
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
File: TYR1I-W92eO4lpgooEv-2isMAxs.mft (raw, json)
Hash identifier: 5zgO4JAFKJvroUIch4EYJO7+Uqo5H9OQ8O/k6l2/sFI=
Subject key identifier: E8:E9:C7:E7:F1:D0:81:4C:EF:AE:46:03:55:FA:5C:74:BB:11:4C:F6
Authority key identifier: 4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B
Certificate issuer: /CN=A91AC726/serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B
Certificate serial: 07F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
Manifest number: 07D9
Signing time: Tue 12 May 2026 21:26:06 +0000
Manifest this update: Tue 12 May 2026 21:26:06 +0000
Manifest next update: Tue 19 May 2026 21:26:06 +0000
Files and hashes: 1: TYR1I-W92eO4lpgooEv-2isMAxs.crl (hash: tIVT/j26tdputUUgz2zZJ+3CsGuz2R1Pf603G/bMlZ4=)
2: CA9D82E8688511EC999E8B70C4F9AE02.roa (hash: ZSWT8bBIoiXkk5NHfAcRN305gYra6U3TCXFXnnRK7rU=)
3: A8D1E0DE688811ECBE2C4F49C4F9AE02.roa (hash: UClPHshsGcyvq7g9LcOIEJ85L9Tn1p+WoRxD1Wzjhl0=)
4: 52EFDBAE687D11ECBF82F558C4F9AE02.roa (hash: vlQE6zfU8sldRsawycgscMRN/+d6UAyhTBqyJZ13gKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl
rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2039 (0x7f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC726, serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B
Validity
Not Before: May 12 21:26:06 2026 GMT
Not After : May 19 21:26:06 2026 GMT
Subject: CN=6a039aee-8aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:2c:57:98:38:a7:bf:ee:f9:ef:39:e1:a4:
73:e0:c0:43:a3:e9:e7:c9:05:5d:e6:9f:f4:83:22:
55:81:dc:be:95:32:a0:50:58:de:5f:97:1b:c6:23:
8f:2e:2f:b7:a2:74:27:77:01:5f:e1:44:42:8e:bd:
0b:ce:a0:ff:d1:2d:a4:0a:72:30:83:90:23:c6:64:
8f:80:7d:20:f5:be:9c:57:be:67:1e:b1:5d:77:36:
de:5b:df:f2:16:ef:29:8c:3d:70:6d:1f:f3:af:6c:
90:ee:03:19:8d:79:c7:df:c1:30:15:45:29:01:05:
49:a6:7b:d4:c0:1b:e0:98:87:e3:1b:fb:f9:e9:5b:
e7:0d:fe:17:1c:fb:77:08:c8:b9:39:ae:b3:dc:41:
8f:b1:18:cf:06:8d:9b:6a:80:3d:d0:ea:74:67:00:
82:18:71:70:e4:52:ac:77:14:bf:5f:35:ca:39:65:
84:25:38:e4:98:b5:45:27:35:e8:7b:da:e7:37:1c:
e0:31:41:6b:be:d9:aa:9b:1f:9f:f9:23:1d:87:a8:
d2:f8:19:f0:92:02:48:7d:df:ab:e1:3d:e5:d6:87:
2b:7f:d2:13:1e:9a:a4:a4:b7:7b:76:01:1d:d5:8e:
26:f7:6a:95:6a:aa:fe:e1:ab:a4:f0:93:4f:88:7e:
fe:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E9:C7:E7:F1:D0:81:4C:EF:AE:46:03:55:FA:5C:74:BB:11:4C:F6
X509v3 Authority Key Identifier:
