
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
File: TyFhsA_Cs23gqCRPCvKBQnkChg4.mft (raw, json)
Hash identifier: U300cTXrykL/YRG2gn3lkl3pfLRFDwWUcLAIMUfU41E=
Subject key identifier: E3:C8:80:DF:D8:D8:2E:66:A1:C8:61:F4:4D:F1:F5:97:BC:A0:45:DA
Authority key identifier: 4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E
Certificate issuer: /CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E
Certificate serial: 0A98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
Manifest number: 0A90
Signing time: Wed 22 Jul 2026 19:58:42 +0000
Manifest this update: Wed 22 Jul 2026 19:58:42 +0000
Manifest next update: Wed 29 Jul 2026 19:58:42 +0000
Files and hashes: 1: TyFhsA_Cs23gqCRPCvKBQnkChg4.crl (hash: 9cndqw++6bZvAGPQWSsxkSDcnl3z4dhK9sqRJbZEGDA=)
2: C09BAC8E860011EABD37250EC4F9AE02.roa (hash: 6IXTKp13HuxMWhW3hn1g3ZSbEaBP+PUeVbQIJFfugEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl
rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:58:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2712 (0xa98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C19F7, serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E
Validity
Not Before: Jul 22 19:58:42 2026 GMT
Not After : Jul 29 19:58:42 2026 GMT
Subject: CN=6a6120f2-78cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:85:79:0b:0c:09:63:37:68:1a:4f:ca:22:
7d:5f:5f:40:3d:c5:81:4e:25:b8:b1:10:f7:23:5e:
fc:f9:fc:95:ce:eb:74:0d:c0:19:29:79:ae:a6:b1:
b9:bd:44:39:18:bc:f5:4d:27:c6:16:c9:cc:db:95:
7c:10:95:03:29:c8:71:9a:cc:b4:46:dd:ff:82:f1:
c4:6a:6c:3a:a5:c4:3b:f5:cb:3d:7a:57:59:5f:04:
20:b2:c4:a4:ba:e1:86:fe:0d:04:05:03:15:37:69:
6e:af:75:0f:d7:a3:0a:fc:1b:00:52:65:1d:1b:bf:
7b:3e:84:72:87:6e:92:8d:4b:8d:1b:2b:4c:a6:7f:
0e:05:e2:26:98:bc:f0:5b:3c:80:6c:0a:c2:f3:4c:
a4:b6:9d:58:94:42:a9:6c:90:98:6e:8f:cb:5f:49:
6a:2d:05:02:70:a7:d4:98:c4:d9:f7:77:0a:55:56:
2a:e2:0d:0d:06:a0:35:89:c4:33:ea:3f:4e:fc:d0:
82:bc:39:3e:bd:2c:50:26:96:20:e7:6a:a2:ba:7e:
14:5c:c0:39:7a:21:5b:37:ff:a3:39:c3:47:57:63:
44:ec:9f:72:19:38:3b:81:38:c6:dc:21:99:b0:d5:
f7:1d:0d:26:c4:47:50:5f:4e:4a:9d:41:1a:84:42:
37:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C8:80:DF:D8:D8:2E:66:A1:C8:61:F4:4D:F1:F5:97:BC:A0:45:DA
X509v3 Authority Key Identifier:
keyid:4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1c:bb:64:2b:67:af:6f:0e:63:59:ee:0b:24:f4:9c:00:9b:
ab:9b:8f:ba:7c:ed:b5:d2:dd:a6:90:f3:dd:e2:42:d9:83:9e:
9c:cb:64:a6:df:62:b3:37:4e:3a:0a:95:75:0b:10:dc:6f:bb:
99:d6:6e:13:23:27:5e:98:b4:75:0e:e8:31:e4:6f:0f:8e:c6:
83:90:ad:47:71:92:e6:93:48:90:11:4d:82:ca:ca:9e:be:3c:
d6:14:57:71:b5:1b:9c:02:de:a1:ce:70:1d:9e:25:69:6b:6a:
ba:a4:6d:bd:36:2e:41:61:45:23:30:bc:56:fa:1a:b1:60:d9:
90:ed:af:fe:78:82:ab:8b:de:9b:90:72:c1:b2:c6:e6:d1:73:
f2:b8:f7:ed:22:00:05:85:f7:3a:a7:d5:85:bd:56:3a:38:db:
26:56:8c:2c:db:3e:49:23:13:d3:90:1b:86:d6:9d:2a:bb:55:
e2:78:7d:25:2b:7c:93:d6:a1:78:7d:0f:73:2b:bd:f6:b3:58:
48:71:a8:af:13:57:87:3f:6d:b0:c7:28:36:44:5e:d8:ef:73:
3b:21:5a:d9:1c:4c:65:e7:49:1f:7b:09:f1:c4:ae:66:2b:b1:
4b:5a:d8:d6:9b:72:9b:09:a8:8a:88:10:21:61:f7:77:a5:01:
91:47:de:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:35:34 2026 by rpki-client