
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
File: tsy15DHkUBkVDE83IfT4Cm8u19s.mft (raw, json)
Hash identifier: DL1qzX9P7LdhiQo/GeeYrzhYAHlVxwbvR/ah9BEG708=
Subject key identifier: 70:FF:BA:B3:7B:F8:35:1E:F9:92:BF:55:4E:0D:AA:0B:72:1C:C6:15
Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
Certificate issuer: /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Certificate serial: 07E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
Manifest number: 07BC
Signing time: Tue 24 Mar 2026 21:13:48 +0000
Manifest this update: Tue 24 Mar 2026 21:13:48 +0000
Manifest next update: Tue 31 Mar 2026 21:13:48 +0000
Files and hashes: 1: tsy15DHkUBkVDE83IfT4Cm8u19s.crl (hash: Vqt0t+KP+RpQgXSNplrlzqhkC46lG5k8TU4EOsOj+70=)
2: 9C42D762163D11F19AE99B533D3D8C67.roa (hash: bXkxRodSVPRMA9XhTrb2GxuFt/+D/R2TC7v8l62JmaQ=)
3: C098EF8E499811EFBB8C701EC4F9AE02.roa (hash: uB385efdqTb3/LugdWT8rNVy3FgK+9CSA2XsUkIjqtY=)
4: 48EFF31A621B11EF8FB5117AC4F9AE02.roa (hash: 67g+qKVwsfhFWOuOMEWITQ1nmAIPrEarQJhLRzQm0IY=)
5: E181BAA059DD11EF9C39750CC4F9AE02.roa (hash: wNwawcsHbM0YHaF0zdZbSvwLiLwGJzedMyT2pC2bOpg=)
6: 2574266EAA4911F09A71D135C4F9AE02.roa (hash: Yq5oiH0EmhCavwCaD+J0apl3DbYBY7zFMqkNNlPV3Kc=)
7: BC04E5745E4E11F082F8D529C4F9AE02.roa (hash: +n6sT0DNVEtTay2c7eDEYpMLVSmyIfomBjZvDH6GPyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:13:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2023 (0x7e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186513, serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Validity
Not Before: Mar 24 21:13:48 2026 GMT
Not After : Mar 31 21:13:48 2026 GMT
Subject: CN=69c2fe8c-8c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2d:05:fc:c4:1d:b6:41:45:cc:f3:62:47:59:
c3:af:c5:13:9d:4e:f2:33:94:63:3f:f3:53:c9:02:
9d:75:14:18:10:36:50:61:02:8e:51:d2:23:7b:9e:
69:a0:26:f3:db:c0:c7:5b:27:34:e0:f9:7a:1e:04:
64:aa:8e:56:da:01:f9:81:35:da:24:dc:a0:34:1b:
5d:cc:59:18:11:05:3a:11:e6:76:30:de:63:20:9b:
8c:b8:b9:f6:c7:de:8d:7b:60:bc:67:12:81:f6:15:
29:5e:ca:e5:e4:39:13:51:9d:ee:80:7e:cf:f3:ac:
76:7d:4b:a8:9a:2b:c7:26:6a:00:aa:09:a4:bc:ea:
ab:7d:7a:fa:e3:0b:ae:43:98:a4:a7:60:cd:d8:fb:
ec:11:f3:e5:08:ce:60:ab:61:ba:b6:b5:fa:af:2c:
d0:f8:7a:77:6c:fa:ae:64:0c:b6:80:21:77:ae:ad:
be:87:87:35:ed:35:14:c8:34:ba:b3:f2:75:00:09:
41:90:bd:97:21:da:e7:42:89:35:1a:dc:0f:3a:20:
99:8b:0e:5f:eb:5c:86:85:f4:5a:b7:26:91:03:3b:
0d:d5:49:d7:f7:97:35:60:1c:a3:4d:0a:08:4a:ad:
d2:d8:14:83:e9:43:32:b9:f1:b7:15:07:48:c4:70:
61:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FF:BA:B3:7B:F8:35:1E:F9:92:BF:55:4E:0D:AA:0B:72:1C:C6:15
X509v3 Authority Key Identifier:
keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:3e:c3:92:b9:62:e4:8d:41:48:19:4d:35:6f:82:54:db:bd:
50:07:6e:bd:56:ee:e7:b2:06:2d:ba:65:4e:fc:83:04:91:a9:
57:99:d3:0c:d5:54:d7:6b:5d:32:f7:42:00:a5:f7:fa:cd:69:
1f:88:ed:77:fe:84:96:3d:c3:fe:3f:2b:c3:ba:66:29:fc:83:
38:ff:08:03:8d:f7:42:a7:75:c0:cc:c9:f4:77:e5:4b:01:10:
46:ca:04:96:b8:ee:54:ee:2c:96:8b:aa:1d:32:54:5e:35:f5:
ff:9e:4a:c6:05:e6:5d:8c:c3:27:e4:76:64:1d:6e:d4:16:87:
f2:d0:43:a0:28:8e:dd:7c:75:52:33:c2:2b:29:90:fe:4b:0a:
75:64:2b:30:f8:e1:9e:d3:e0:7f:fb:68:34:61:10:c5:63:f8:
f5:65:96:02:c2:8c:da:99:f0:92:f7:62:63:aa:16:b8:42:4a:
aa:a8:ea:08:a1:a8:79:04:ed:81:30:7f:21:ab:5e:ee:ed:39:
4d:cd:72:74:5a:75:60:1c:2a:41:27:4b:d9:32:3e:95:3e:63:
b1:69:bb:f0:98:4d:26:5a:ee:36:dc:e0:37:cf:24:4e:98:37:
b8:18:5a:98:50:77:67:98:18:62:09:e3:83:1d:87:99:6b:10:
e3:d4:56:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:11 2026 by rpki-client