
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
File: TnyavOb4vNI_YG8QjoZwzZXLDwY.mft (raw, json)
Hash identifier: yUeItRRH2rFIlwucxRTirAAU/1pbcZupR8ewE8h3s9c=
Subject key identifier: 79:E4:12:10:18:06:37:10:BB:7E:4A:7D:92:31:3D:50:D7:DF:0B:33
Authority key identifier: 4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06
Certificate issuer: /CN=A9130C18/serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
Certificate serial: 0229
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
Manifest number: 0224
Signing time: Mon 27 Jul 2026 04:17:54 +0000
Manifest this update: Mon 27 Jul 2026 04:17:54 +0000
Manifest next update: Mon 03 Aug 2026 04:17:54 +0000
Files and hashes: 1: TnyavOb4vNI_YG8QjoZwzZXLDwY.crl (hash: QHDr4syzN2Xu120kj3N1yZJxsBLZiBsP6BUPMOEmkRs=)
2: 248A4FFE478F11EEABD3353BC4F9AE02.roa (hash: CMpAtUweVr+EqAuGahhTVQ09EFxzxXQiaIMB3NuVn84=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl
rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130C18, serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
Validity
Not Before: Jul 27 04:17:54 2026 GMT
Not After : Aug 3 04:17:54 2026 GMT
Subject: CN=6a66dbf2-b3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:39:a4:b0:b1:9e:5f:c3:81:45:a4:96:f2:
21:d4:8a:c6:14:b2:29:77:5b:3a:b9:85:e7:b7:cf:
88:38:e9:8a:71:71:53:c0:75:f4:b3:1b:25:97:87:
a0:cc:e7:5c:41:0c:87:96:59:e2:8b:89:b0:98:43:
60:88:7c:da:cf:98:49:f7:4e:88:44:43:7b:cb:01:
4b:1d:bb:55:dd:46:f7:8c:fa:59:14:04:8f:70:af:
84:0d:3a:3f:27:10:c8:59:52:6e:70:bd:06:76:c6:
b0:dc:55:ef:54:17:35:7b:d9:58:51:66:27:89:bb:
33:27:d7:d4:0f:86:0f:15:ce:08:45:f5:3a:07:fb:
2b:d3:ba:d2:17:b6:fc:da:ed:b8:78:c6:59:7c:01:
2f:16:82:18:af:74:cf:61:b0:e7:16:80:c1:d3:24:
e8:a3:22:4f:ee:4d:ae:30:0a:08:65:59:00:be:a0:
2a:08:87:aa:12:1b:66:06:eb:82:0c:07:b6:bc:46:
76:1f:6c:20:e3:e7:b3:b6:45:dd:93:d5:da:36:41:
19:03:99:0e:aa:6e:ac:6d:a8:c8:ca:4e:67:19:b2:
f1:e9:22:19:97:19:c8:15:6a:18:93:cc:91:0f:bd:
72:cf:28:c7:1e:7f:bd:29:1b:28:43:ac:9c:cd:cf:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E4:12:10:18:06:37:10:BB:7E:4A:7D:92:31:3D:50:D7:DF:0B:33
X509v3 Authority Key Identifier:
keyid:4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fe:c7:24:9b:24:60:be:c7:4c:e5:16:3e:82:be:df:05:ee:
41:fc:cc:dc:b9:2d:b0:0e:cd:07:de:24:39:4a:3c:0c:01:6f:
a6:d4:fb:e2:35:54:a7:88:fb:42:b8:34:20:2c:d2:01:9f:1d:
93:60:45:6f:47:e9:4e:a7:9d:f8:af:e0:79:02:bc:11:82:98:
fb:07:83:f1:74:8a:d2:23:8f:ba:ab:3f:ae:be:06:ef:28:97:
50:ad:05:ca:10:bb:48:e1:f9:18:08:70:45:b1:51:b3:5e:9b:
03:91:0b:2b:92:7f:b2:cd:0a:58:1b:e9:2f:21:47:f0:ef:5b:
a7:36:8a:0d:4d:2e:0e:f2:67:5a:78:0c:e8:de:7f:ce:6b:2d:
25:9c:dd:33:e1:0f:dc:28:ef:15:69:e7:f8:43:a8:5f:cf:b2:
6a:69:b9:a6:57:db:22:a0:81:e1:7e:23:3a:1d:21:2d:cf:99:
1a:bb:d1:e5:54:d8:33:29:7e:73:0d:f4:a6:e2:f6:b9:93:bf:
e5:18:1a:4c:96:22:bc:85:e8:1e:2d:53:71:52:1f:56:4e:08:
04:ed:52:af:4f:b6:68:ee:c6:a0:93:67:66:de:55:cf:2b:f6:
e6:cd:bb:d4:54:6e:da:94:b8:53:09:63:ca:1d:ea:2f:ea:02:
0c:24:89:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:24:22 2026 by rpki-client