
$ rpki-client -vvf rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft
File: bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft (raw, json)
Hash identifier: rdMpLzczHpbLt1rTFqW89rrzFoT7IiLdMbUdyOjVvZE=
Subject key identifier: 46:1E:58:82:21:0F:3A:0C:C0:95:18:94:FA:EA:CF:33:4B:E1:76:86
Authority key identifier: 6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C
Certificate issuer: /CN=A917877E/serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft
Manifest number: AA
Signing time: Mon 01 Jun 2026 07:58:23 +0000
Manifest this update: Mon 01 Jun 2026 07:58:22 +0000
Manifest next update: Mon 08 Jun 2026 07:58:22 +0000
Files and hashes: 1: bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl (hash: 6PYitwzTCXtZyzt220k+QJVey5lJUg2JNLc5K+QPw5c=)
2: 9EA96DF25D5D11F08A574048C4F9AE02.roa (hash: j5dVLv6OLKywzj6nsoTlfZRGOA0pKSPRrtwDldvzxCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl
rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917877E, serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C
Validity
Not Before: Jun 1 07:58:22 2026 GMT
Not After : Jun 8 07:58:22 2026 GMT
Subject: CN=6a1d3b9f-099c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:96:c1:3d:4a:89:a2:b9:de:bf:88:4f:49:
d9:a3:25:3b:25:05:61:5b:0a:35:9f:42:21:40:1f:
d3:fa:c4:04:5e:d7:a2:4e:12:18:20:c3:93:c5:b7:
54:97:81:0d:71:fb:06:60:34:7a:7f:cf:28:73:62:
ae:f3:ba:cf:d9:38:36:cf:84:da:a0:33:4c:9b:ff:
e0:b4:0e:d3:26:9f:33:a2:2d:19:29:27:d1:82:13:
82:28:a9:ae:89:a9:22:48:af:31:6c:17:54:e1:6e:
ca:af:af:b8:dd:b7:0f:09:89:c3:74:f2:1e:a6:c1:
16:9c:8c:cd:54:94:98:ff:1f:5f:7d:83:a2:68:88:
e1:2a:e6:cc:72:26:e6:47:d5:71:3a:cc:4c:9f:c6:
fa:20:ef:19:57:51:3f:4f:83:31:a0:4b:19:9d:5a:
4b:d8:61:5e:42:71:5d:c5:59:ac:b4:42:dd:36:8e:
6b:1b:23:aa:f3:7c:85:71:78:c7:ae:35:58:da:de:
1b:c7:04:36:36:c9:bb:7b:34:bf:11:84:d9:39:86:
8f:5a:79:02:4d:23:f4:f0:b7:d2:14:52:2e:07:f0:
9a:4f:d7:39:93:c6:c5:d4:08:15:af:b3:c4:c9:f3:
c3:43:22:d2:bd:91:10:4c:4f:1a:76:72:20:cc:0e:
5f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1E:58:82:21:0F:3A:0C:C0:95:18:94:FA:EA:CF:33:4B:E1:76:86
X509v3 Authority Key Identifier:
keyid:6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:50:d8:53:08:18:3c:22:e4:bf:0c:18:56:7f:ed:43:f5:7e:
04:3a:63:b9:3e:35:ad:c4:35:44:f9:4f:c2:ec:7e:e6:00:31:
db:e4:62:93:84:64:0c:55:bc:8c:85:c6:17:dc:4c:b7:ba:22:
f0:42:09:eb:5b:d7:b5:cb:38:8e:0e:41:30:a3:69:d8:b7:b3:
ae:66:76:70:d7:67:70:90:3c:9b:27:4c:66:54:6a:4c:1d:99:
35:81:0a:95:19:36:7a:57:4c:4c:64:00:e1:db:f2:ae:77:ff:
55:a8:68:aa:50:99:67:11:03:26:be:06:39:0d:45:01:60:ff:
f4:70:1d:cc:4d:e9:d2:4c:cd:36:c6:a8:2f:6f:3b:6f:98:f0:
c8:8e:31:86:d2:39:82:fd:6f:ee:48:2c:02:35:9a:56:28:41:
c6:d3:47:ea:b4:96:8c:89:b0:42:87:c5:b4:89:a7:ac:67:d9:
b4:93:ec:f3:4e:0b:1a:c7:0a:f8:94:ac:38:5b:4b:34:cf:0e:
23:28:04:80:db:ed:5e:81:ae:85:65:84:e6:1d:d5:60:d8:84:
53:15:70:19:4a:fa:a5:bc:98:81:4b:51:cf:e5:b9:60:80:97:
12:53:d7:91:c8:b7:58:5d:d0:54:ce:7e:c1:4c:21:6c:fe:88:
fc:ff:34:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:57 2026 by rpki-client