
$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
File: twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft (raw, json)
Hash identifier: UCpwdeHFQwWetDmI/ODxesoQokJGOjOR29jrtXmlr5Q=
Subject key identifier: ED:59:68:57:8B:BF:5E:68:17:99:BE:4D:C5:93:A7:F1:55:B3:AC:48
Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
Certificate issuer: /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Certificate serial: 0AC3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
Manifest number: 0A8A
Signing time: Tue 12 May 2026 19:38:45 +0000
Manifest this update: Tue 12 May 2026 19:38:44 +0000
Manifest next update: Tue 19 May 2026 19:38:44 +0000
Files and hashes: 1: twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl (hash: mQM98b9K0Ar0Xt4KPEMgaVL7v/AZ7ae2130wVHYfybg=)
2: C9E62876DD0A11EA97BF0347C4F9AE02.roa (hash: 8H0BV2UOGEWlzpdVFnm9AduIVjsTukqf5Aie6oiai8g=)
3: F8C86248AAF711EAB266AB46C4F9AE02.roa (hash: qimocfWgJO+7SVIx0Qj7RIltIvyJVQrbiJ35MnQnqvk=)
4: 7DE09496DDD911EA90D9B84CC4F9AE02.roa (hash: 2SRueJuk/oI2Z3RrQ/efGcxSLtCYpUo5HpcBPACZQGM=)
5: 4D3CA5D082D211EAB2F4F66AC4F9AE02.roa (hash: TH0pbEZTfFk/7QKlIYRFfHi6YWc6EnwN0PyoqfHcpyU=)
6: EA7554AC82D011EA8BCCCA64C4F9AE02.roa (hash: swz+w1wHJ+NqyAfABnU3GcK3MY2a0AE7eky2WFH3BSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl
rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:38:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2755 (0xac3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917576D, serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Validity
Not Before: May 12 19:38:44 2026 GMT
Not After : May 19 19:38:44 2026 GMT
Subject: CN=6a0381c5-b399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fb:6b:aa:e5:09:2a:09:4a:a7:b2:f6:0d:27:
88:e5:cb:3d:89:04:1c:ff:ee:10:29:7b:71:31:ad:
db:31:78:6b:f7:da:61:c9:d8:b7:dd:91:41:ba:7e:
2b:9f:b0:80:c3:f7:97:61:a8:6a:eb:8d:c7:4b:71:
14:79:c8:fa:87:99:07:62:3a:68:8c:c7:35:04:bb:
33:1a:12:08:2d:ae:43:9a:fc:72:ef:60:54:f3:87:
8f:ea:15:e8:0e:fd:32:96:11:bc:db:a2:56:ba:95:
e3:c5:4f:8b:b2:23:21:2c:ea:5d:c2:21:81:21:12:
49:45:b3:35:f8:d3:6c:c9:5e:1c:6b:c2:a3:df:7c:
d1:b9:af:a1:76:94:b7:38:31:33:81:1c:d1:dd:32:
0b:4e:6f:83:8b:24:36:45:aa:51:fd:da:aa:3b:f1:
05:4b:33:2f:09:74:c3:28:72:95:33:dd:dd:0a:d5:
ee:b2:2b:35:c9:3a:ef:38:3a:d8:09:cb:13:7f:af:
54:ab:7b:3d:49:aa:c0:43:02:61:93:05:79:c1:01:
59:d3:69:a6:33:6e:49:b2:6a:c7:e8:a4:bc:c1:f2:
f2:39:05:81:e7:4c:93:89:ba:50:e6:44:45:21:22:
ac:21:f2:22:ee:d7:3a:f6:b5:76:a3:ef:8d:18:d7:
