
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
File: ByXySRgBUFGFyQaaQBNjXDi1a3I.mft (raw, json)
Hash identifier: VAjcmxxP/5sU9Fv74nKItphIBbXkTp7cKEQuPe2bqjE=
Subject key identifier: 94:29:26:73:C3:BC:38:CC:F1:A2:E1:64:25:C8:10:1F:3D:73:56:42
Authority key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
Certificate issuer: /CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Certificate serial: 0803
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
Manifest number: 1715
Signing time: Wed 08 Apr 2026 17:55:18 +0000
Manifest this update: Wed 08 Apr 2026 17:55:18 +0000
Manifest next update: Wed 15 Apr 2026 17:55:18 +0000
Files and hashes: 1: ByXySRgBUFGFyQaaQBNjXDi1a3I.crl (hash: 82D619txE0r2jkuSSnXorjkr8anSNyvz7lcG/awVweQ=)
2: 05144A26BE3911F09CB32457C4F9AE02.roa (hash: BJG7KKwhl8HJLFMiXdJ/ug8z26cqh8GFLSWPDyLzMV4=)
3: 970E5576BE3811F0962A6356C4F9AE02.roa (hash: nisM7JGbV5MRmDC8uhu0E+MPwT1IFHJ1Q6JtOmv7Vk8=)
4: CCA402F8BE3811F0B9AAC956C4F9AE02.roa (hash: poKacpxWLem7MXU2cZ8LXl1fQdysy14/f02fKfzvHFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Apr 2026 17:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2051 (0x803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D808, serialNumber=0725F2491801505185C9069A4013635C38B56B72
Validity
Not Before: Apr 8 17:55:18 2026 GMT
Not After : Apr 15 17:55:18 2026 GMT
Subject: CN=69d69686-1542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7d:e6:12:67:a6:d3:39:97:94:fa:9e:6c:1b:
6c:90:e9:b8:da:3d:d0:1f:f0:dd:c4:88:2e:e0:88:
a2:aa:3e:f4:ff:3b:5e:aa:5b:15:a7:ae:e2:0f:f9:
5a:0e:7c:4b:e3:00:9e:b9:ff:20:10:7a:36:bf:ec:
00:5d:45:61:7e:ec:f4:9f:61:59:1c:70:b4:d3:a8:
80:e7:91:69:32:9e:ed:d6:48:fd:42:57:06:8c:f0:
59:7a:c0:f0:2c:2b:48:ea:5e:df:e9:63:97:37:15:
40:58:a2:bd:24:1f:32:a9:53:67:c7:15:4b:2f:6d:
0e:18:c7:47:c5:05:1a:73:8d:6b:e6:18:f3:90:28:
eb:e1:b1:60:a4:42:08:8a:d7:19:97:5a:82:99:bb:
ae:a0:f2:ce:0b:8f:8f:50:fb:ff:4b:05:ff:e2:b3:
98:80:36:e7:26:47:d9:9d:ed:a1:a3:9e:42:06:4f:
11:16:12:fa:4e:b0:6c:dc:ed:a1:62:16:f5:fa:5f:
6d:d1:e3:75:37:a5:49:cd:33:e7:a7:91:31:f9:16:
cc:6b:38:18:a6:7a:76:a0:7f:62:c3:7c:f6:ea:aa:
23:48:10:65:1c:4f:27:d1:fe:f7:94:cd:db:3b:63:
ff:3f:63:6f:6f:20:9c:a1:bf:ca:5d:4d:cc:9f:72:
c1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:29:26:73:C3:BC:38:CC:F1:A2:E1:64:25:C8:10:1F:3D:73:56:42
X509v3 Authority Key Identifier:
