
$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
File: ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft (raw, json)
Hash identifier: +EetkzRlI2li5tu+8yBEcDCMyv9wjLqLnOi0bxfYvFc=
Subject key identifier: 2E:1C:5D:45:1A:28:6D:24:C6:F0:84:6F:B3:C6:03:CA:39:06:54:89
Authority key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
Certificate issuer: /CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Certificate serial: 08E9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
Manifest number: 08AE
Signing time: Tue 24 Mar 2026 20:17:13 +0000
Manifest this update: Tue 24 Mar 2026 20:17:12 +0000
Manifest next update: Tue 31 Mar 2026 20:17:12 +0000
Files and hashes: 1: ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl (hash: 7da61Fmng6GGQg2+7zSZrIVdiDUYOBgeJ3L6ohuT0ag=)
2: 653B503C5C3C11ED9B4FAB0BC4F9AE02.roa (hash: yeP+OeclgdSGvFc2ZxlwyrgU2wtWwqBL6DT7rETpKF8=)
3: E1E4F9902A6011EB8DEF2641C4F9AE02.roa (hash: ubgP4CItUPCnRFkXEzJk4MJzd7wsSTzsN35ft/17QTc=)
4: E0A4E5182A6011EB8DEF2641C4F9AE02.roa (hash: vMX7018Kd0N1Xix15NfjfddYvKRtUxLBkyq1KKi/JO4=)
5: 1D2381425E5F11EC870D9676C4F9AE02.roa (hash: spowqSFzjUkGhWhJpoFq7q97v0F8MF6jiDEgZSx0P/M=)
6: E1582B782A6011EB8DEF2641C4F9AE02.roa (hash: YaS6oM6YzPJK8msf0O4cNYPSaBb3bQUUcSq/mCl3cZ0=)
7: 67591AB22FC911EBA360EC1CC4F9AE02.roa (hash: +hK2lpFOY0sEGHxcoAnb21JzOENa1sMRcBXQv9Evgv4=)
8: 9EA66A9E737D11ECA0A3A018C4F9AE02.roa (hash: MyzbL17GlB7n5mym8wKDK3Np2cbXwEhUr2D4NBlzl+o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl
rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2281 (0x8e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912383B, serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Validity
Not Before: Mar 24 20:17:12 2026 GMT
Not After : Mar 31 20:17:12 2026 GMT
Subject: CN=69c2f148-ab4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b3:7d:16:8a:0f:a2:c2:58:63:cc:4c:4b:91:
ab:0c:e0:42:02:03:95:fb:eb:06:c9:89:2b:c4:ee:
12:93:de:87:51:f8:c2:19:b2:63:3c:14:c7:3e:11:
ca:c4:41:07:56:c3:96:21:d5:29:35:dc:52:18:a8:
f1:ef:cf:ef:29:b2:05:25:e0:62:41:55:c4:06:34:
b1:c3:95:5d:8a:36:c7:02:41:5b:5b:93:86:bf:69:
de:45:31:32:63:45:bc:9e:ac:ac:fc:86:83:b8:a6:
85:0f:55:7d:40:99:b3:7d:99:4f:61:42:d2:78:6b:
2a:72:e9:ea:8a:d9:5e:83:1d:c5:ce:b6:07:ff:36:
a9:d4:90:81:9a:bd:32:68:df:0f:52:3d:0b:4b:3a:
90:41:9c:80:fc:55:88:be:54:72:aa:04:2a:df:00:
95:aa:e3:3a:b4:76:87:5f:77:b1:60:aa:53:e5:40:
60:bc:f4:88:a7:ca:d8:c2:2a:fd:9b:c8:87:17:85:
17:7d:63:a6:45:e3:99:05:7f:45:3f:21:15:53:73:
b4:e4:14:e8:ee:f3:20:bb:f0:4f:ed:1d:49:fe:3a:
c4:14:4a:a8:0a:91:29:44:ce:98:1d:b6:30:c2:a1:
53:d5:4e:62:cc:0a:01:47:99:67:b0:30:7d:90:a4:
f9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1C:5D:45:1A:28:6D:24:C6:F0:84:6F:B3:C6:03:CA:39:06:54:89
X509v3 Authority Key Identifier:
keyid:07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:79:a7:b3:2c:8a:08:2e:b7:51:36:e8:5e:f1:c4:6b:e3:7b:
35:a3:72:41:22:42:70:17:a9:23:36:24:5d:0a:5f:d3:2a:a9:
21:5b:e3:cb:f5:8a:3f:57:b4:cd:4c:1d:64:52:0f:75:d2:b7:
bb:1a:2e:8f:e4:ad:f7:a8:1c:02:f6:58:68:ae:5d:2b:b7:c8:
29:04:b1:da:bb:b1:d0:01:33:dc:ca:00:10:c1:70:69:f6:79:
fe:e2:02:90:46:01:0b:ac:71:76:b0:7f:f5:d5:b9:ba:e8:2b:
b3:cb:bf:0f:ea:e0:4a:e4:f8:e7:d1:ae:15:e7:b2:1a:a4:00:
ca:57:74:ec:1d:a8:01:da:9c:26:48:61:e6:95:f0:52:9b:78:
2a:60:04:70:b4:27:28:c7:b7:7e:35:d3:59:8e:7e:d4:9a:74:
1d:dd:fd:a3:82:b2:58:bf:29:e8:04:7e:d3:74:d0:71:e7:ce:
96:47:9f:46:c0:db:d7:7c:76:fe:97:f5:b0:a9:88:af:ed:43:
cb:5a:cd:9c:5c:51:a2:c2:db:f2:80:64:41:32:d3:23:f6:a5:
a7:6b:2e:1d:1a:f0:ff:85:26:2a:d9:6b:b0:b7:cc:26:ba:3e:
70:cd:d2:af:b4:74:87:61:3c:33:51:28:31:f3:bc:31:e7:85:
84:b9:8e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:47:59 2026 by rpki-client