
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
File: ByXySRgBUFGFyQaaQBNjXDi1a3I.mft (raw, json)
Hash identifier: 6Mpp2dEZUOP4aZdgUAh6DFdwZyUnB7Umt7mrRy0qqco=
Subject key identifier: C3:4E:F3:09:05:4B:39:C5:0E:69:DE:42:E4:25:AA:E8:74:35:BE:5B
Authority key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
Certificate issuer: /CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Certificate serial: 0814
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
Manifest number: 1726
Signing time: Tue 12 May 2026 18:02:55 +0000
Manifest this update: Tue 12 May 2026 18:02:55 +0000
Manifest next update: Tue 19 May 2026 18:02:55 +0000
Files and hashes: 1: ByXySRgBUFGFyQaaQBNjXDi1a3I.crl (hash: /4P97km78/Wm3GEmLWsltFjxHqqj1ddClZGxkXqamuk=)
2: 05144A26BE3911F09CB32457C4F9AE02.roa (hash: BJG7KKwhl8HJLFMiXdJ/ug8z26cqh8GFLSWPDyLzMV4=)
3: CCA402F8BE3811F0B9AAC956C4F9AE02.roa (hash: poKacpxWLem7MXU2cZ8LXl1fQdysy14/f02fKfzvHFI=)
4: 970E5576BE3811F0962A6356C4F9AE02.roa (hash: nisM7JGbV5MRmDC8uhu0E+MPwT1IFHJ1Q6JtOmv7Vk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2068 (0x814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D808, serialNumber=0725F2491801505185C9069A4013635C38B56B72
Validity
Not Before: May 12 18:02:55 2026 GMT
Not After : May 19 18:02:55 2026 GMT
Subject: CN=6a036b4f-3c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:55:86:41:3a:10:2e:61:52:3b:3c:d9:57:a8:
74:cb:41:02:12:67:61:65:6c:32:2c:bd:80:96:ef:
7f:6f:f4:dd:05:12:89:74:7d:3f:2f:2e:41:62:f3:
ee:05:40:77:88:05:9c:38:5a:32:ee:68:81:d7:f8:
09:31:0c:52:ea:00:f3:45:07:d9:b2:b0:b9:f1:6b:
10:c8:a3:a8:62:7e:56:9e:53:34:7a:41:b4:d1:41:
00:40:bf:43:00:8e:7d:04:7d:cc:ba:5e:ea:5e:33:
a6:25:55:6c:05:21:a3:dc:ae:6c:9e:91:19:24:15:
40:67:8b:01:ae:65:6c:5a:ed:09:2a:bb:fd:0f:09:
9f:91:cf:b8:be:a9:25:7a:df:b7:df:3a:18:36:9c:
96:83:f1:8a:c0:4c:cc:b3:11:95:06:09:91:06:de:
69:3b:64:bf:0a:97:47:b2:ce:21:57:66:ee:fb:fb:
c1:02:93:19:d4:1e:a1:3f:7e:96:34:89:6b:2e:36:
ef:f1:95:98:0d:f5:74:ab:a2:29:82:15:86:87:f3:
37:9b:e9:8b:46:7f:68:e3:54:ce:7e:05:40:a1:9b:
64:77:01:a1:77:14:d0:59:03:09:c2:da:5b:ba:bb:
d4:f4:54:85:01:fb:e9:2b:a5:63:08:91:19:98:48:
df:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4E:F3:09:05:4B:39:C5:0E:69:DE:42:E4:25:AA:E8:74:35:BE:5B
X509v3 Authority Key Identifier:
keyid:07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:2a:60:2b:57:72:ab:5f:63:de:fc:fc:be:06:e3:1a:e1:c5:
d2:6e:08:3f:68:cc:7a:92:af:70:ad:d3:f7:61:64:7c:6a:54:
15:08:ba:d3:2a:b0:b8:b2:e2:bf:4e:8c:c4:dd:5e:5e:ea:a0:
70:e1:54:e3:18:78:f1:a8:1d:72:c6:33:ce:a3:b4:ea:c8:40:
93:72:bb:dc:3c:a1:72:2c:4e:82:8e:50:d0:8a:07:a2:13:08:
b2:16:be:ea:4f:b8:46:09:2b:1c:24:13:d5:dd:db:93:90:45:
84:fd:39:9a:d3:fa:2a:de:c3:ae:b7:62:81:76:4e:81:f7:73:
e6:75:c9:c7:f1:a5:6e:f4:43:c4:0a:6d:c2:91:4f:a6:d6:ca:
a5:84:25:c9:d2:a3:05:25:2e:b6:21:01:63:14:db:d6:c5:66:
b2:0f:ee:6d:fb:15:96:f1:ed:62:3d:42:17:e8:98:a8:58:db:
04:3c:a4:88:c9:70:e7:e4:c0:53:c2:de:3d:a0:91:8f:a0:aa:
98:be:3b:80:2a:ad:e1:af:04:80:4b:a0:29:70:a6:c2:a0:e5:
1c:c4:b5:01:84:98:6d:fd:ea:0c:a6:be:ab:0b:66:34:d5:70:
73:6f:d0:51:09:7e:51:b9:62:e8:26:10:d7:3e:dc:3d:02:15:
e1:45:e5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:56 2026 by rpki-client