keyid:07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d8:ec:23:d2:9f:bc:46:0f:20:8f:03:e0:87:e6:0d:48:17:
8d:8a:da:e5:a9:92:0d:19:6f:86:c9:ae:14:16:fd:cf:7b:70:
d3:f2:d4:d6:24:15:ec:e4:4e:54:f1:ba:80:ab:f9:27:c3:c4:
44:bb:2d:db:45:11:62:05:b4:49:59:13:a9:5d:4f:ff:7e:d3:
5e:50:b1:50:62:a7:1d:62:cb:88:8f:96:a1:00:a2:a2:df:85:
5d:66:f6:3c:07:eb:a4:d8:12:db:b5:c9:17:ab:5c:00:77:f1:
30:ba:52:95:21:20:54:28:a7:1a:42:ba:57:2c:ff:41:07:71:
b4:5d:c1:7e:56:13:ca:5d:c8:32:52:00:2c:3d:04:d5:5f:a1:
c6:69:fc:08:c3:19:ab:3a:09:ca:9e:35:7e:ed:2a:f3:be:9d:
a3:4f:b5:e5:20:d4:86:ea:cb:37:49:d7:6f:85:d0:11:29:fc:
ae:b3:46:04:6f:2b:37:37:9c:d3:14:9e:5c:89:c9:e7:f9:c3:
18:5b:f6:89:7b:bf:7e:74:2b:1f:e6:56:8e:23:be:c8:ef:2b:
37:b3:a2:76:f7:17:54:f3:d5:03:f7:b6:14:75:a0:a2:7b:19:
48:8a:cb:b6:90:71:0a:38:c1:e3:68:d3:be:59:bf:ca:f3:11:
28:b0:85:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ4MDgxMTAvBgNVBAUTKDA3MjVGMjQ5MTgwMTUwNTE4NUM5MDY5QTQwMTM2MzVD
MzhCNTZCNzIwHhcNMjYwNDA4MTc1NTE4WhcNMjYwNDE1MTc1NTE4WjAYMRYwFAYD
VQQDEw02OWQ2OTY4Ni0xNTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoH3mEmem0zmXlPqebBtskOm42j3QH/DdxIgu4Iiiqj70/zteqlsVp67iD/la
DnxL4wCeuf8gEHo2v+wAXUVhfuz0n2FZHHC006iA55FpMp7t1kj9QlcGjPBZesDw
LCtI6l7f6WOXNxVAWKK9JB8yqVNnxxVLL20OGMdHxQUac41r5hjzkCjr4bFgpEII
itcZl1qCmbuuoPLOC4+PUPv/SwX/4rOYgDbnJkfZne2ho55CBk8RFhL6TrBs3O2h
Yhb1+l9t0eN1N6VJzTPnp5Ex+RbMazgYpnp2oH9iw3z26qojSBBlHE8n0f73lM3b
O2P/P2NvbyCcob/KXU3Mn3LB2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJQpJnPD
vDjM8aLhZCXIEB89c1ZCMB8GA1UdIwQYMBaAFAcl8kkYAVBRhckGmkATY1w4tWty
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDgwOC9FMjZCNDY0MkY0
QjIxMUU5QkYzQ0U1NjNDNEY5QUUwMi9CeVh5U1JnQlVGR0Z5UWFhUUJOalhEaTFh
M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J5WHlTUmdCVUZHRnlRYWFRQk5qWERpMWEzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDgwOC9FMjZCNDY0MkY0QjIxMUU5QkYzQ0U1NjNDNEY5QUUwMi9CeVh5U1JnQlVG
R0Z5UWFhUUJOalhEaTFhM0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAatjsI9KfvEYPII8D4IfmDUgXjYra5amSDRlvhsmuFBb9z3tw0/LU1iQV7ORO
VPG6gKv5J8PERLst20URYgW0SVkTqV1P/37TXlCxUGKnHWLLiI+WoQCiot+FXWb2
PAfrpNgS27XJF6tcAHfxMLpSlSEgVCinGkK6Vyz/QQdxtF3BflYTyl3IMlIALD0E
1V+hxmn8CMMZqzoJyp41fu0q876do0+15SDUhurLN0nXb4XQESn8rrNGBG8rNzec
0xSeXInJ5/nDGFv2iXu/fnQrH+ZWjiO+yO8rN7OidvcXVPPVA/e2FHWgonsZSIrL
tpBxCjjB42jTvlm/yvMRKLCFXw==
-----END CERTIFICATE-----
Generated at Thu Apr 9 00:21:51 2026 by rpki-client