
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
File: tsy15DHkUBkVDE83IfT4Cm8u19s.mft (raw, json)
Hash identifier: xzQEECV6L6Etq4l2j1J43L6rDYEPqx+tpcUyx1hogN4=
Subject key identifier: 08:62:10:15:80:A4:DA:28:FA:0D:DC:57:03:DD:60:CC:74:DE:CF:84
Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
Certificate issuer: /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Certificate serial: 085F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
Manifest number: 0834
Signing time: Sat 14 Nov 2026 21:03:21 +0000
Manifest this update: Sat 14 Nov 2026 21:03:21 +0000
Manifest next update: Sat 21 Nov 2026 21:03:21 +0000
Files and hashes: 1: tsy15DHkUBkVDE83IfT4Cm8u19s.crl (hash: 7+pe68Hi+UREJFTIBX1bDM2ity9+L7kLj8vXxjvSdBw=)
2: 2574266EAA4911F09A71D135C4F9AE02.roa (hash: Yq5oiH0EmhCavwCaD+J0apl3DbYBY7zFMqkNNlPV3Kc=)
3: 9C42D762163D11F19AE99B533D3D8C67.roa (hash: bXkxRodSVPRMA9XhTrb2GxuFt/+D/R2TC7v8l62JmaQ=)
4: 48EFF31A621B11EF8FB5117AC4F9AE02.roa (hash: 67g+qKVwsfhFWOuOMEWITQ1nmAIPrEarQJhLRzQm0IY=)
5: C098EF8E499811EFBB8C701EC4F9AE02.roa (hash: uB385efdqTb3/LugdWT8rNVy3FgK+9CSA2XsUkIjqtY=)
6: BC04E5745E4E11F082F8D529C4F9AE02.roa (hash: +n6sT0DNVEtTay2c7eDEYpMLVSmyIfomBjZvDH6GPyg=)
7: E181BAA059DD11EF9C39750CC4F9AE02.roa (hash: wNwawcsHbM0YHaF0zdZbSvwLiLwGJzedMyT2pC2bOpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 21:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2143 (0x85f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186513, serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Validity
Not Before: Nov 14 21:03:21 2026 GMT
Not After : Nov 21 21:03:21 2026 GMT
Subject: CN=6af8cc99-131a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5e:4e:f1:36:16:ea:5d:98:a0:d3:05:4d:76:
84:97:fd:bd:d6:de:9a:34:1c:6a:83:a6:3a:81:09:
cb:52:c4:79:69:33:ee:60:fa:4a:08:ee:7b:b6:95:
9f:bc:e5:b2:75:27:8e:14:64:e5:50:d0:46:a1:79:
f6:83:8e:f5:5f:03:6d:87:db:2c:7f:57:b5:5f:88:
4a:8c:47:df:27:2c:ac:7f:92:79:09:37:29:cb:d7:
e5:7a:5b:58:79:36:85:84:da:be:61:a8:cc:08:5f:
12:c9:08:ea:22:5e:a2:4c:f0:cf:20:e8:6a:c3:e2:
4f:a7:1a:80:3f:ad:c3:c9:66:27:c1:1c:17:4e:61:
c8:f5:f7:9f:6e:0c:22:31:d6:6a:28:68:e9:80:42:
51:25:23:f0:fa:4d:e9:a1:b9:98:69:98:8b:38:84:
f8:5b:33:9a:d9:df:9c:8b:7f:3c:8f:bd:27:7f:15:
4a:02:cb:98:d2:9f:f8:06:00:8b:95:b9:9d:76:4e:
66:4a:3c:1b:f1:32:f2:2d:a5:6f:24:db:0e:e6:c2:
f4:94:e3:5b:99:af:5b:09:d4:6a:63:37:d9:69:5f:
98:1d:b5:04:54:82:af:35:08:32:bf:2a:de:b5:15:
b7:15:67:0e:dc:27:43:9a:f8:29:a6:9f:98:1d:7a:
