
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json)
Hash identifier: YJ3v8loMLZVv/+klTbTzjMS13PUP0jU1H5kAsxjzvdE=
Subject key identifier: F9:CF:AC:36:1C:93:7A:82:80:14:38:49:FD:62:F6:CE:52:ED:95:EA
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial: 056C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
Manifest number: 0529
Signing time: Tue 22 Sep 2026 23:24:33 +0000
Manifest this update: Tue 22 Sep 2026 23:24:33 +0000
Manifest next update: Tue 29 Sep 2026 23:24:33 +0000
Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: PP66InI+sb4mz1MOCArVsUlosF9Ny1b8C3Uo5gkBTfw=)
2: 84D37FC6AFFF11F18E4DACF96311F970.roa (hash: crArvlb+Ze86ihALqTtqfNZ24fabeO5GjETbQL/fyLw=)
3: 2F793F64AC1911F1899FFC913311F970.roa (hash: TOGdUCSf1FUktkxbLQfTgHxXSfyAA99mDaspuQGpnTQ=)
4: 0FA47F24751811F18B7B702072A30FBC.roa (hash: pV3GPCRI6eTouBuUqNrjOnvugz77VcQii6lWuzsU7aE=)
5: A6E8B05401D611F1A42696D7366F56BC.roa (hash: kH/loibssTw1SMlq4v4kn0TXgp71DRNjeiASfXICBKs=)
6: 98CF37B28F0E11F0880D4780C4F9AE02.roa (hash: uKQ3Os5h8Ciy1ALccS2eT5zdXu6OgoHV6FkwnLjZ7Y0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1388 (0x56c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Validity
Not Before: Sep 22 23:24:33 2026 GMT
Not After : Sep 29 23:24:33 2026 GMT
Subject: CN=6ab30e31-d73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:b7:58:67:66:68:7a:1d:ac:4b:6b:88:84:
31:1c:02:b4:1c:56:f3:5b:c1:54:c4:ca:f8:c8:9c:
c2:3d:a8:2a:f9:47:63:59:3c:9c:49:2e:d0:75:d1:
28:b0:ab:f7:60:97:c0:fa:ef:53:79:51:32:24:6d:
e7:19:90:12:07:34:05:47:12:88:3e:40:fe:eb:04:
7e:d2:cd:cb:19:e6:e0:32:5f:25:75:1a:07:f4:c6:
1a:59:9b:2a:89:3b:72:04:12:7e:fd:5f:8f:cf:e7:
ad:82:6b:b0:8a:06:73:01:55:b6:a2:ce:f8:8b:ba:
67:a4:ce:a4:24:0a:5a:a5:3a:d6:10:e9:7f:da:90:
e4:fa:26:65:07:58:d2:78:94:6e:ae:a4:ba:35:43:
96:3d:5f:41:75:2e:54:31:50:89:ee:7d:d2:9f:93:
3e:cd:5a:e0:3c:4f:9c:9c:80:13:4d:49:6d:c3:17:
b5:f3:50:65:f2:f3:6a:47:1d:a1:c2:ef:cc:7b:f5:
c7:7c:d2:85:f1:55:8e:04:c4:4e:e9:29:db:ca:b6:
70:0d:09:df:c8:71:47:bd:77:c3:a3:d6:5a:b1:21:
c9:96:27:c1:5c:ac:33:4e:a3:70:7b:45:34:16:4c:
bc:49:df:77:f1:e9:16:f1:6e:03:9e:31:a2:9d:8f:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CF:AC:36:1C:93:7A:82:80:14:38:49:FD:62:F6:CE:52:ED:95:EA
X509v3 Authority Key Identifier:
keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:df:79:93:9a:af:91:32:38:27:d3:87:a3:be:f5:78:95:ce:
1e:c3:65:55:08:e7:a2:63:b3:f7:4a:bb:34:93:3c:8d:aa:95:
91:a2:0f:15:46:27:44:e4:b7:96:46:3a:f5:07:f6:45:ae:a3:
a2:de:db:48:06:08:3e:72:b9:a8:b1:23:bf:11:25:cd:5f:9d:
ec:1d:54:85:cc:62:55:8c:77:3c:f6:63:87:ae:eb:70:73:31:
dd:40:aa:3d:d0:59:46:e9:3d:b6:43:bc:d3:be:e0:61:29:f2:
ae:11:79:e6:17:cd:de:bf:2a:ff:0d:bd:35:23:6d:b4:e5:47:
95:ae:22:37:fb:b9:2f:c8:0b:70:17:f7:0c:4b:3b:d0:36:d9:
a6:e6:20:50:f1:61:eb:97:89:47:e9:9e:bb:1a:22:15:a4:90:
e6:fb:3e:c4:91:8f:48:9a:0f:6a:fd:1d:3c:6d:05:50:59:96:
14:96:02:9e:c6:a4:eb:81:12:ec:d6:71:8e:72:77:b6:ba:08:
18:90:56:af:51:23:ea:35:ec:23:ca:37:a0:64:09:8a:00:49:
a5:6a:6f:66:e5:bb:9b:0f:43:d0:48:b2:4b:f8:df:eb:c1:5c:
92:f8:45:ea:29:b8:4c:70:b7:6d:57:7e:d4:63:e3:47:14:0f:
b4:d1:f0:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1
RTJDNTEzM0UwHhcNMjYwOTIyMjMyNDMzWhcNMjYwOTI5MjMyNDMzWjAYMRYwFAYD
VQQDEw02YWIzMGUzMS1kNzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAunK3WGdmaHodrEtriIQxHAK0HFbzW8FUxMr4yJzCPagq+UdjWTycSS7QddEo
sKv3YJfA+u9TeVEyJG3nGZASBzQFRxKIPkD+6wR+0s3LGebgMl8ldRoH9MYaWZsq
iTtyBBJ+/V+Pz+etgmuwigZzAVW2os74i7pnpM6kJApapTrWEOl/2pDk+iZlB1jS
eJRurqS6NUOWPV9BdS5UMVCJ7n3Sn5M+zVrgPE+cnIATTUltwxe181Bl8vNqRx2h
wu/Me/XHfNKF8VWOBMRO6SnbyrZwDQnfyHFHvXfDo9ZasSHJlifBXKwzTqNwe0U0
Fky8Sd938ekW8W4DnjGinY8gIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPnPrDYc
k3qCgBQ4Sf1i9s5S7ZXqMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw
MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP
c2dWcENkYkdGSEZlTEZFejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbt95k5qvkTI4J9OHo771eJXOHsNlVQjnomOz90q7NJM8jaqVkaIPFUYnROS3
lkY69Qf2Ra6jot7bSAYIPnK5qLEjvxElzV+d7B1UhcxiVYx3PPZjh67rcHMx3UCq
PdBZRuk9tkO8077gYSnyrhF55hfN3r8q/w29NSNttOVHla4iN/u5L8gLcBf3DEs7
0DbZpuYgUPFh65eJR+meuxoiFaSQ5vs+xJGPSJoPav0dPG0FUFmWFJYCnsak64ES
7NZxjnJ3troIGJBWr1Ej6jXsI8o3oGQJigBJpWpvZuW7mw9D0EiyS/jf68FckvhF
6im4THC3bVd+1GPjRxQPtNHwxA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:20:20 2026 by rpki-client