
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
File: ByXySRgBUFGFyQaaQBNjXDi1a3I.mft (raw, json)
Hash identifier: ZdK7L0L27mWLoluRIDVV0+dDmEtS/MlmqVogXG3h1ek=
Subject key identifier: 9B:38:3B:E3:09:6D:F9:61:0F:11:8B:AE:C6:35:16:5E:CD:0B:82:A1
Authority key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
Certificate issuer: /CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Certificate serial: 0838
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
Manifest number: 174A
Signing time: Wed 22 Jul 2026 18:11:52 +0000
Manifest this update: Wed 22 Jul 2026 18:11:51 +0000
Manifest next update: Wed 29 Jul 2026 18:11:51 +0000
Files and hashes: 1: ByXySRgBUFGFyQaaQBNjXDi1a3I.crl (hash: gzNt0FDxNpTyo4JFm8DeNQB+bxjCZXfhApuKIO1gKlE=)
2: 05144A26BE3911F09CB32457C4F9AE02.roa (hash: BJG7KKwhl8HJLFMiXdJ/ug8z26cqh8GFLSWPDyLzMV4=)
3: 970E5576BE3811F0962A6356C4F9AE02.roa (hash: nisM7JGbV5MRmDC8uhu0E+MPwT1IFHJ1Q6JtOmv7Vk8=)
4: CCA402F8BE3811F0B9AAC956C4F9AE02.roa (hash: poKacpxWLem7MXU2cZ8LXl1fQdysy14/f02fKfzvHFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2104 (0x838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D808, serialNumber=0725F2491801505185C9069A4013635C38B56B72
Validity
Not Before: Jul 22 18:11:51 2026 GMT
Not After : Jul 29 18:11:51 2026 GMT
Subject: CN=6a6107e8-8c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:fd:23:90:06:ee:b5:1d:a9:a8:fc:ad:eb:
dc:6f:69:24:68:7b:ce:15:00:08:10:80:46:e4:d6:
2e:a5:ca:d0:74:9f:5b:37:9f:3b:49:2d:04:24:60:
44:16:60:a5:36:e8:4f:57:40:36:7a:54:56:b1:0f:
58:ce:17:4e:46:7d:07:1e:ac:be:80:4c:79:e7:01:
33:a5:11:b6:fb:08:7f:e8:57:3c:7a:1b:3f:19:33:
21:28:2a:88:9e:6a:25:28:cc:3b:4a:4d:63:13:fb:
68:54:96:84:52:0c:59:20:b0:16:b1:56:ce:46:f9:
ad:e6:09:7b:ce:b6:50:d5:04:9e:77:b3:e1:cc:b1:
e5:81:a1:49:a4:11:b6:56:67:25:e5:51:b4:ca:c4:
9d:56:d8:bc:7f:25:e7:4c:09:e0:0d:bf:97:c8:a0:
d9:3a:ab:3f:67:57:35:82:5d:75:5c:19:bd:cd:de:
57:2a:17:ef:3b:ff:8d:84:eb:6c:c8:e6:58:aa:26:
45:ae:31:35:98:b6:29:0b:ef:35:ba:fd:07:85:e6:
33:a1:3e:8b:b8:67:2e:36:67:27:6e:91:85:22:05:
3d:48:ce:f6:a5:ca:dd:6d:20:ca:27:e2:1f:8c:c5:
79:70:44:20:7e:46:48:ce:91:8f:74:6d:46:8d:d7:
6c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:38:3B:E3:09:6D:F9:61:0F:11:8B:AE:C6:35:16:5E:CD:0B:82:A1
X509v3 Authority Key Identifier:
keyid:07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7b:30:2f:6d:7d:e0:7e:58:fb:8b:3d:33:df:49:c9:a2:0d:
d8:ca:59:2c:3a:eb:b0:aa:a6:12:7e:db:aa:5c:c3:ac:b8:59:
0e:de:c8:ed:26:64:31:f5:9f:b8:d5:7f:4c:32:88:83:a1:02:
1f:93:c0:4a:e7:bb:e6:bd:07:9e:82:9b:34:f3:48:81:ca:52:
6d:23:36:e5:58:47:d2:60:9f:9a:e5:1e:fe:9c:1a:25:2c:d2:
eb:d6:05:0e:50:ed:95:d2:a1:7a:ad:aa:a3:c6:8b:ff:7f:fb:
7b:97:9c:c3:d0:e6:38:88:a7:70:71:4c:70:e8:d0:74:f3:8d:
36:eb:c9:ee:b7:32:0c:67:ec:99:07:29:14:ab:c7:85:d2:ae:
ef:e8:16:1f:3c:08:72:1c:af:1c:8d:20:8a:e0:59:86:97:e1:
87:97:a1:b5:8e:54:c4:c5:ef:2e:af:22:7b:d2:93:24:fb:e0:
2d:74:f3:27:ce:69:a0:23:dc:bc:fd:b3:dd:ba:57:0f:a9:8a:
e2:23:c6:f2:50:a5:67:f8:97:cf:d9:94:8a:25:56:89:32:0f:
a3:21:24:2c:c1:c3:e3:4d:03:cd:88:a6:82:32:dc:95:76:b5:
49:ae:b2:dd:7f:62:79:8f:57:7b:43:fd:8e:07:e7:3f:7f:73:
84:b3:e9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:30:23 2026 by rpki-client