
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
File: TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft (raw, json)
Hash identifier: t31vA+EcO1QwR0NPQk8P28VycL7mIXmiH4DlRkUk8cI=
Subject key identifier: 7D:88:78:88:F1:BA:28:E6:5F:6E:55:75:ED:CA:51:8B:6C:FF:14:AD
Authority key identifier: 4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB
Certificate issuer: /CN=A918E951/serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
Manifest number: E1
Signing time: Wed 23 Sep 2026 06:22:04 +0000
Manifest this update: Wed 23 Sep 2026 06:22:02 +0000
Manifest next update: Wed 30 Sep 2026 06:22:02 +0000
Files and hashes: 1: TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl (hash: JOE5jswEiv845Yp1Qa4uyEPvK1sPE5RpKwadeL6FgQQ=)
2: A24902C8623B11F0BEB49510C4F9AE02.roa (hash: 9hWkzIMPHr3u4aBMV/4p5NjvOfvSqGpfsyIm9FgrEFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl
rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E951, serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB
Validity
Not Before: Sep 23 06:22:02 2026 GMT
Not After : Sep 30 06:22:02 2026 GMT
Subject: CN=6ab3700b-0894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:1e:94:e8:a1:e5:7d:bf:24:2e:1e:32:4f:
1b:2a:b2:f6:28:ed:a9:22:06:fe:87:7e:e4:2b:6c:
c3:09:0a:92:45:62:28:31:77:f1:45:91:97:5a:b4:
85:e0:26:3d:64:4b:9a:3f:91:7f:95:f9:5c:a6:9f:
f8:82:06:90:1f:81:9a:2f:18:c6:d6:fa:75:54:f1:
19:e2:36:4e:e8:23:62:46:34:80:86:1d:6f:68:4a:
2b:6f:40:3f:67:1a:5f:cd:1f:83:87:14:da:16:94:
f7:5b:c0:76:dc:0a:2e:67:53:fe:71:30:3d:74:d0:
cf:eb:c8:6e:e2:2a:01:f5:05:97:9d:bf:05:c6:fb:
a1:4c:43:80:ec:c6:ae:ab:04:00:6e:74:24:78:58:
5d:07:f9:fa:48:e7:19:bd:64:b6:1d:28:25:e8:a5:
fa:36:7e:c3:2a:ae:a5:85:8e:bb:96:07:2a:db:bc:
68:a7:a0:72:c1:d4:fc:fd:e1:f9:11:91:f9:a2:29:
61:de:20:1b:63:09:41:03:63:39:50:27:7f:fb:ea:
f9:48:ae:5c:08:e1:1a:e3:93:35:fb:5d:63:41:95:
36:1c:cf:4a:41:32:69:d3:98:86:41:ac:15:d3:35:
4a:69:53:19:83:d5:5e:d9:db:2c:2d:e1:a6:ca:4c:
48:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:88:78:88:F1:BA:28:E6:5F:6E:55:75:ED:CA:51:8B:6C:FF:14:AD
X509v3 Authority Key Identifier:
keyid:4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:d1:69:22:42:01:be:68:83:01:40:38:47:25:91:48:cf:75:
66:d9:eb:af:00:eb:99:82:36:9b:08:86:89:8e:d4:e7:38:a4:
d9:8a:a9:65:73:87:07:97:1a:06:e0:df:a7:4e:22:eb:ae:59:
48:37:02:2d:07:f4:43:70:c0:c1:f9:34:0e:15:6c:59:c0:20:
34:49:4e:f0:04:21:e4:67:49:7b:4a:9b:3d:78:2f:73:cb:30:
2d:8f:a6:8b:11:46:37:3e:33:35:1f:d8:31:93:a5:a4:b7:73:
b1:e8:b3:7e:0d:99:71:1d:e8:0e:8f:da:c3:f4:04:10:26:5a:
98:56:3f:f1:f6:e9:24:ea:65:b5:64:8c:a2:8a:7f:d2:1d:1a:
52:32:64:f0:b2:bf:ad:57:67:0e:9e:3a:ee:5a:2d:ab:13:e9:
35:39:02:f3:e8:85:27:ea:3a:8d:ed:b6:ce:25:4e:f1:0e:8c:
eb:81:6f:d2:69:1c:18:25:20:3a:63:b0:71:0c:e0:a6:1d:52:
e6:79:80:b8:6e:28:f5:ae:24:a7:81:b6:dc:1d:da:22:1d:78:
30:0a:bd:62:93:1c:03:dc:fa:9f:e2:99:54:28:06:5e:2b:f9:
dd:86:7e:94:5c:a6:78:a6:0e:84:a5:48:99:b1:45:2d:e1:e8:
77:c1:12:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:49:19 2026 by rpki-client