
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
File: bYD-tReA9_EG5hkNw-LufOdO77s.mft (raw, json)
Hash identifier: 8+6ol8ub1Pnw+xVMO+nVvoHscdtFah8R4gAEql1JWlk=
Subject key identifier: 93:BD:20:DE:38:EE:28:6C:EE:56:E9:44:E1:E1:BA:55:47:0A:87:BD
Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB
Certificate issuer: /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB
Certificate serial: 041E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
Manifest number: 0411
Signing time: Fri 25 Sep 2026 00:12:22 +0000
Manifest this update: Fri 25 Sep 2026 00:12:22 +0000
Manifest next update: Fri 02 Oct 2026 00:12:22 +0000
Files and hashes: 1: bYD-tReA9_EG5hkNw-LufOdO77s.crl (hash: NGPk/0YFEoqfgKWto55zGvG6DSmIsVpDCvtwWkKE07Q=)
2: 40F3223E754911F1B8AAB69582A30FBC.roa (hash: g5HMRR+ePvVVDR9MH7expF0U96FPfQiasbKCMyFY5iU=)
3: 58699F5EB4E411F0AEF0381FC4F9AE02.roa (hash: L/vmxqfg593SScOQfruYyTi5w3IbWEPucz1arAKQfq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl
rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1054 (0x41e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917624C, serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB
Validity
Not Before: Sep 25 00:12:22 2026 GMT
Not After : Oct 2 00:12:22 2026 GMT
Subject: CN=6ab5bc66-26ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:84:2e:fe:ca:db:26:e9:1e:ac:c5:4d:6a:
c8:e0:b3:63:cb:d3:42:f6:0f:5e:c0:d0:ac:ec:bf:
a2:4e:3b:6e:9c:f3:bd:3f:52:db:f3:02:ed:0e:92:
ea:bc:24:75:43:5a:c6:14:87:e0:12:dc:ce:a6:64:
fd:b6:27:b6:b7:a3:04:cc:0f:88:98:28:90:aa:26:
40:cb:a2:28:b7:14:ce:21:fb:43:90:33:f3:0f:07:
71:15:33:29:fe:75:dd:30:2f:b0:fd:6f:06:8b:4c:
d1:da:cb:da:bf:2a:37:77:35:ec:fd:c3:78:6f:6c:
57:ee:3a:6a:00:56:5a:ce:7f:82:69:e6:ad:97:a5:
74:c1:d1:37:a7:8c:d1:ca:4a:f2:58:45:75:4a:da:
95:2b:f4:4b:a7:26:08:84:07:28:52:c2:5a:28:9b:
0c:42:43:e4:73:a6:f0:58:78:4d:a2:b4:8b:cc:db:
d2:fb:a1:29:06:f7:b7:69:a1:87:a0:ec:4c:46:cf:
95:02:ce:d6:d6:fc:63:bc:a9:6c:ef:a8:25:c0:82:
57:f9:67:49:94:72:51:40:5c:ef:8f:39:9b:c9:17:
2f:41:c6:c2:db:ff:5a:52:57:78:b5:ad:24:e5:83:
85:b3:ed:d3:d9:7e:71:f9:a8:63:6c:2c:91:ba:4c:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BD:20:DE:38:EE:28:6C:EE:56:E9:44:E1:E1:BA:55:47:0A:87:BD
X509v3 Authority Key Identifier:
keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:0e:d0:25:8c:10:0e:bc:8e:16:fc:bc:77:6c:0c:a8:24:8b:
18:ab:35:a6:a2:49:13:0b:1f:b1:06:de:12:1b:35:4c:a2:8f:
77:44:bc:bf:d9:0f:ec:03:8e:50:fb:a8:1b:e5:42:0d:e5:fb:
0b:0c:e5:01:e9:43:90:1b:d7:ef:58:a1:68:34:8a:4e:30:77:
4b:5b:44:1c:7f:a4:47:8a:f1:1a:6e:9e:fc:df:d4:e4:1b:95:
13:e1:96:11:52:59:2c:c7:01:3a:f1:e4:81:6a:93:8d:a5:e1:
b8:73:a4:5b:cc:33:4e:d6:57:9d:9e:83:e9:5e:16:fd:e8:32:
55:b2:1d:66:58:ae:fe:bc:ed:c6:74:04:46:76:7e:91:6c:29:
a7:1e:62:d2:05:bf:3b:98:5d:ed:f1:9f:5f:47:38:4f:08:5f:
d0:31:30:9e:6d:93:36:6f:ae:7a:9a:47:9c:54:de:d1:6b:55:
05:03:9a:3f:fc:40:7c:42:3f:28:a0:67:8d:c3:00:fd:87:94:
cb:85:52:20:4a:0a:af:a6:09:61:9a:20:38:04:cf:b7:62:41:
e8:62:e4:0c:da:16:45:a7:62:f8:bf:4b:7f:6b:31:ab:7d:ae:
c1:b4:56:8f:4b:f4:27:97:b8:65:9a:45:41:43:bf:21:db:b8:
45:77:22:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:36:41 2026 by rpki-client