
$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft
File: BYQh3nB4BzBHPlzFRboK5dubTAo.mft (raw, json)
Hash identifier: 1nn7jRw9bnFFo9dlrDNaZq/PzQGRHID9nNV3QaF0nBM=
Subject key identifier: FD:CA:F6:48:6F:EA:B7:34:6F:2D:65:4D:65:68:98:51:DB:68:06:91
Authority key identifier: 05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A
Certificate issuer: /CN=A91862F7/serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A
Certificate serial: 0A73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft
Manifest number: 0A62
Signing time: Wed 22 Jul 2026 17:20:03 +0000
Manifest this update: Wed 22 Jul 2026 17:20:03 +0000
Manifest next update: Wed 29 Jul 2026 17:20:03 +0000
Files and hashes: 1: BYQh3nB4BzBHPlzFRboK5dubTAo.crl (hash: CMy/BYiR/MVzERjfpDrWKfSLqozuask8c1Eo3aEbCnM=)
2: 7B01065ECB6611F0911E3B40C4F9AE02.roa (hash: 6Dvm4ulNHKTvy2zEThI5CFxM48R2WkZ0mp2MxrhNEVA=)
3: 7C4C4384CB6611F09E0E3B40C4F9AE02.roa (hash: jmLTUdjA6fVp52xmmEEVibY5+Y7NyInAVp9PHPY/5uE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl
rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2675 (0xa73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862F7, serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A
Validity
Not Before: Jul 22 17:20:03 2026 GMT
Not After : Jul 29 17:20:03 2026 GMT
Subject: CN=6a60fbc3-f97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:34:cf:6a:fc:14:72:02:e4:1c:7a:5d:c0:7e:
65:33:c8:9d:e3:59:9b:e5:09:b9:f1:8d:bc:a6:f7:
57:b9:f8:70:fb:db:ac:ba:f3:e0:9c:f8:bc:0b:dc:
5e:cd:20:1c:c1:3d:73:bc:06:bc:94:90:29:10:50:
d6:22:5b:41:1c:79:9b:c5:3c:64:1a:39:c2:65:bf:
f8:9c:8d:a6:da:33:dc:75:1b:14:1b:db:39:84:7a:
22:fd:64:a5:6a:3c:6f:29:8b:7c:9b:4c:90:95:7b:
9a:cf:8c:04:03:ff:62:7c:db:19:bd:3c:5a:e2:3d:
1e:cd:78:7c:45:bf:b8:88:e5:1e:2a:e2:58:d1:67:
80:d8:81:29:d1:54:0b:a8:67:3b:28:0f:47:8f:11:
da:dd:18:e4:f6:70:aa:b8:05:2d:cd:99:3c:e9:39:
7a:7c:fd:7c:c3:9d:5c:94:34:34:b3:10:e3:aa:09:
96:b1:46:e4:b9:41:53:b2:83:bf:19:f2:4e:25:f3:
63:f6:d2:31:84:45:83:4e:8e:25:5e:b5:f7:04:18:
71:2d:25:b7:64:f6:02:7e:5b:8d:ae:8f:52:62:9f:
93:b5:4a:e9:5e:d5:15:67:c6:eb:37:aa:c8:de:e5:
5a:1d:24:c1:f6:5d:36:59:32:2a:96:78:6c:64:38:
e8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CA:F6:48:6F:EA:B7:34:6F:2D:65:4D:65:68:98:51:DB:68:06:91
X509v3 Authority Key Identifier:
keyid:05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c2:ef:a7:bd:de:42:ec:ba:76:cd:04:81:f7:42:d2:1e:41:
