
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
File: -ty5VaOsFGWZfQjySL-GxDNE-3g.mft (raw, json)
Hash identifier: PrbVE3WHupZHF5yFt1+WCi11U5Aa1dLUTl808XxJWjk=
Subject key identifier: 61:BA:18:8B:87:93:4A:95:A5:B3:D3:23:1E:DF:45:29:AF:7C:E7:5B
Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
Certificate issuer: /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78
Certificate serial: 065B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
Manifest number: 0654
Signing time: Tue 24 Mar 2026 22:21:54 +0000
Manifest this update: Tue 24 Mar 2026 22:21:53 +0000
Manifest next update: Tue 31 Mar 2026 22:21:53 +0000
Files and hashes: 1: -ty5VaOsFGWZfQjySL-GxDNE-3g.crl (hash: RGj8DRZz3/wz5BUyb5K7ymxFRqMGabbZvRdqCvXy43c=)
2: 4D470362C55811EB981FA987C4F9AE02.roa (hash: jONR2iUJdd8sTfAf2GKMQLcf6yBJF3ccZJWFs5abXDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl
rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:21:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1627 (0x65b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148F32, serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78
Validity
Not Before: Mar 24 22:21:53 2026 GMT
Not After : Mar 31 22:21:53 2026 GMT
Subject: CN=69c30e82-d938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:60:55:f3:d2:5d:eb:be:c0:47:e0:70:89:
67:d3:1b:b1:8c:77:fd:65:e0:53:1c:04:f4:88:81:
99:d5:32:c0:71:60:8b:ad:45:2b:dc:42:9d:70:e4:
5b:73:18:fd:74:cf:25:7f:de:81:c3:33:32:ac:f6:
75:d4:dd:df:28:e7:32:bb:8d:bf:b6:b9:fd:53:6d:
9c:18:1d:6d:b7:28:95:ea:3c:52:bb:a1:cb:a4:3a:
1b:ce:4f:49:63:93:1b:fb:e3:35:2a:38:99:a8:56:
a0:e7:55:79:83:70:95:38:4b:15:bf:08:96:9f:07:
eb:08:d8:ec:cb:ed:bf:af:6d:a2:ce:7e:ba:f3:71:
b8:1e:c8:87:d6:a5:08:94:d6:9f:51:8b:4f:4b:4e:
0e:50:07:1f:0d:35:73:3f:7d:b2:4b:0f:6d:40:36:
73:5a:5f:77:ba:52:54:cc:65:ed:6a:f8:7d:09:77:
1a:3d:8c:07:2b:68:6f:14:97:c7:8c:7e:b1:5e:a5:
62:06:c0:21:5e:f2:85:ab:44:87:2f:53:fb:1f:07:
4f:10:69:d1:12:2f:1b:04:7f:ab:c2:8b:83:5c:ad:
16:07:90:e1:2f:f0:12:63:56:9f:23:14:f5:94:89:
3e:66:89:8b:24:53:e2:fd:df:d7:0c:02:31:50:66:
39:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BA:18:8B:87:93:4A:95:A5:B3:D3:23:1E:DF:45:29:AF:7C:E7:5B
X509v3 Authority Key Identifier:
keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6c:ed:07:b3:89:f4:dc:25:56:be:f1:0d:32:f5:3c:e3:e6:
00:62:9d:f7:63:fe:05:a1:49:68:77:1f:bd:a3:3b:c0:e7:f7:
a2:9e:ca:e4:b9:3a:01:e2:cd:77:2c:9f:58:ba:c7:df:47:2a:
1d:64:16:56:db:c3:e8:42:8f:b0:13:79:ea:31:b9:7a:9d:07:
96:ff:3e:0c:14:8d:28:82:c9:8f:94:b2:72:64:9d:8c:d7:48:
ba:12:1d:6f:89:7c:d8:ed:97:d9:af:6b:10:9d:94:3d:50:52:
f2:9d:36:80:a6:87:30:91:75:c5:36:3b:ba:dd:9a:cf:e6:5e:
46:8c:99:12:33:4b:09:ad:96:2d:77:53:5f:f1:6e:18:8f:de:
6b:c3:cd:bc:78:aa:fc:1f:cd:e1:5a:e1:59:a7:b0:60:b6:4c:
e1:44:7c:8c:22:4f:7a:39:f5:19:d5:67:b3:ec:15:0e:48:b9:
da:a1:f4:4c:0c:a1:4b:49:7d:5b:7e:97:7c:3e:99:e2:a0:bf:
43:e5:1e:4b:be:85:87:36:59:ba:a0:ac:b4:63:3e:91:1f:51:
71:2f:1d:95:34:a8:84:da:97:5d:96:1e:8a:2a:f6:00:2a:dc:
e5:68:fc:d1:73:00:95:16:ef:49:d9:f2:9e:d4:a5:db:1f:4a:
2f:4f:a3:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhGMzIxMTAvBgNVBAUTKEZBRENCOTU1QTNBQzE0NjU5OTdEMDhGMjQ4QkY4NkM0
MzM0NEZCNzgwHhcNMjYwMzI0MjIyMTUzWhcNMjYwMzMxMjIyMTUzWjAYMRYwFAYD
VQQDEw02OWMzMGU4Mi1kOTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsVxgVfPSXeu+wEfgcIln0xuxjHf9ZeBTHAT0iIGZ1TLAcWCLrUUr3EKdcORb
cxj9dM8lf96BwzMyrPZ11N3fKOcyu42/trn9U22cGB1ttyiV6jxSu6HLpDobzk9J
Y5Mb++M1KjiZqFag51V5g3CVOEsVvwiWnwfrCNjsy+2/r22izn6683G4HsiH1qUI
lNafUYtPS04OUAcfDTVzP32ySw9tQDZzWl93ulJUzGXtavh9CXcaPYwHK2hvFJfH
jH6xXqViBsAhXvKFq0SHL1P7HwdPEGnREi8bBH+rwouDXK0WB5DhL/ASY1afIxT1
lIk+ZomLJFPi/d/XDAIxUGY52QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGG6GIuH
k0qVpbPTIx7fRSmvfOdbMB8GA1UdIwQYMBaAFPrcuVWjrBRlmX0I8ki/hsQzRPt4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYzMi9FMDY0NzVDRUM1
NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZHV1pmUWp5U0wtR3hETkUt
M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy10eTVWYU9zRkdXWmZRanlTTC1HeERORS0zZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEYzMi9FMDY0NzVDRUM1NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZH
V1pmUWp5U0wtR3hETkUtM2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqmztB7OJ9NwlVr7xDTL1POPmAGKd92P+BaFJaHcfvaM7wOf3op7K5Lk6AeLN
dyyfWLrH30cqHWQWVtvD6EKPsBN56jG5ep0Hlv8+DBSNKILJj5SycmSdjNdIuhId
b4l82O2X2a9rEJ2UPVBS8p02gKaHMJF1xTY7ut2az+ZeRoyZEjNLCa2WLXdTX/Fu
GI/ea8PNvHiq/B/N4VrhWaewYLZM4UR8jCJPejn1GdVns+wVDki52qH0TAyhS0l9
W36XfD6Z4qC/Q+UeS76FhzZZuqCstGM+kR9RcS8dlTSohNqXXZYeiir2ACrc5Wj8
0XMAlRbvSdnyntSl2x9KL0+jmw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:09:48 2026 by rpki-client