
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft
File: byPyfwkL70UxgCBy4drPIQ2dQjw.mft (raw, json)
Hash identifier: Zwu+4bPa1zsRA0YgihL1ZAo5GmN7sDmSaU0pMj4F0u8=
Subject key identifier: F5:E4:79:7E:11:C2:AB:51:04:2E:A6:25:FB:83:96:6A:78:A7:52:66
Authority key identifier: 6F:23:F2:7F:09:0B:EF:45:31:80:20:72:E1:DA:CF:21:0D:9D:42:3C
Certificate issuer: /CN=A91AEB80/serialNumber=6F23F27F090BEF4531802072E1DACF210D9D423C
Certificate serial: 04BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft
Manifest number: 0490
Signing time: Tue 24 Mar 2026 23:42:46 +0000
Manifest this update: Tue 24 Mar 2026 23:42:46 +0000
Manifest next update: Tue 31 Mar 2026 23:42:46 +0000
Files and hashes: 1: byPyfwkL70UxgCBy4drPIQ2dQjw.crl (hash: wEwCCp9ehCNvcRXZDf73KUtZ8+d2CFbMLZ3J+aoZIjo=)
2: 6D7FBCBE129111ED81E82D3DC4F9AE02.roa (hash: p8iD8cfenU/3pDjfOhpGVIznHLU9bOEeNzIUjUfKGsw=)
3: 6759C60223C311ED9CF26A56C4F9AE02.roa (hash: aR3bjzpkDnEdThgQWD3OGEKxjKyT+bYAYu7gSfFDnMM=)
4: EE8E0F3AA26711ECAFB48B53C4F9AE02.roa (hash: eaV/UGrF9aFYovMPgzh43fqlwfXnc/bh68H1+PCm0Fo=)
5: 6637CBD423C311ED9CF26A56C4F9AE02.roa (hash: RYuGQRq/FbuSL/tGVPPk29bnF9tr3D+V3UoeMu9qj84=)
6: EDE820B6A26711ECAFB48B53C4F9AE02.roa (hash: WYBCVEow0EGPklBf726NCkW5Rw768+uwmWrbsMCcmoA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.crl
rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215 (0x4bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEB80, serialNumber=6F23F27F090BEF4531802072E1DACF210D9D423C
Validity
Not Before: Mar 24 23:42:46 2026 GMT
Not After : Mar 31 23:42:46 2026 GMT
Subject: CN=69c32176-7ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:07:96:53:6b:08:ac:d3:de:1a:4d:9b:8a:03:
a1:54:ba:4c:c5:c6:63:08:32:d4:8a:6c:a8:df:9b:
54:0f:11:1c:a1:54:65:57:42:8e:9b:60:7f:44:05:
19:1a:60:77:81:4b:e7:d9:7c:21:35:74:16:94:3d:
88:30:68:28:97:cd:d9:e7:5e:2e:f7:06:80:4e:3a:
9d:ba:e8:f0:93:aa:36:7f:96:a0:4b:1b:c8:99:f9:
86:af:9a:c0:0d:9c:72:96:2c:6a:f0:22:86:9d:28:
73:35:76:a8:09:ee:29:3f:35:b0:9a:83:17:2b:12:
43:24:28:a9:5a:75:db:2c:1f:08:12:93:1c:b9:af:
52:f4:ec:61:f5:06:fc:1a:dc:4f:09:0b:a5:8f:69:
a6:eb:c7:dd:02:90:2b:6a:0b:e1:67:fa:e5:cc:39:
51:94:03:5f:1f:d7:ca:d1:e8:bd:0c:35:d2:7d:ef:
46:33:e4:75:71:84:ff:ed:74:cd:2f:01:43:8c:56:
c7:bd:bf:13:48:2b:1f:4c:f0:1a:e0:c5:27:03:18:
92:32:d5:da:b9:a7:73:d8:05:25:a0:98:f3:7a:eb:
ab:e5:0e:65:20:bd:ff:1f:ef:99:30:fa:0c:8f:f6:
19:43:90:d5:89:c1:83:90:08:c4:24:5d:0c:56:25:
2b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E4:79:7E:11:C2:AB:51:04:2E:A6:25:FB:83:96:6A:78:A7:52:66
X509v3 Authority Key Identifier:
keyid:6F:23:F2:7F:09:0B:EF:45:31:80:20:72:E1:DA:CF:21:0D:9D:42:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:79:10:64:20:9d:b7:27:8c:93:de:1e:b9:ec:b9:73:71:3b:
bf:a8:11:79:54:01:66:7e:9c:25:23:33:7b:ea:44:50:cf:14:
aa:18:1f:ae:87:5e:98:ad:55:c1:95:25:e2:05:e6:8b:6a:13:
2f:6c:10:4d:81:a3:30:62:37:3d:61:da:e9:7a:77:f1:f5:6d:
f9:b6:67:9f:20:a4:55:d0:a2:16:9f:9e:a4:b6:49:34:cf:32:
e6:96:8a:88:fe:aa:a2:99:37:b9:7c:88:1f:ac:cd:46:63:ae:
64:86:ea:ed:54:19:7d:3d:e1:47:9f:a8:95:4d:38:e9:86:d8:
ce:83:3d:ac:28:48:f0:d0:62:a6:29:96:4e:dc:8a:ed:a5:f3:
eb:aa:64:ae:fc:f4:fb:7f:0e:e8:23:0d:ef:73:3c:86:a6:ae:
32:13:85:9f:91:b6:db:a3:49:26:cd:ef:86:da:5a:35:1d:b4:
53:b5:f4:2f:92:c8:7c:bc:ed:98:ca:22:4c:f4:cd:95:c1:1c:
85:a2:c5:79:2c:88:1d:13:d6:5b:03:d3:0b:73:de:79:71:4d:
59:8b:06:00:17:6e:25:82:07:21:a4:d6:ac:fd:a3:51:fa:15:
c3:62:24:ba:36:2a:06:92:e9:4a:32:97:ba:7e:55:fb:7d:41:
1d:af:d9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:45:46 2026 by rpki-client