ae:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:62:10:15:80:A4:DA:28:FA:0D:DC:57:03:DD:60:CC:74:DE:CF:84
X509v3 Authority Key Identifier:
keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:44:3f:86:2e:04:cc:b3:7e:4a:a8:ff:eb:ac:77:29:de:e7:
99:37:98:b4:0b:f8:9a:17:99:10:cd:52:b6:d0:00:fc:5e:3a:
17:83:b8:97:d2:3c:e3:a0:3d:84:f7:20:69:f2:c3:b4:27:c3:
b9:23:01:18:06:ac:68:6e:80:db:dd:a0:a2:f6:ec:c1:22:2b:
0f:12:cc:52:b4:8b:01:e2:b3:c5:66:11:ae:55:5a:bf:f6:66:
71:6f:01:36:51:28:5b:b6:74:fe:85:08:33:f0:68:4c:34:77:
cd:54:e4:7c:75:93:78:e0:ed:38:a8:c5:bc:ca:97:03:5b:79:
f0:21:b1:23:d4:bb:32:c2:f2:9d:04:a3:42:30:06:85:54:91:
a2:c1:60:6a:47:1a:0b:d3:a4:83:f7:91:31:b5:f7:e9:f1:41:
7e:fd:3a:c9:52:4a:46:03:87:57:b0:18:6a:63:97:60:50:1d:
6e:3a:28:65:4e:89:7a:f6:39:d8:60:df:4d:95:8b:f9:0f:18:
59:60:2d:9a:2d:84:a3:a9:c5:5b:2c:81:69:aa:01:40:8f:d3:
38:a3:f2:ca:28:6e:e7:53:5d:79:d5:82:37:01:6c:04:af:09:
94:4c:72:31:86:f5:5c:47:db:52:d7:cd:b2:48:3f:ad:2c:7d:
1c:ba:3d:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY1MTMxMTAvBgNVBAUTKEI2Q0NCNUU0MzFFNDUwMTkxNTBDNEYzNzIxRjRGODBB
NkYyRUQ3REIwHhcNMjYxMTE0MjEwMzIxWhcNMjYxMTIxMjEwMzIxWjAYMRYwFAYD
VQQDEw02YWY4Y2M5OS0xMzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4l5O8TYW6l2YoNMFTXaEl/291t6aNBxqg6Y6gQnLUsR5aTPuYPpKCO57tpWf
vOWydSeOFGTlUNBGoXn2g471XwNth9ssf1e1X4hKjEffJyysf5J5CTcpy9fleltY
eTaFhNq+YajMCF8SyQjqIl6iTPDPIOhqw+JPpxqAP63DyWYnwRwXTmHI9fefbgwi
MdZqKGjpgEJRJSPw+k3pobmYaZiLOIT4WzOa2d+ci388j70nfxVKAsuY0p/4BgCL
lbmddk5mSjwb8TLyLaVvJNsO5sL0lONbma9bCdRqYzfZaV+YHbUEVIKvNQgyvyre
tRW3FWcO3CdDmvgppp+YHXqufQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAhiEBWA
pNoo+g3cVwPdYMx03s+EMB8GA1UdIwQYMBaAFLbMteQx5FAZFQxPNyH0+ApvLtfb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjUxMy9DMkJBNkJGMDQy
MDExMUVCQUJGRDVFNjBDNEY5QUUwMi90c3kxNURIa1VCa1ZERTgzSWZUNENtOHUx
OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RzeTE1REhrVUJrVkRFODNJZlQ0Q204dTE5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjUxMy9DMkJBNkJGMDQyMDExMUVCQUJGRDVFNjBDNEY5QUUwMi90c3kxNURIa1VC
a1ZERTgzSWZUNENtOHUxOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAakQ/hi4EzLN+Sqj/66x3Kd7nmTeYtAv4mheZEM1SttAA/F46F4O4l9I846A9
hPcgafLDtCfDuSMBGAasaG6A292govbswSIrDxLMUrSLAeKzxWYRrlVav/ZmcW8B
NlEoW7Z0/oUIM/BoTDR3zVTkfHWTeODtOKjFvMqXA1t58CGxI9S7MsLynQSjQjAG
hVSRosFgakcaC9Okg/eRMbX36fFBfv06yVJKRgOHV7AYamOXYFAdbjooZU6JevY5
2GDfTZWL+Q8YWWAtmi2Eo6nFWyyBaaoBQI/TOKPyyihu51NdedWCNwFsBK8JlExy
MYb1XEfbUtfNskg/rSx9HLo9AQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:34:30 2026 by rpki-client