
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft
File: byPyfwkL70UxgCBy4drPIQ2dQjw.mft (raw, json)
Hash identifier: FsZe7bWbjEYlfW+ZQqW/YAYMcRT8BCgF9Cc/RAF8mfM=
Subject key identifier: 94:25:2B:BA:99:51:83:B1:95:DD:C2:2D:E0:16:C7:6E:57:87:4C:09
Authority key identifier: 6F:23:F2:7F:09:0B:EF:45:31:80:20:72:E1:DA:CF:21:0D:9D:42:3C
Certificate issuer: /CN=A91AEB80/serialNumber=6F23F27F090BEF4531802072E1DACF210D9D423C
Certificate serial: 04BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft
Manifest number: 048B
Signing time: Sat 14 Mar 2026 23:32:04 +0000
Manifest this update: Sat 14 Mar 2026 23:32:03 +0000
Manifest next update: Sat 21 Mar 2026 23:32:03 +0000
Files and hashes: 1: byPyfwkL70UxgCBy4drPIQ2dQjw.crl (hash: +KKKy69SruO4Yo2wKVTgzNAyrKxUBoANv7pfxt2JHPY=)
2: EDE820B6A26711ECAFB48B53C4F9AE02.roa (hash: WYBCVEow0EGPklBf726NCkW5Rw768+uwmWrbsMCcmoA=)
3: 6759C60223C311ED9CF26A56C4F9AE02.roa (hash: aR3bjzpkDnEdThgQWD3OGEKxjKyT+bYAYu7gSfFDnMM=)
4: 6D7FBCBE129111ED81E82D3DC4F9AE02.roa (hash: p8iD8cfenU/3pDjfOhpGVIznHLU9bOEeNzIUjUfKGsw=)
5: 6637CBD423C311ED9CF26A56C4F9AE02.roa (hash: RYuGQRq/FbuSL/tGVPPk29bnF9tr3D+V3UoeMu9qj84=)
6: EE8E0F3AA26711ECAFB48B53C4F9AE02.roa (hash: eaV/UGrF9aFYovMPgzh43fqlwfXnc/bh68H1+PCm0Fo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.crl
rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 23:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1210 (0x4ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEB80, serialNumber=6F23F27F090BEF4531802072E1DACF210D9D423C
Validity
Not Before: Mar 14 23:32:03 2026 GMT
Not After : Mar 21 23:32:03 2026 GMT
Subject: CN=69b5eff3-4aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:28:37:c9:3a:d2:36:18:77:51:e6:48:78:
80:e6:c5:89:3f:6d:e6:92:ae:ba:0f:ac:e2:3e:95:
5a:03:1a:dd:cc:af:ef:16:c8:fa:6c:36:1f:11:2c:
6b:7f:c1:62:cf:33:f4:2b:ca:38:6d:85:b2:2b:78:
6e:00:5f:ac:e7:2a:3e:64:58:84:f4:08:ed:d8:4b:
b8:9e:0a:1c:97:d8:bc:f5:42:37:4e:07:4b:98:a5:
b1:5d:f2:23:f6:2f:96:3b:39:c4:b3:55:23:d3:da:
69:d9:3e:92:3a:0f:61:c3:3d:15:73:4e:ee:e3:8a:
51:ec:5d:6a:32:47:92:76:d4:35:77:1c:0b:0c:56:
49:5f:dc:29:6e:ad:1c:31:67:50:03:8f:a0:a4:b3:
b2:3e:f0:ef:f9:eb:93:ef:7d:25:27:c9:02:84:29:
93:ba:d6:aa:42:d0:cf:9f:3d:8b:4e:21:65:f9:98:
cd:b7:9f:31:eb:f4:8a:99:1b:da:8e:eb:c0:32:2d:
6b:44:8d:5b:ee:c5:00:52:61:b3:d4:11:89:64:37:
3e:48:b5:71:88:e3:ff:87:eb:5e:d9:d3:71:fb:16:
cc:99:da:13:fe:b0:87:bc:f0:a2:a6:28:25:b7:ac:
9d:d0:10:7b:7b:e3:ca:fe:fd:59:db:cf:d9:25:ff:
e1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:25:2B:BA:99:51:83:B1:95:DD:C2:2D:E0:16:C7:6E:57:87:4C:09
X509v3 Authority Key Identifier:
keyid:6F:23:F2:7F:09:0B:EF:45:31:80:20:72:E1:DA:CF:21:0D:9D:42:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e6:0e:f6:74:c8:52:87:b1:68:d8:75:2f:37:22:46:14:2c:
7f:49:80:61:34:9f:89:52:5d:93:68:8d:8f:0a:34:d4:c5:2f:
06:a8:c6:62:3a:1a:fd:c4:3b:a9:ce:41:26:ae:37:7b:c7:cc:
bd:40:7d:6d:1a:2a:13:52:9b:97:b5:44:fd:68:d5:d1:a6:a1:
96:8d:a7:69:b2:91:80:e1:c4:fa:8a:18:87:7b:13:72:4d:84:
1a:c6:d5:f3:6a:5a:ef:87:3e:69:00:19:9e:44:32:38:c9:a5:
3c:74:d0:42:35:3f:7e:78:3a:6c:8a:cf:2f:d4:80:2f:c7:38:
f2:3c:17:1d:60:f5:96:84:93:8b:20:be:d3:37:b4:c2:5f:38:
55:d7:78:5e:66:34:6f:c8:0f:dc:ad:53:6f:5f:23:12:b5:9f:
0c:8c:46:26:94:71:32:cb:90:df:5d:c6:94:7c:c6:db:1a:9c:
8c:3f:73:30:da:c4:7f:c9:df:8f:5d:8a:fa:b1:22:69:25:c6:
e7:ed:a1:a7:7b:92:2b:72:8d:69:d1:43:dd:5a:e9:26:9f:21:
f8:2d:e9:42:2a:b1:da:91:5e:42:28:9f:e9:5a:fa:52:56:58:
30:db:02:65:85:61:a5:af:43:70:2a:e5:b3:9d:92:99:22:1f:
a4:34:dd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 17:35:34 2026 by rpki-client