
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json)
Hash identifier: HJMSuAc1WkhR9UPBUN494EJTghjb55ibz1qGmwHP43Y=
Subject key identifier: 81:DB:79:59:7D:B1:71:22:D9:37:3E:C1:92:C6:EC:B7:58:CF:5E:DC
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial: 053E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
Manifest number: 0500
Signing time: Thu 23 Jul 2026 00:41:55 +0000
Manifest this update: Thu 23 Jul 2026 00:41:55 +0000
Manifest next update: Thu 30 Jul 2026 00:41:55 +0000
Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: F74811DA/+9JLa+Xxbj0Uebjs73eTHCcYX1oFow1lG4=)
2: 0FA47F24751811F18B7B702072A30FBC.roa (hash: pV3GPCRI6eTouBuUqNrjOnvugz77VcQii6lWuzsU7aE=)
3: A6E8B05401D611F1A42696D7366F56BC.roa (hash: YEAiHBQjv0Zqw7hAyBqvx7s0VzUV/cItMf0F3kX5g2g=)
4: 8000E572494F11F1BF737F10BE833773.roa (hash: RSiETjjKzvCQ0UxbntfjXpMp1b8caiQTMLYifGRmsgs=)
5: 98CF37B28F0E11F0880D4780C4F9AE02.roa (hash: uKQ3Os5h8Ciy1ALccS2eT5zdXu6OgoHV6FkwnLjZ7Y0=)
6: AFE4C282750E11F1AD641DF56EA30FBC.roa (hash: 1VaOurL2pMpKT7+o6fq7MiAiKhAra7u+Mj1RfzpWDXk=)
7: C3CDE52C01D611F1B315EDD8366F56BC.roa (hash: 3d/B1cImc/RFP7X2DoDqV9LtQ79OxGVpr8nJEv4LRf4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1342 (0x53e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Validity
Not Before: Jul 23 00:41:55 2026 GMT
Not After : Jul 30 00:41:55 2026 GMT
Subject: CN=6a616353-2fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:ea:e7:22:a0:34:d0:d8:d5:90:7c:a3:77:
80:bd:a1:e4:33:f1:f2:58:57:00:96:c1:cc:61:67:
5c:04:ca:2c:e0:64:21:2d:a1:f9:e7:4c:15:01:ac:
c5:f9:2d:26:d5:11:9e:c0:f5:d8:b3:a2:a7:81:c6:
5b:c4:50:85:03:5f:2b:e2:dc:30:6b:04:d0:40:52:
cb:b0:dc:34:27:3a:97:9a:13:11:3b:a1:0e:ab:be:
7a:0c:5e:13:5b:47:fe:0c:2f:de:0d:39:a4:9e:68:
b9:75:c7:87:70:b7:99:d5:65:b9:da:3b:fe:73:63:
f8:c8:01:60:24:df:38:32:a7:c3:59:a8:9f:75:96:
0e:72:51:9d:2c:2c:10:d4:3a:b1:31:5f:fa:ea:b5:
96:2c:2a:a6:71:25:2d:4a:f3:89:1a:64:c7:eb:14:
e2:c1:93:45:c1:22:9d:5b:ec:0d:ca:12:08:62:c9:
84:e2:f0:54:72:c3:36:14:db:dc:a1:8f:d5:24:cf:
2f:94:25:b5:04:de:18:31:94:47:5c:1d:8d:63:fd:
95:a1:9a:4d:b3:da:11:36:84:66:bb:51:63:31:ad:
93:90:1c:75:26:c9:10:b7:5c:e1:dc:47:68:0a:e7:
ff:60:03:e6:3e:30:9a:99:aa:16:c9:d2:ab:ff:a9:
29:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DB:79:59:7D:B1:71:22:D9:37:3E:C1:92:C6:EC:B7:58:CF:5E:DC
X509v3 Authority Key Identifier:
keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:4d:24:27:71:c0:da:da:40:7e:7f:ee:95:d6:aa:b2:e1:f6:
2d:a6:a8:78:40:2d:02:9a:6e:3a:05:b1:e6:f9:dd:27:1b:28:
27:47:33:a2:2e:f4:6a:9f:e8:db:1e:e2:20:6d:48:29:88:84:
a7:24:cc:27:bd:50:d6:54:7b:99:be:f1:57:f3:56:ed:36:18:
44:1d:fe:5e:80:24:b0:d5:23:74:68:8e:3e:56:32:39:1b:58:
e1:8d:ce:6e:3d:04:9c:08:b5:17:ec:d7:dd:9d:ed:97:6c:c5:
c3:a7:68:83:24:4f:d9:4c:f6:34:33:07:35:de:30:c9:b7:1e:
3e:e6:74:a9:53:3d:78:29:61:22:ed:57:20:f5:c6:45:a8:d0:
c9:3c:97:f8:ed:21:51:db:6e:1a:6e:a2:7a:85:fb:18:6a:57:
be:1e:4a:a1:80:ce:b3:4d:3b:7d:7d:07:c1:10:a5:69:82:9a:
0c:fe:50:dd:87:3d:e9:c3:61:81:dd:b3:64:39:5d:96:f7:f4:
5c:35:2d:43:f4:1b:a8:02:6e:96:74:ed:fb:21:30:0c:60:95:
7b:8d:2a:65:99:34:f9:62:d2:df:bb:59:f4:59:67:19:ce:54:
56:b6:be:fa:cc:3a:44:dc:b3:79:d5:81:35:2c:3c:61:3f:dc:
fd:b1:74:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:10 2026 by rpki-client