
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
File: ByXySRgBUFGFyQaaQBNjXDi1a3I.mft (raw, json)
Hash identifier: jMwanWgLbzcAj6RsceiNY2VSAuYeqEPpSX6gOIMb56Y=
Subject key identifier: F1:7A:CB:18:E6:8B:21:14:DF:B4:7C:06:5C:C1:D8:98:43:7E:3A:A9
Authority key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
Certificate issuer: /CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Certificate serial: 07FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
Manifest number: 170D
Signing time: Tue 24 Mar 2026 17:53:42 +0000
Manifest this update: Tue 24 Mar 2026 17:53:41 +0000
Manifest next update: Tue 31 Mar 2026 17:53:41 +0000
Files and hashes: 1: ByXySRgBUFGFyQaaQBNjXDi1a3I.crl (hash: 5XNC/jlttmtQTg3zhZyrjA1EQTqx9fAvWEjXfxVS+UM=)
2: CCA402F8BE3811F0B9AAC956C4F9AE02.roa (hash: poKacpxWLem7MXU2cZ8LXl1fQdysy14/f02fKfzvHFI=)
3: 970E5576BE3811F0962A6356C4F9AE02.roa (hash: nisM7JGbV5MRmDC8uhu0E+MPwT1IFHJ1Q6JtOmv7Vk8=)
4: 05144A26BE3911F09CB32457C4F9AE02.roa (hash: BJG7KKwhl8HJLFMiXdJ/ug8z26cqh8GFLSWPDyLzMV4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:53:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2043 (0x7fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D808, serialNumber=0725F2491801505185C9069A4013635C38B56B72
Validity
Not Before: Mar 24 17:53:41 2026 GMT
Not After : Mar 31 17:53:41 2026 GMT
Subject: CN=69c2cfa5-eac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:4d:03:fd:66:d8:4c:28:d4:6f:58:29:6c:
77:11:3b:56:eb:90:92:4b:6c:b2:40:eb:aa:1d:1e:
5e:34:35:40:85:67:49:79:cd:8c:cf:63:c4:e4:d7:
6d:ea:6a:4b:91:10:a6:0a:03:cc:9a:28:98:2b:5c:
df:f9:47:26:cd:2d:fa:6f:19:78:ed:55:20:59:2f:
dd:41:70:a4:bd:8f:a0:c6:9f:4f:19:a3:9c:7d:3d:
50:00:1b:16:e5:1a:da:14:5c:ee:4e:a7:8d:d6:ef:
9a:8b:5d:70:89:b4:d1:79:8d:67:d9:65:31:07:b8:
19:91:2f:be:c2:8d:a6:17:cd:bd:3f:80:ad:4e:ca:
32:10:70:1b:46:86:d3:a9:c4:6b:74:21:2c:8f:05:
8a:a5:2b:68:6b:6c:ce:c8:52:25:8e:ad:bc:ff:eb:
7b:48:24:1a:d8:1b:47:f7:09:c4:df:a6:d6:6b:4d:
8f:eb:56:09:09:60:85:05:17:d4:17:c1:30:dc:2c:
51:60:84:64:23:cb:fb:c2:c4:34:56:27:e7:c0:d7:
71:a2:04:89:af:d7:f8:30:2d:11:e4:b3:a3:97:92:
54:af:5c:2a:98:e4:66:8f:e0:31:f4:a0:18:c3:99:
b2:23:b1:f8:67:a0:5d:78:d6:d3:7f:b2:8b:68:59:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7A:CB:18:E6:8B:21:14:DF:B4:7C:06:5C:C1:D8:98:43:7E:3A:A9
X509v3 Authority Key Identifier:
keyid:07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4d:22:1c:3a:9a:6f:a4:74:37:ee:3d:df:27:6b:98:91:cb:
1e:9a:20:6e:ee:ea:22:bf:8a:af:11:db:24:39:bb:67:71:4a:
c6:b1:2b:1b:24:9f:70:37:17:1d:65:ea:66:48:71:90:cf:65:
ae:ca:b2:55:11:ed:ce:58:9c:b4:ed:e8:9e:04:d3:04:28:d6:
f8:e4:05:6c:cd:cc:c5:0d:26:9a:0f:3d:32:df:c9:f8:aa:c1:
49:ba:34:1e:f5:fb:53:10:f8:ae:86:ff:31:92:88:be:89:ff:
1d:90:8e:c7:9a:34:e9:58:12:e3:c9:8f:c2:be:eb:5b:c1:43:
87:ae:32:5a:76:ea:9e:a5:b5:f3:f4:7e:d7:f5:29:37:9b:fb:
48:6d:a3:99:f2:22:04:a7:61:e2:f1:e9:67:8f:d8:10:ef:9d:
15:04:c8:46:9e:75:86:ff:80:4d:16:12:2a:03:26:42:d5:ef:
30:c4:f5:41:ae:88:8e:02:34:69:79:99:c7:9a:5a:cd:18:4a:
29:f6:92:9d:22:41:d4:68:9c:b2:06:81:81:f2:d0:72:8f:4c:
ca:88:80:63:f8:51:c6:64:5e:43:e4:9e:4c:01:b5:dc:84:c4:
96:c2:d6:91:1f:63:9e:8b:1e:bc:8f:bf:90:fa:97:d9:41:2f:
fb:c7:fc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:41:43 2026 by rpki-client