keyid:4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:0e:76:aa:20:ba:d9:3a:2b:d9:84:08:43:ac:1c:6b:a2:30:
77:f4:1e:53:e2:16:6d:ab:89:52:82:61:a9:6d:b9:c5:0b:84:
24:39:56:66:05:f5:13:a7:4c:62:c9:0c:b0:dc:42:71:8e:54:
ff:52:dc:ca:40:ae:15:de:97:32:9d:c1:d6:04:99:65:19:bc:
de:3f:bd:88:9a:cd:d2:a7:6d:65:3d:1a:bf:13:f9:83:1a:d8:
50:f7:dd:5b:64:0d:40:20:12:6a:f0:08:cc:9b:71:69:b6:b0:
ac:ae:b3:41:5e:a0:d7:1c:e5:06:8d:6e:eb:c7:78:76:92:91:
a7:1f:45:e2:83:cc:ca:71:4e:d4:1f:1f:a7:0c:bd:ad:07:4a:
32:ca:4f:72:36:5c:d0:ad:f2:13:08:76:eb:fa:f7:81:c0:fd:
dd:85:1c:66:f7:68:d8:f2:09:dc:65:be:ce:6f:c8:80:0b:a1:
cb:04:16:ce:fd:55:06:e3:bb:5e:0b:40:55:14:b2:d5:c4:d7:
33:20:f4:4d:2e:59:c4:36:77:40:fb:54:a7:07:c1:a5:d5:57:
cf:66:b2:24:7f:45:14:c0:cd:fa:df:df:4c:b2:f6:c3:35:e9:
e8:f8:6c:64:cb:de:0f:2a:3e:ec:da:b3:80:63:6a:1e:41:35:
fb:22:23:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUM3MjYxMTAvBgNVBAUTKDREODQ3NTIzRTVCREQ5RTNCODk2OTgyOEEwNEJGRURB
MkIwQzAzMUIwHhcNMjYwNTEyMjEyNjA2WhcNMjYwNTE5MjEyNjA2WjAYMRYwFAYD
VQQDEw02YTAzOWFlZS04YWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtHosV5g4p7/u+e854aRz4MBDo+nnyQVd5p/0gyJVgdy+lTKgUFjeX5cbxiOP
Li+3onQndwFf4URCjr0LzqD/0S2kCnIwg5AjxmSPgH0g9b6cV75nHrFddzbeW9/y
Fu8pjD1wbR/zr2yQ7gMZjXnH38EwFUUpAQVJpnvUwBvgmIfjG/v56VvnDf4XHPt3
CMi5Oa6z3EGPsRjPBo2baoA90Op0ZwCCGHFw5FKsdxS/XzXKOWWEJTjkmLVFJzXo
e9rnNxzgMUFrvtmqmx+f+SMdh6jS+BnwkgJIfd+r4T3l1ocrf9ITHpqkpLd7dgEd
1Y4m92qVaqr+4auk8JNPiH7+FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOjpx+fx
0IFM765GA1X6XHS7EUz2MB8GA1UdIwQYMBaAFE2EdSPlvdnjuJaYKKBL/torDAMb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzcyNi85QzRGNTMwQTM4
QUYxMUVCODkxM0RFNDFDNEY5QUUwMi9UWVIxSS1XOTJlTzRscGdvb0V2LTJpc01B
eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RZUjFJLVc5MmVPNGxwZ29vRXYtMmlzTUF4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QzcyNi85QzRGNTMwQTM4QUYxMUVCODkxM0RFNDFDNEY5QUUwMi9UWVIxSS1XOTJl
TzRscGdvb0V2LTJpc01BeHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArg52qiC62Tor2YQIQ6wca6Iwd/QeU+IWbauJUoJhqW25xQuEJDlWZgX1E6dM
YskMsNxCcY5U/1LcykCuFd6XMp3B1gSZZRm83j+9iJrN0qdtZT0avxP5gxrYUPfd
W2QNQCASavAIzJtxabawrK6zQV6g1xzlBo1u68d4dpKRpx9F4oPMynFO1B8fpwy9
rQdKMspPcjZc0K3yEwh26/r3gcD93YUcZvdo2PIJ3GW+zm/IgAuhywQWzv1VBuO7
XgtAVRSy1cTXMyD0TS5ZxDZ3QPtUpwfBpdVXz2ayJH9FFMDN+t/fTLL2wzXp6Phs
ZMveDyo+7NqzgGNqHkE1+yIjMw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:51:26 2026 by rpki-client