
$ rpki-client -vvf rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
File: bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft (raw, json)
Hash identifier: ExwiwW9du9jMq/CgNUyn5m392W9RLosihCnF8IOCHvM=
Subject key identifier: 62:70:A0:F7:DE:D4:CC:4A:96:3F:C3:A4:81:BA:8E:20:12:76:70:0A
Authority key identifier: 6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93
Certificate issuer: /CN=A913695E/serialNumber=6D84176172580392BA2A325F717B1ECA4F0D8793
Certificate serial: 8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
Manifest number: 8D
Signing time: Wed 25 Mar 2026 06:44:53 +0000
Manifest this update: Wed 25 Mar 2026 06:44:52 +0000
Manifest next update: Wed 01 Apr 2026 06:44:52 +0000
Files and hashes: 1: bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl (hash: jiB20EFlx6kAam6MUHnvVFhexCJ+viyDSa6QuHhwqGI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl
rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913695E, serialNumber=6D84176172580392BA2A325F717B1ECA4F0D8793
Validity
Not Before: Mar 25 06:44:52 2026 GMT
Not After : Apr 1 06:44:52 2026 GMT
Subject: CN=69c38465-15d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:af:8f:b5:5e:a5:c7:fd:c5:b8:ba:e6:d2:
77:29:c6:64:7d:69:2a:d0:82:ba:28:30:20:d2:3d:
00:ca:7b:aa:d9:f6:2b:72:aa:d3:c8:9e:1f:bb:89:
5e:d1:7c:4e:e8:66:8a:e3:b1:6a:26:28:a7:be:41:
88:c7:94:d1:8d:9d:df:1d:e4:7d:cd:0a:84:06:fb:
6e:e4:6c:e5:fe:69:90:cd:38:fb:1d:5e:9c:ed:0d:
59:26:70:8b:d5:12:88:fe:58:ec:d3:12:69:37:3f:
d8:90:2b:75:ab:68:21:65:49:b9:3f:95:f7:61:86:
2c:ea:81:8b:8c:3b:0a:e7:f3:f0:4e:e9:3a:db:87:
dd:87:70:23:79:3a:0d:ab:a0:fb:f6:ff:58:47:3a:
97:a5:b5:14:20:98:5f:5e:1e:be:21:c7:8f:70:9d:
94:1d:bd:fc:d8:48:df:04:0a:9a:76:42:38:45:c7:
19:e7:a8:00:f6:bb:90:c5:7f:75:0e:4a:26:e8:30:
80:2b:41:75:2b:7a:71:2a:cb:72:f3:24:b0:0f:a6:
dd:c7:c2:39:9e:15:8e:82:8e:f1:86:7f:91:92:61:
a9:37:86:2c:95:0b:49:48:da:64:ac:31:01:43:34:
00:ea:eb:f2:b9:68:72:c7:b8:d1:52:44:56:27:6d:
aa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:70:A0:F7:DE:D4:CC:4A:96:3F:C3:A4:81:BA:8E:20:12:76:70:0A
X509v3 Authority Key Identifier:
keyid:6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:85:65:95:a7:82:9a:8d:73:44:16:42:a0:b9:01:42:1e:f7:
73:89:35:57:22:9f:c2:59:e9:17:a8:18:95:91:d6:2f:8f:f9:
ea:5f:83:8b:64:d1:2f:96:65:be:69:56:08:6e:13:6f:11:4e:
1f:24:0d:ba:36:5a:6a:32:f9:96:91:a8:27:d9:c8:10:e6:51:
63:22:97:52:1d:85:57:50:49:e5:02:cc:84:f2:fd:bd:19:48:
dc:7c:22:71:75:4a:58:7c:9c:2e:3d:01:93:c4:0d:e6:46:ab:
12:e0:4f:d4:09:ae:72:61:b1:27:0b:5c:44:57:03:d4:a8:eb:
ac:96:97:74:d5:47:09:c1:0c:8c:a0:7d:ba:ce:13:f6:85:05:
c6:50:3c:37:66:03:ec:31:f0:f1:55:23:89:85:f9:d6:9a:e2:
a6:5c:af:dd:a6:26:7a:c9:71:2c:a2:3e:42:e3:65:c8:71:c3:
99:f4:1a:f2:e4:8c:a3:25:f6:f3:04:b9:8a:96:dd:e8:b4:94:
af:8e:c0:47:9b:69:16:90:17:96:de:68:07:91:83:50:12:7a:
55:ac:1c:64:6e:70:51:48:92:9e:bb:b6:03:0b:da:73:31:13:
71:d2:f4:9b:cc:d1:03:56:fa:c7:50:86:c7:58:3e:24:2e:1b:
c9:5b:47:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:10 2026 by rpki-client