
$ rpki-client -vvf rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
File: bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft (raw, json)
Hash identifier: W7wO/oODSPbZB7CHBjQcbZptZhcLwdcWLZ+ojE5RSKc=
Subject key identifier: 5A:E6:8F:1C:EC:1E:98:C9:4F:D0:52:20:71:0A:DD:E7:37:2D:B5:43
Authority key identifier: 6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93
Certificate issuer: /CN=A913695E/serialNumber=6D84176172580392BA2A325F717B1ECA4F0D8793
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
Manifest number: D8
Signing time: Wed 19 Aug 2026 07:19:04 +0000
Manifest this update: Wed 19 Aug 2026 07:19:04 +0000
Manifest next update: Wed 26 Aug 2026 07:19:04 +0000
Files and hashes: 1: bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl (hash: VlzMYZLEuccWNW5ms71GAPKVY9k58e42ukHfd+cdZXI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl
rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913695E, serialNumber=6D84176172580392BA2A325F717B1ECA4F0D8793
Validity
Not Before: Aug 19 07:19:04 2026 GMT
Not After : Aug 26 07:19:04 2026 GMT
Subject: CN=6a8558e8-4b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:2b:23:78:36:ed:15:e1:96:9c:d4:ad:26:
40:74:94:0d:ec:65:ef:15:46:50:e6:75:18:e3:57:
5e:9b:c1:bb:60:0e:9e:46:b4:96:5b:0f:17:ce:d9:
a2:e3:35:fb:5a:66:d3:20:30:71:18:37:d1:90:01:
46:5c:01:b8:84:fb:9d:a4:a5:c5:bf:ab:22:a0:1a:
cf:e0:c5:5c:88:6b:69:e4:e2:1d:fb:49:bd:ee:aa:
67:d4:4e:ac:61:6f:d0:dc:cd:c4:5b:79:67:33:0b:
85:20:5b:91:8b:36:e7:12:38:49:4a:e8:12:9f:36:
b5:61:1d:e6:98:a6:f1:ab:c5:ba:35:91:6e:be:64:
05:96:00:42:95:d6:df:1a:e4:85:42:3c:36:b9:db:
b0:7b:f7:8c:92:83:1a:b4:ac:bd:7c:de:78:74:a1:
c9:77:84:a5:d7:16:a2:71:c2:b1:7c:7d:e9:d8:69:
c6:32:a3:33:a7:54:00:a7:82:07:a5:1c:a4:1a:99:
fb:bc:b2:46:1e:42:61:ce:bd:ba:d1:83:a2:00:df:
9f:a8:24:a7:50:f2:cb:fd:39:6b:71:4e:f7:b0:08:
21:1c:09:06:67:59:3a:36:ac:7d:2e:99:1a:a4:bf:
89:02:61:60:a3:a6:84:d6:3d:14:c5:e3:2f:8e:23:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E6:8F:1C:EC:1E:98:C9:4F:D0:52:20:71:0A:DD:E7:37:2D:B5:43
X509v3 Authority Key Identifier:
keyid:6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:be:98:4c:98:94:81:a4:bd:12:b6:94:42:e8:19:ea:1d:6c:
86:d0:44:e3:9b:35:e6:4a:77:ee:cb:95:79:71:3a:b8:d9:b0:
f2:87:39:72:19:5f:f5:a0:3a:04:91:d5:2a:9c:7e:cc:c0:35:
78:7b:fc:ac:22:98:5d:00:3d:5f:41:8d:ba:8a:55:08:64:b6:
78:e1:59:79:0e:67:f8:7a:65:e6:43:30:04:07:bc:91:6f:bd:
68:18:0b:fa:09:27:1c:e6:f3:09:c4:bd:fa:a8:84:a7:e7:3b:
06:18:8f:0d:e1:dc:47:b9:da:96:ec:48:d3:d5:3e:3c:cd:eb:
fe:71:b3:60:a8:97:ef:d2:05:65:6c:20:00:a4:06:28:60:c3:
74:a2:c7:70:55:30:08:21:d7:91:2d:3d:93:ea:63:51:12:bd:
36:e8:14:b1:72:22:a6:8c:06:d2:ce:bb:66:81:ef:31:00:b7:
5e:c1:09:09:c6:70:f5:67:7d:67:31:00:ca:e9:37:b8:31:92:
80:fa:dd:2a:04:b6:98:5f:e8:15:7a:6b:5f:37:1a:d8:1c:88:
2f:eb:65:eb:65:11:b0:ac:60:23:6d:bd:3e:90:d4:5e:42:93:
a5:9d:68:d6:45:2e:ad:f2:93:e8:fe:28:d2:90:7f:b2:76:b5:
65:05:e8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:13 2026 by rpki-client