
$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
File: BYl-c1406PZYdVSprzc0CCziidk.mft (raw, json)
Hash identifier: T9As027eEngu2X2JlC/dZUnSeQKBHAhRNS9D9w/Rj/U=
Subject key identifier: 94:63:7A:00:34:A9:4F:38:88:C4:D1:BB:F7:61:B4:7D:1C:F0:EF:50
Authority key identifier: 05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9
Certificate issuer: /CN=A91389E7/serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
Manifest number: 88
Signing time: Tue 03 Mar 2026 07:13:17 +0000
Manifest this update: Tue 03 Mar 2026 07:13:17 +0000
Manifest next update: Tue 10 Mar 2026 07:13:17 +0000
Files and hashes: 1: BYl-c1406PZYdVSprzc0CCziidk.crl (hash: OIFYqXAVXMTJWT7kQ7jJXcl6vb/peOZRtE6WyeuIm+8=)
2: 2C3D8AAA50B511F09288303CC4F9AE02.roa (hash: 6W/VukXB5c5TI5sHg/exLjmPP5EzgCxNCDZkTAkJ9NI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl
rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91389E7, serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
Validity
Not Before: Mar 3 07:13:17 2026 GMT
Not After : Mar 10 07:13:17 2026 GMT
Subject: CN=69a68a0d-51d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c1:b4:93:bb:36:ff:66:30:56:08:04:69:80:
d2:9c:e4:4a:fd:d0:ab:92:99:9a:3d:9b:b2:14:4c:
ae:40:d7:15:32:c6:de:0b:e4:db:ba:81:b6:e0:73:
47:8a:8e:e9:98:fc:26:14:70:fb:d9:10:3c:0c:19:
dd:1d:3e:fb:35:d6:ad:f1:33:04:9f:d8:5b:a1:af:
2d:60:a7:86:05:2e:34:57:6f:78:57:a4:41:da:61:
e3:ff:47:79:cf:86:74:a7:01:62:89:de:cd:03:53:
57:0f:7a:cf:fd:92:60:80:4e:7e:62:2e:54:09:b7:
d9:be:6a:c8:9f:85:36:c6:f3:d7:cb:24:03:37:cb:
63:92:b9:8f:8c:8f:29:52:9d:53:f4:e9:9b:e7:b2:
64:e0:0e:04:54:00:a5:90:6a:84:82:bd:1c:43:be:
1a:16:d8:7e:1b:8b:46:9c:fc:16:64:0b:bd:b5:a0:
20:9b:72:06:eb:51:06:e2:58:74:f8:bb:ae:a6:20:
94:94:56:b0:01:aa:62:75:b5:b6:72:3c:e5:b9:ca:
d3:35:6f:c6:5f:c5:fa:4e:eb:a9:7c:eb:ca:23:5c:
b2:39:5d:5c:ab:ed:e9:7b:53:97:a7:44:3f:1e:47:
ea:3d:3c:78:82:f3:2e:c8:9f:93:80:07:94:ca:2b:
e6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:63:7A:00:34:A9:4F:38:88:C4:D1:BB:F7:61:B4:7D:1C:F0:EF:50
X509v3 Authority Key Identifier:
keyid:05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:58:d9:9a:47:b5:b6:c3:ba:f0:bb:32:65:19:d2:ba:37:6d:
8d:31:31:11:a1:e8:7d:dc:c6:d3:d8:bf:f2:73:9a:6e:df:ba:
c0:40:7f:c5:4a:cc:f4:a9:4b:96:53:c7:36:21:41:fe:03:9d:
1a:6d:e3:9b:b0:bb:6b:b5:fb:56:c1:25:b4:55:90:94:ca:bd:
79:42:1e:9c:25:0a:50:a7:b0:ec:15:a3:8e:fd:8c:47:f8:3b:
19:65:1d:b5:7d:7f:66:e7:83:43:c5:29:57:6f:0b:5f:f2:2b:
81:de:89:8a:79:c6:36:8f:47:92:98:5d:35:c2:f3:ab:09:d0:
bf:dd:a9:93:3c:45:81:bd:e3:8e:d9:b3:f3:c5:ba:31:05:e0:
a2:84:e4:ce:83:fa:7d:41:b6:4f:a6:8c:a7:29:71:34:a8:9d:
d6:b7:ff:5d:f9:bb:b3:89:8f:bf:82:9d:cd:92:33:d6:ea:82:
8a:11:01:e7:09:f9:d2:96:e9:ab:cc:04:06:d7:b3:09:eb:8c:
16:8d:6b:82:b2:3e:81:3a:fe:35:a1:a5:f9:a9:20:7b:df:28:
ca:6c:dd:c0:3c:d3:08:ff:d4:dc:df:89:a9:c0:02:80:bd:93:
9f:ab:46:c6:3d:4b:17:b7:e6:c2:30:82:95:b6:f3:85:c6:80:
c5:52:5e:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzg5RTcxMTAvBgNVBAUTKDA1ODk3RTczNUUzNEU4RjY1ODc1NTRBOUFGMzczNDA4
MkNFMjg5RDkwHhcNMjYwMzAzMDcxMzE3WhcNMjYwMzEwMDcxMzE3WjAYMRYwFAYD
VQQDEw02OWE2OGEwZC01MWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA48G0k7s2/2YwVggEaYDSnORK/dCrkpmaPZuyFEyuQNcVMsbeC+TbuoG24HNH
io7pmPwmFHD72RA8DBndHT77Ndat8TMEn9hboa8tYKeGBS40V294V6RB2mHj/0d5
z4Z0pwFiid7NA1NXD3rP/ZJggE5+Yi5UCbfZvmrIn4U2xvPXyyQDN8tjkrmPjI8p
Up1T9Omb57Jk4A4EVAClkGqEgr0cQ74aFth+G4tGnPwWZAu9taAgm3IG61EG4lh0
+LuupiCUlFawAapidbW2cjzlucrTNW/GX8X6TuupfOvKI1yyOV1cq+3pe1OXp0Q/
HkfqPTx4gvMuyJ+TgAeUyivmxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJRjegA0
qU84iMTRu/dhtH0c8O9QMB8GA1UdIwQYMBaAFAWJfnNeNOj2WHVUqa83NAgs4onZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODlFNy85OUQyOEM5QzRD
MDkxMUYwOUYzOEI2MjhDNEY5QUUwMi9CWWwtYzE0MDZQWllkVlNwcnpjMENDemlp
ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0JZbC1jMTQwNlBaWWRWU3ByemMwQ0N6aWlkay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODlFNy85OUQyOEM5QzRDMDkxMUYwOUYzOEI2MjhDNEY5QUUwMi9CWWwtYzE0MDZQ
WllkVlNwcnpjMENDemlpZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiVjZmke1tsO68LsyZRnSujdtjTExEaHofdzG09i/8nOabt+6wEB/xUrM9KlL
llPHNiFB/gOdGm3jm7C7a7X7VsEltFWQlMq9eUIenCUKUKew7BWjjv2MR/g7GWUd
tX1/ZueDQ8UpV28LX/Irgd6JinnGNo9HkphdNcLzqwnQv92pkzxFgb3jjtmz88W6
MQXgooTkzoP6fUG2T6aMpylxNKid1rf/Xfm7s4mPv4KdzZIz1uqCihEB5wn50pbp
q8wEBtezCeuMFo1rgrI+gTr+NaGl+akge98oymzdwDzTCP/U3N+JqcACgL2Tn6tG
xj1LF7fmwjCClbbzhcaAxVJe9A==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:21:58 2026 by rpki-client