
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft
File: bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft (raw, json)
Hash identifier: +omoTD5TJrf0jHQPsf/TSDk/xLFipA1vjCKWRMrctec=
Subject key identifier: 8C:CD:EE:25:C1:84:88:EE:57:FD:CC:55:7B:7E:E0:8C:7C:A1:BB:80
Authority key identifier: 6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C
Certificate issuer: /CN=A917877E/serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft
Manifest number: E8
Signing time: Tue 29 Sep 2026 06:58:37 +0000
Manifest this update: Tue 29 Sep 2026 06:58:36 +0000
Manifest next update: Tue 06 Oct 2026 06:58:36 +0000
Files and hashes: 1: bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl (hash: zsQwGDUEPGpPHhJhQxmdhG61+TOqM+PcIEDxwtYrbxA=)
2: 9EA96DF25D5D11F08A574048C4F9AE02.roa (hash: 1KZ2WPxRdT2HKxaGcJHtcWm8Oq/jSvuH2LR95+R/pWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl
rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 06:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917877E, serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C
Validity
Not Before: Sep 29 06:58:36 2026 GMT
Not After : Oct 6 06:58:36 2026 GMT
Subject: CN=6abb619d-d757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3d:eb:94:be:03:89:d8:e6:15:f9:6a:a7:2e:
bb:a8:8e:36:4e:c6:dc:ef:9d:39:c9:7a:8c:47:a4:
10:37:8f:64:fb:9b:de:dd:7c:8f:d5:4b:fb:7f:f4:
23:d1:ad:5b:d2:85:c6:26:0c:9b:ec:14:46:e2:f2:
e4:4e:82:ff:49:9a:20:42:d4:5a:01:93:40:e7:1d:
56:da:40:59:42:b9:78:07:ae:a9:5b:d4:bc:0b:73:
07:c2:db:bf:0c:90:29:ea:87:ce:8c:ca:8e:99:26:
b7:53:d6:4e:e4:ef:fe:5f:1c:9b:09:10:26:db:af:
ca:f6:e6:28:4d:ff:f2:79:45:2b:38:9f:4e:3e:70:
19:70:08:1e:48:72:12:96:57:ec:84:a0:e8:0a:5d:
b1:f9:54:0b:85:7a:3d:35:ec:49:b2:d4:7a:86:46:
cf:c2:65:71:5d:a3:b8:a8:0c:bd:68:6f:ca:2c:55:
14:b6:ff:81:d0:f3:9c:35:95:76:2e:fd:cf:e3:b3:
86:66:0e:2e:c6:b0:86:42:60:76:78:c2:10:bc:a7:
0a:a4:76:01:d1:4f:89:55:3d:f7:8c:43:ae:a9:7b:
db:50:f4:0f:58:f1:a3:23:5a:7e:d4:b1:13:81:93:
35:0a:a5:cf:ce:11:01:72:5f:ad:5e:e0:3b:10:0b:
f7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CD:EE:25:C1:84:88:EE:57:FD:CC:55:7B:7E:E0:8C:7C:A1:BB:80
X509v3 Authority Key Identifier:
keyid:6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0c:55:d6:f8:d9:5a:96:b3:9d:a4:27:18:62:76:ce:86:69:
e7:6b:83:72:20:9f:49:8e:84:ae:d9:83:83:44:ac:df:5d:c2:
1a:67:c1:07:68:cd:92:82:78:d5:df:6f:b5:0c:d6:61:ae:12:
6a:09:46:a9:9e:a5:0e:45:2f:84:46:a5:79:95:77:d1:e9:98:
08:d4:a0:cb:74:08:9e:85:f1:fc:5c:8d:1d:f8:98:ac:bb:f2:
50:67:60:9b:e9:75:14:7c:a9:33:50:a2:ab:06:b6:39:66:54:
13:66:27:45:d2:c4:4c:98:34:53:29:30:e5:9d:b7:a8:ad:a9:
0d:ec:33:4c:1a:73:c1:6a:ff:52:1b:a8:d4:3a:ec:51:27:60:
f3:33:5b:69:af:ae:58:97:c6:f3:6c:9e:0f:6b:01:ec:43:d6:
d1:a2:88:6b:38:82:80:95:3b:42:ff:b5:34:40:ba:bf:e6:8c:
71:19:83:c4:f3:1a:ec:eb:5b:00:d0:31:31:02:78:1a:85:da:
93:b1:28:14:a5:0d:ff:ca:74:46:34:62:e7:46:b9:68:e6:d1:
a4:90:1f:c1:f4:22:bc:3a:b0:01:81:af:e1:d2:64:7c:99:82:
80:b8:7c:2e:f5:7f:e2:77:c1:4a:dc:ad:1c:3d:a4:38:72:33:
af:b9:ed:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 07:21:41 2026 by rpki-client