62:af:57:56:21:71:0a:3d:a1:d0:dd:7e:d1:48:c6:89:52:c8:
6a:d3:b2:50:89:34:06:ec:40:18:73:1d:0f:44:14:8c:b0:78:
26:2e:f0:6d:70:a3:ed:19:79:78:83:05:48:f6:bb:71:35:b4:
ec:88:d1:97:e0:6a:e9:c3:dc:22:9c:fa:07:c3:f4:23:05:ae:
87:f1:23:62:b8:41:c6:78:06:82:f1:80:fe:57:ff:c0:83:f2:
77:e4:70:ca:4a:2c:32:eb:5b:b4:5f:33:5e:97:20:8b:2d:7e:
3f:20:a9:22:8a:36:e0:9f:e6:17:a1:56:ab:a3:e1:0a:31:9c:
24:db:bd:d3:e0:81:64:da:4c:76:b6:05:43:cb:7d:4c:14:24:
45:27:24:b7:4f:f0:a0:42:7b:fb:e5:8f:5f:c7:96:09:7d:fa:
7f:ec:99:35:d8:3a:df:a8:09:e2:42:4d:2c:4e:9c:18:3e:f6:
a5:72:36:92:17:3e:5e:48:fe:0b:37:ab:20:c1:26:88:77:8c:
0c:f1:58:86:94:92:16:21:05:69:f8:e9:62:b7:4b:c0:b8:95:
a7:47:77:e6:52:c9:5b:4b:3d:9d:45:1f:c8:1b:e2:e1:23:4b:
3a:c4:f5:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyRjcxMTAvBgNVBAUTKDA1ODQyMURFNzA3ODA3MzA0NzNFNUNDNTQ1QkEwQUU1
REI5QjRDMEEwHhcNMjYwNzIyMTcyMDAzWhcNMjYwNzI5MTcyMDAzWjAYMRYwFAYD
VQQDEw02YTYwZmJjMy1mOTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2TTPavwUcgLkHHpdwH5lM8id41mb5Qm58Y28pvdXufhw+9usuvPgnPi8C9xe
zSAcwT1zvAa8lJApEFDWIltBHHmbxTxkGjnCZb/4nI2m2jPcdRsUG9s5hHoi/WSl
ajxvKYt8m0yQlXuaz4wEA/9ifNsZvTxa4j0ezXh8Rb+4iOUeKuJY0WeA2IEp0VQL
qGc7KA9HjxHa3Rjk9nCquAUtzZk86Tl6fP18w51clDQ0sxDjqgmWsUbkuUFTsoO/
GfJOJfNj9tIxhEWDTo4lXrX3BBhxLSW3ZPYCfluNro9SYp+TtUrpXtUVZ8brN6rI
3uVaHSTB9l02WTIqlnhsZDjoXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP3K9khv
6rc0by1lTWVomFHbaAaRMB8GA1UdIwQYMBaAFAWEId5weAcwRz5cxUW6CuXbm0wK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGNy81RUFDNjE0NDhG
QTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6QkhQbHpGUmJvSzVkdWJU
QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JZUWgzbkI0QnpCSFBsekZSYm9LNWR1YlRBby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjJGNy81RUFDNjE0NDhGQTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6
QkhQbHpGUmJvSzVkdWJUQW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHMLvp73eQuy6ds0EgfdC0h5BYq9XViFxCj2h0N1+0UjGiVLIatOyUIk0BuxA
GHMdD0QUjLB4Ji7wbXCj7Rl5eIMFSPa7cTW07IjRl+Bq6cPcIpz6B8P0IwWuh/Ej
YrhBxngGgvGA/lf/wIPyd+RwykosMutbtF8zXpcgiy1+PyCpIoo24J/mF6FWq6Ph
CjGcJNu90+CBZNpMdrYFQ8t9TBQkRSckt0/woEJ7++WPX8eWCX36f+yZNdg636gJ
4kJNLE6cGD72pXI2khc+Xkj+CzerIMEmiHeMDPFYhpSSFiEFafjpYrdLwLiVp0d3
5lLJW0s9nUUfyBvi4SNLOsT19w==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:10:12 2026 by rpki-client