
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
File: Ty_T8AtY8TSpqOPn3ajY0grANSc.mft (raw, json)
Hash identifier: cagmLG/nvs9Pjof3/cKi87AcMbg8qU4LGDq6+M0vyfc=
Subject key identifier: BD:65:45:27:58:D0:C0:1C:3A:B2:2E:72:58:E6:E0:10:0A:EC:0C:8A
Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
Certificate issuer: /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Certificate serial: 3632
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
Manifest number: 35C5
Signing time: Thu 24 Sep 2026 14:17:00 +0000
Manifest this update: Thu 24 Sep 2026 14:17:00 +0000
Manifest next update: Thu 01 Oct 2026 14:17:00 +0000
Files and hashes: 1: Ty_T8AtY8TSpqOPn3ajY0grANSc.crl (hash: 8ALQenLGFzboJDbgtn0OlPhTiw0d9iYjW9/0S/vig2E=)
2: 3869DF8A1C6011EEAF58FB61C4F9AE02.roa (hash: DmeP00Tglg1B2vHEmL9YYBPAmu6yzXlrGlk/VI9+C3Y=)
3: B5885EF852D411EC8C8CE26CC4F9AE02.roa (hash: K0D7rg55G2Vxgg4st1LsCOaUPeB0t55XfIkLwQZOLfU=)
4: 5D81654A561E11E7A4FFF329C4F9AE02.roa (hash: /gJ9ZwtzzOTKqCZBrZuocfhT4XIIICVgFwfqJxZhD14=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:16:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13874 (0x3632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Validity
Not Before: Sep 24 14:17:00 2026 GMT
Not After : Oct 1 14:17:00 2026 GMT
Subject: CN=6ab530dc-d4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:ad:af:54:ed:34:55:14:ce:77:a7:6d:c6:
85:5e:9a:2e:c9:dc:c4:12:20:9a:84:1a:f5:57:a1:
6f:2b:a2:73:70:84:b0:4b:3f:a6:82:f0:82:dc:34:
7f:d2:96:bf:1f:43:4e:bc:a8:04:bd:bd:66:6b:90:
d5:d4:c8:ec:87:ef:47:57:e7:42:5d:8e:c7:8f:c6:
98:e7:a5:bf:60:53:0c:57:8c:65:4c:8f:e0:77:9b:
02:a3:83:16:82:49:84:db:4e:67:84:64:17:99:70:
27:8b:ef:5a:47:b0:48:ce:25:d4:54:2a:98:37:dc:
51:c6:81:a6:b2:da:4e:19:5e:8e:a2:5c:c5:5e:a0:
af:7b:a5:2e:90:73:78:ec:f4:eb:1e:19:aa:85:3f:
c4:9c:c1:98:ec:cf:0d:28:2a:3c:03:80:8b:84:aa:
2a:9c:b9:30:42:43:8e:ea:de:45:70:1c:07:f6:96:
7b:7e:7f:f3:5c:3e:46:33:b1:e5:4d:a0:1e:71:f9:
45:02:a5:cf:4e:e0:ee:77:df:97:44:21:44:2e:98:
bc:16:c0:05:08:35:22:b6:e5:f8:b5:de:e5:86:7e:
3d:68:27:26:24:83:9e:d9:7f:ed:8c:d8:e7:24:41:
84:47:6b:b8:5f:95:c3:8d:fe:13:56:14:ce:58:f9:
60:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:65:45:27:58:D0:C0:1C:3A:B2:2E:72:58:E6:E0:10:0A:EC:0C:8A
X509v3 Authority Key Identifier:
keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:3d:1e:96:88:80:3f:0d:4c:35:20:f3:12:06:81:30:be:42:
dc:10:be:47:82:d2:00:cf:83:35:9a:8d:eb:e5:da:9d:e3:50:
e7:e3:5a:04:74:15:e6:08:7e:9e:91:f5:33:6d:a3:94:54:fa:
25:26:00:5a:01:c4:06:29:1c:ab:a3:72:3a:04:e6:3b:d0:49:
8b:ea:69:84:22:3d:52:50:91:0e:0e:4c:f8:d0:71:dc:36:89:
ef:f7:41:2f:fe:f3:03:27:00:07:95:c2:29:36:fb:6d:a8:da:
fa:ac:49:db:97:fa:b8:41:8f:be:8c:7f:d4:73:38:d3:02:83:
09:94:25:fb:40:36:18:35:51:a6:ed:ea:36:ca:e3:71:f9:78:
1f:f6:d2:47:90:c5:45:8a:54:b2:93:a3:dc:52:9c:5c:56:89:
6c:bf:3d:f3:65:c8:f4:86:f0:ad:2f:05:30:e9:90:49:d7:18:
a6:b7:9a:e8:94:54:b9:67:ca:1c:c3:52:08:ff:4f:94:02:11:
13:1c:12:14:06:d8:2e:1f:4b:85:e8:c7:36:51:b6:09:5b:54:
6c:94:0f:ea:e1:1b:78:0a:69:0f:4e:03:bc:f6:12:2c:1d:5b:
fd:df:2a:10:f3:33:ba:90:5c:84:35:f9:31:dc:1e:63:f2:c3:
b8:44:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:35:21 2026 by rpki-client