c2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:59:68:57:8B:BF:5E:68:17:99:BE:4D:C5:93:A7:F1:55:B3:AC:48
X509v3 Authority Key Identifier:
keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:90:aa:06:70:fe:aa:fe:54:03:64:e7:0c:aa:f2:27:58:30:
80:40:b5:67:17:9f:70:a2:ee:fa:ee:0b:1b:1f:8e:3f:f2:b9:
fe:9b:a1:59:b3:67:64:65:60:d5:81:bd:81:3a:3d:0e:82:6e:
49:c8:70:03:c8:b9:17:90:77:b8:25:34:72:1c:1f:83:d9:5b:
37:a2:58:26:4c:00:67:7b:7a:86:2f:ce:23:91:f4:85:38:8a:
f3:c7:0d:4a:25:05:11:47:9d:2d:95:7b:6f:51:03:d5:89:99:
3a:87:d5:91:d1:e6:be:e6:5f:4a:93:d2:17:a8:6f:c8:42:cd:
7a:c0:45:59:e4:06:a7:3d:5b:22:87:50:d2:a0:89:83:00:f1:
65:ae:d0:67:a3:e7:3f:2b:b5:2e:bd:65:57:d3:dd:a0:66:8f:
bd:dc:89:81:c5:5f:61:be:c5:36:33:22:02:66:ee:9e:3a:66:
e0:1e:24:93:eb:6d:72:56:87:c4:ca:12:8e:88:ba:bb:51:56:
7d:df:76:33:98:3b:39:d6:2f:52:61:f1:da:e3:74:a4:a4:90:
ca:a0:9c:af:38:30:3d:dc:bf:7d:e7:87:4a:82:03:0d:2b:47:
80:f1:e2:b2:b4:66:79:b8:88:5f:5e:6b:da:5f:61:b6:da:01:
9c:51:5c:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU3NkQxMTAvBgNVBAUTKEI3MDMxOEQ3MUFBMEU4MDQzMjRFMDEzQzMwOTdGREJD
RDYwMTM0RDQwHhcNMjYwNTEyMTkzODQ0WhcNMjYwNTE5MTkzODQ0WjAYMRYwFAYD
VQQDEw02YTAzODFjNS1iMzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu/trquUJKglKp7L2DSeI5cs9iQQc/+4QKXtxMa3bMXhr99phydi33ZFBun4r
n7CAw/eXYahq643HS3EUecj6h5kHYjpojMc1BLszGhIILa5Dmvxy72BU84eP6hXo
Dv0ylhG826JWupXjxU+LsiMhLOpdwiGBIRJJRbM1+NNsyV4ca8Kj33zRua+hdpS3
ODEzgRzR3TILTm+DiyQ2RapR/dqqO/EFSzMvCXTDKHKVM93dCtXusis1yTrvODrY
CcsTf69Uq3s9SarAQwJhkwV5wQFZ02mmM25JsmrH6KS8wfLyOQWB50yTibpQ5kRF
ISKsIfIi7tc69rV2o++NGNfC/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO1ZaFeL
v15oF5m+TcWTp/FVs6xIMB8GA1UdIwQYMBaAFLcDGNcaoOgEMk4BPDCX/bzWATTU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8yRTc2N0UzMjgy
Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZBUXlUZ0U4TUpmOXZOWUJO
TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3R3TVkxeHFnNkFReVRnRThNSmY5dk5ZQk5OUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTc2RC8yRTc2N0UzMjgyQ0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZB
UXlUZ0U4TUpmOXZOWUJOTlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPpCqBnD+qv5UA2TnDKryJ1gwgEC1ZxefcKLu+u4LGx+OP/K5/puhWbNnZGVg
1YG9gTo9DoJuSchwA8i5F5B3uCU0chwfg9lbN6JYJkwAZ3t6hi/OI5H0hTiK88cN
SiUFEUedLZV7b1ED1YmZOofVkdHmvuZfSpPSF6hvyELNesBFWeQGpz1bIodQ0qCJ
gwDxZa7QZ6PnPyu1Lr1lV9PdoGaPvdyJgcVfYb7FNjMiAmbunjpm4B4kk+ttclaH
xMoSjoi6u1FWfd92M5g7OdYvUmHx2uN0pKSQyqCcrzgwPdy/feeHSoIDDStHgPHi
srRmebiIX15r2l9httoBnFFcZw==
-----END CERTIFICATE-----
Generated at Wed May 13 12:54:36 2026 by rpki-client