
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
File: ByXySRgBUFGFyQaaQBNjXDi1a3I.mft (raw, json)
Hash identifier: 8wHtBNNd8KI9f5j3tSZh76vFYN6mvA2x226AqfANSKc=
Subject key identifier: B9:78:D0:1F:7E:29:24:5B:D5:89:E2:05:A4:94:B5:DD:77:D9:C5:43
Authority key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
Certificate issuer: /CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Certificate serial: 0819
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
Manifest number: 172B
Signing time: Fri 22 May 2026 18:00:27 +0000
Manifest this update: Fri 22 May 2026 18:00:27 +0000
Manifest next update: Fri 29 May 2026 18:00:27 +0000
Files and hashes: 1: ByXySRgBUFGFyQaaQBNjXDi1a3I.crl (hash: npRKn7MrHDondk/t48iSk6AhEob2zkBCOJUdCHd/plc=)
2: 05144A26BE3911F09CB32457C4F9AE02.roa (hash: BJG7KKwhl8HJLFMiXdJ/ug8z26cqh8GFLSWPDyLzMV4=)
3: CCA402F8BE3811F0B9AAC956C4F9AE02.roa (hash: poKacpxWLem7MXU2cZ8LXl1fQdysy14/f02fKfzvHFI=)
4: 970E5576BE3811F0962A6356C4F9AE02.roa (hash: nisM7JGbV5MRmDC8uhu0E+MPwT1IFHJ1Q6JtOmv7Vk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 May 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2073 (0x819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D808, serialNumber=0725F2491801505185C9069A4013635C38B56B72
Validity
Not Before: May 22 18:00:27 2026 GMT
Not After : May 29 18:00:27 2026 GMT
Subject: CN=6a1099bb-bbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:12:ff:85:3d:83:13:8f:ec:41:b2:95:9d:22:
51:15:24:30:87:41:e1:8b:75:37:e6:f9:7f:db:29:
c5:85:d3:92:17:c3:1b:72:39:ae:03:80:8a:91:c0:
1d:ef:37:ef:07:72:e8:3c:14:a0:7c:f5:c6:c6:1d:
09:58:37:8d:43:9d:01:3d:04:4c:e3:e9:86:b1:97:
50:a0:14:66:6a:05:68:35:50:dc:9c:7f:22:09:3c:
38:1e:47:bc:35:77:83:90:e0:3d:f9:f5:fc:8f:b4:
6b:56:42:dd:9d:75:86:80:11:a5:47:45:01:02:84:
c5:93:14:65:06:5b:20:45:ca:10:e8:6c:23:70:1e:
74:c8:32:01:ea:dc:4d:d5:c1:a8:90:ec:68:80:b8:
22:69:c5:f0:d7:f6:33:bd:0d:68:5c:b1:45:0e:ad:
0b:6d:5b:22:58:c4:b0:09:7f:35:52:f3:3a:08:f4:
d8:28:2a:fc:b4:b4:9b:2d:7f:92:cf:f7:4d:ca:00:
ae:91:61:16:f4:83:17:1b:6b:16:90:73:48:f6:1d:
c1:16:cd:78:c1:c8:85:82:65:61:19:c2:97:69:40:
42:72:d7:fa:22:58:e3:ec:a0:0d:a6:3e:62:74:93:
c5:8e:d7:2d:b6:80:78:64:54:00:8c:df:df:a2:7c:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:78:D0:1F:7E:29:24:5B:D5:89:E2:05:A4:94:B5:DD:77:D9:C5:43
X509v3 Authority Key Identifier:
keyid:07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:b3:dc:77:6c:21:f2:ef:ab:08:0b:02:a9:86:ec:83:ce:62:
b2:da:a5:08:5a:7f:43:d3:8a:c4:3f:0d:44:54:d9:f7:a2:fb:
23:81:c4:9f:ca:f7:d2:6a:4c:1a:ab:88:12:0b:4d:80:5b:21:
ce:c3:d7:f0:10:73:99:81:96:a3:ba:cb:58:d2:e3:27:50:7d:
e3:95:7b:c0:a0:7a:4a:bb:28:be:dc:e7:6c:91:00:98:8c:b3:
d5:08:fc:ee:fa:06:42:ec:c0:c0:1c:7e:59:83:5e:34:8b:57:
83:97:bc:83:42:1b:b4:ae:97:80:36:ff:37:12:c6:33:ec:35:
8a:b2:b9:38:e6:a6:07:c8:63:0c:ef:20:f9:19:18:2e:b5:4d:
e5:52:d9:ea:b2:97:00:be:dc:99:18:54:3e:11:48:d6:8d:d9:
29:5c:e1:b8:7f:13:2c:b6:27:74:9b:50:0e:17:31:2c:fc:7a:
7c:26:30:40:5c:35:6a:04:ba:7f:78:54:63:91:30:6f:e3:b6:
2e:09:2f:a1:6a:1a:66:74:6b:8e:2a:57:19:6d:d4:0d:e6:7e:
77:7f:85:79:e5:50:b7:34:73:f6:f2:b5:db:c9:8e:8d:15:48:
6e:c5:33:3c:65:15:5d:db:c9:01:68:92:21:fc:f6:d8:ef:98:
8a:00:a4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 11:03:18 2026 by rpki-client