GMT
Not After : Aug 3 06:27:18 2026 GMT
Subject: CN=6a66fa46-d419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3a:bb:3c:4a:88:71:eb:3a:07:0e:b9:a9:72:
e2:95:36:e5:55:0d:90:fd:dd:ef:a0:24:18:20:2f:
f7:33:66:4a:e5:ef:26:a3:03:eb:e5:93:48:91:3d:
a8:93:af:a9:8d:c5:04:f7:7d:63:42:0b:d9:7a:b2:
96:a4:8b:ab:b5:20:75:5d:50:39:7d:83:de:04:39:
c4:10:09:25:c9:15:bd:3d:0b:9d:7c:84:10:03:1f:
2a:5c:59:c0:30:72:e5:cc:7e:2b:da:82:eb:07:d2:
0a:86:5b:d9:2d:c4:a6:10:a6:0c:1b:c0:81:fe:f2:
ad:64:19:bb:8d:59:ba:41:5b:19:37:96:ee:18:53:
8a:55:63:e4:2b:64:ab:9b:9a:c4:27:b6:51:d2:65:
80:da:fc:c6:57:24:03:5e:4d:f9:ab:7c:16:6e:78:
a1:1b:60:9b:b4:1e:3a:72:a4:9b:df:4a:d2:a9:61:
f1:25:ed:f2:66:15:41:44:9c:2f:fe:2a:3b:4a:2c:
58:61:11:6e:c6:ca:f6:1c:ef:e3:55:72:ea:1d:4d:
41:cf:64:fd:f7:ae:16:60:10:2b:ae:f3:3a:b3:67:
6d:bc:20:e3:02:85:be:fa:70:55:92:50:94:2b:5f:
2f:67:ab:7f:23:8b:1a:cb:85:61:be:19:1e:6c:8e:
9d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:69:94:41:F8:3B:97:2F:C6:9C:22:BF:43:31:84:D7:F6:42:AB:BB
X509v3 Authority Key Identifier:
keyid:07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:4e:00:51:60:95:45:ea:2e:fa:c1:7a:4d:10:77:58:33:a1:
9e:77:59:af:a5:38:1c:99:e5:28:5e:32:fd:4d:26:00:13:78:
06:75:85:ab:5b:d0:22:d2:48:bd:22:aa:df:74:aa:c5:7c:15:
f0:30:35:fb:99:cb:e5:e0:68:85:8d:c4:68:b4:97:ec:5f:a5:
21:92:53:ad:50:09:08:65:83:91:24:9d:a0:48:3e:02:3f:1a:
6b:18:6c:38:5c:4e:aa:ec:a9:31:4b:e7:95:bc:6e:ad:01:4e:
d7:6d:ca:61:b8:7e:67:21:9a:82:38:f0:26:14:14:fc:53:5a:
1e:0b:77:d6:34:18:6f:b3:dd:86:7b:17:14:e9:5d:22:64:50:
77:b1:91:d1:7b:43:34:b7:89:4f:b8:05:8c:bf:b9:7f:82:89:
6c:5e:0e:42:6c:78:f9:8c:a3:b7:98:cf:e1:e9:e1:ed:8b:08:
1c:5e:19:da:06:39:c4:a3:1f:5f:0d:45:5d:59:15:d8:86:e0:
9e:36:4b:f8:97:49:11:9c:9e:ff:ea:4e:5d:64:b6:07:72:42:
22:a0:37:79:e5:0f:1d:85:37:38:71:5d:a4:61:be:4b:8a:06:
59:51:e4:2e:92:1a:d1:13:01:b6:07:57:9c:d3:99:4e:74:ba:
5f:49:77:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:54:05 2026 by rpki-client