
$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
File: BYl-c1406PZYdVSprzc0CCziidk.mft (raw, json)
Hash identifier: Inms35iHJihrSgmiaITVl5MLXiZo/9ClEifME6m7c1Y=
Subject key identifier: F7:8E:E9:E4:1D:91:5E:2E:55:68:34:58:F8:08:32:B0:BB:B7:22:31
Authority key identifier: 05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9
Certificate issuer: /CN=A91389E7/serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
Certificate serial: B9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
Manifest number: B6
Signing time: Mon 01 Jun 2026 07:51:44 +0000
Manifest this update: Mon 01 Jun 2026 07:51:44 +0000
Manifest next update: Mon 08 Jun 2026 07:51:44 +0000
Files and hashes: 1: BYl-c1406PZYdVSprzc0CCziidk.crl (hash: 3IkFtNqMzoYD4q17NC1qVe7ozgf2ampYkvh+3GteXBU=)
2: 2C3D8AAA50B511F09288303CC4F9AE02.roa (hash: 6W/VukXB5c5TI5sHg/exLjmPP5EzgCxNCDZkTAkJ9NI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl
rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:51:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91389E7, serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
Validity
Not Before: Jun 1 07:51:44 2026 GMT
Not After : Jun 8 07:51:44 2026 GMT
Subject: CN=6a1d3a10-4e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2d:8a:d4:39:4d:2e:90:13:cc:e7:25:59:8e:
37:80:9d:42:fd:5f:15:90:f6:b0:fc:d1:40:2d:5a:
96:84:86:d7:8d:91:bf:e3:21:0b:39:90:0e:f9:97:
8c:a9:12:d7:da:d2:1c:f3:28:1b:75:2b:15:af:8a:
ea:ec:37:a8:33:29:69:d6:3f:f4:10:e4:25:42:39:
ed:a1:1d:39:86:56:cb:f6:17:41:73:94:bf:e5:24:
b1:4d:4b:26:13:c0:e9:76:49:7a:4f:60:59:0e:e4:
ca:0e:50:9f:64:84:d0:77:e1:78:ec:78:ab:3a:4c:
ae:c5:da:78:2c:97:54:1a:97:ba:47:33:d2:c7:e1:
15:7b:80:1e:e0:b0:5b:01:53:e7:77:38:36:ac:f2:
d1:af:c5:d6:77:d1:6b:3b:ad:21:78:1c:31:6c:41:
ce:d3:7f:0e:71:a2:f9:aa:44:b3:4e:07:d2:39:30:
86:26:99:d0:1b:bd:c9:8e:de:98:df:ed:d9:a9:b9:
9b:fd:bb:64:56:05:82:9f:30:59:10:d6:d1:8f:5c:
85:4a:44:07:04:69:fd:16:1c:3f:1b:4a:03:84:ba:
79:c8:0a:61:6a:c1:fe:91:48:67:a6:6d:01:d5:09:
26:20:0b:c2:f7:b7:6f:c9:12:ff:42:59:15:91:27:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8E:E9:E4:1D:91:5E:2E:55:68:34:58:F8:08:32:B0:BB:B7:22:31
X509v3 Authority Key Identifier:
keyid:05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ba:b0:ca:57:ae:dc:d4:94:5f:f2:24:d3:94:2d:37:ab:0a:
bf:b4:a2:e7:ed:cf:83:5e:3b:1f:0b:68:aa:48:cc:9d:06:41:
8d:b3:a2:ad:04:66:a7:c1:84:f4:ab:26:e3:34:bd:09:3b:80:
2f:e6:7c:5f:e6:16:44:cf:42:f4:d2:72:d3:07:f1:11:70:3a:
97:22:ea:3f:06:b4:5c:49:b0:dd:7e:78:6e:b5:1d:41:50:7e:
74:6f:77:8d:03:29:82:2d:28:48:8c:de:ba:4e:80:ce:09:78:
c9:52:15:a4:d0:ab:20:77:96:84:94:0b:1d:19:1a:8b:dc:c7:
34:37:ec:bc:44:95:7b:67:9b:a5:f9:8f:79:04:6d:63:dd:ae:
85:9e:b7:64:4d:b3:7d:4d:0f:98:a1:ab:9e:d3:20:a6:bc:dc:
59:c2:41:ad:9f:46:2e:43:d9:cd:18:32:d3:2f:48:49:52:f7:
2a:d8:eb:7e:b1:03:81:c7:68:7f:a4:04:7c:4e:83:f7:b9:d9:
d8:5a:df:21:d1:d8:61:3c:2c:5f:27:cf:2f:07:8b:4f:d7:7e:
2d:ab:b5:41:07:17:5a:e4:42:a1:88:9b:36:56:75:1c:47:8b:
20:22:f1:66:a2:3a:de:25:3b:b4:c6:f7:29:ae:7c:2a:c8:4c:
da:ad:f4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:44 2026 by rpki-client