
$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
File: ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft (raw, json)
Hash identifier: 7OKTof26nIUhrAjOX+M22XruI5nfoxtJ2MZ9KpB9pjo=
Subject key identifier: 87:F5:70:CF:FF:E5:88:CD:D6:1C:29:DD:87:72:88:35:A9:BD:68:F5
Authority key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
Certificate issuer: /CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Certificate serial: 090B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
Manifest number: 08C9
Signing time: Tue 12 May 2026 20:32:07 +0000
Manifest this update: Tue 12 May 2026 20:32:06 +0000
Manifest next update: Tue 19 May 2026 20:32:06 +0000
Files and hashes: 1: ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl (hash: yHdXAlH9MGyg3nCiQrCIK5oOISQBS3O+hKCEAV1VKpk=)
2: 653B503C5C3C11ED9B4FAB0BC4F9AE02.roa (hash: zwM35otsTr83awOI7VfBWEoBPzA/WtxzUA7G/hMxBa8=)
3: E1582B782A6011EB8DEF2641C4F9AE02.roa (hash: sAhE5dLLOemM3C8KLUlxwQ54CjFCBIAXimdkQGuZSNU=)
4: E0A4E5182A6011EB8DEF2641C4F9AE02.roa (hash: S8YIm5p0Dr4U+o+Q4l7tNGrJi8MU8cMPSwOdjDQL/b4=)
5: 1D2381425E5F11EC870D9676C4F9AE02.roa (hash: MFQtPVZhIJZpzdDtsciv0riR2m9MF8WM481StFyw2ws=)
6: 9EA66A9E737D11ECA0A3A018C4F9AE02.roa (hash: liPsa52rTIl7ihixbTxjWW6DuARSYiDySOrS1eNSgVw=)
7: 67591AB22FC911EBA360EC1CC4F9AE02.roa (hash: RRGg69t7SpMoFxoS5ytLHy3SVBeoQrPvM6iOwpwucw0=)
8: E1E4F9902A6011EB8DEF2641C4F9AE02.roa (hash: R+NCsJpYrnNFj+HbqLsUuCEumrKP3+6ABx1P7cfxUyo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl
rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2315 (0x90b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912383B, serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Validity
Not Before: May 12 20:32:06 2026 GMT
Not After : May 19 20:32:06 2026 GMT
Subject: CN=6a038e46-c124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:42:47:02:2d:cd:55:33:8b:da:c8:84:83:03:
59:4c:12:c3:3c:1a:a5:5d:a6:63:86:86:23:86:6c:
ac:4d:d5:8d:4c:d4:8c:04:f2:71:82:bb:76:ac:1e:
e5:aa:e4:91:04:cc:7c:df:5c:41:0c:2b:0b:a7:87:
59:2b:73:df:39:ee:99:52:68:d3:a3:a1:a2:9b:a7:
fb:e2:2f:9a:c4:e6:e9:b5:99:46:7d:f4:d7:54:56:
f9:11:e9:e1:61:98:f0:e8:c8:e6:22:b2:97:e9:9f:
4c:22:77:13:1e:c0:2a:b2:ad:ba:08:93:91:91:82:
f8:69:30:44:38:36:8c:f1:9a:b7:a5:63:2c:ed:e7:
d5:60:d3:62:f8:aa:19:b2:42:ba:ac:1e:01:a6:6d:
3b:5d:e1:63:ab:d3:1a:b2:41:c2:cd:7e:cf:31:33:
77:17:7e:ec:23:53:34:26:8f:d2:32:3f:d0:00:5d:
df:82:40:55:dd:b6:9d:ea:46:a9:e9:87:69:ba:88:
c2:48:10:a8:fd:bd:08:a9:81:1b:fe:5b:90:e7:fd:
57:6b:c6:5d:32:80:db:80:f1:df:09:88:82:e5:99:
f2:dc:ad:68:e9:2b:24:fa:fb:f7:a3:7f:e9:49:9c:
bc:79:ba:72:d3:39:03:33:bd:bc:97:79:af:d6:f6:
3f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F5:70:CF:FF:E5:88:CD:D6:1C:29:DD:87:72:88:35:A9:BD:68:F5
X509v3 Authority Key Identifier:
keyid:07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:14:b9:9b:04:3d:a7:8b:0a:27:ec:50:68:87:4b:06:4f:41:
78:56:46:4b:12:9c:e5:6f:ac:1b:70:a3:dc:7c:cf:5f:ba:ec:
9a:ca:db:bc:a7:97:5f:60:f8:a4:71:53:e7:47:ac:65:35:08:
c9:73:38:79:7b:b7:38:70:84:1e:e2:40:67:33:97:32:70:9e:
84:40:55:ac:cc:70:bf:02:f6:0b:62:1f:a5:a3:23:52:96:c2:
ce:5a:d1:96:4e:da:c8:08:c5:32:71:43:66:4e:6e:57:9c:a3:
be:3b:59:c1:b1:6f:05:9b:57:90:91:a6:4a:77:31:a9:d0:57:
99:81:cb:f3:44:4f:da:16:07:6c:cb:34:9e:49:83:2d:25:d3:
f9:b6:5e:12:db:75:ea:04:32:0a:fd:53:63:45:8c:82:11:de:
3a:d2:c9:71:79:15:b5:9e:26:87:8a:b8:cc:25:e8:a0:93:90:
c3:6a:e6:2c:25:84:07:c5:bf:a2:18:19:60:8e:b9:b4:46:4b:
63:d6:90:99:99:cd:2d:9a:43:b1:b5:28:45:73:b2:a4:42:6c:
5c:1b:51:f8:47:7a:33:03:6b:2c:0b:85:e9:68:df:8c:2d:ab:
d8:43:d8:1f:2e:17:f7:e0:74:bf:8f:8f:dc:51:c1:21:91:0d:
6a:ec:d3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:50:22 2026 by rpki-client