
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
File: -ty5VaOsFGWZfQjySL-GxDNE-3g.mft (raw, json)
Hash identifier: pHLUc/SCqOO1Yct+o+VkXYb21hCAXbRncRzIRRlGlWs=
Subject key identifier: 8B:D4:53:59:C0:AB:30:C3:71:A3:A6:55:BB:B5:DB:C7:8A:BD:DE:2C
Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
Certificate issuer: /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78
Certificate serial: 06BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
Manifest number: 06B2
Signing time: Sun 20 Sep 2026 22:16:41 +0000
Manifest this update: Sun 20 Sep 2026 22:16:40 +0000
Manifest next update: Sun 27 Sep 2026 22:16:40 +0000
Files and hashes: 1: -ty5VaOsFGWZfQjySL-GxDNE-3g.crl (hash: 7pfKn9mppiaTiOoLFT/oOo3nDCRG+JWSvY7rJ7QFm10=)
2: 4D470362C55811EB981FA987C4F9AE02.roa (hash: wQ1ccwGJlTNocRYfMJoEjZ0WE0y8wwNJkSvp/kcCKyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl
rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:16:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1722 (0x6ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148F32, serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78
Validity
Not Before: Sep 20 22:16:40 2026 GMT
Not After : Sep 27 22:16:40 2026 GMT
Subject: CN=6ab05b48-03a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:10:be:6c:6c:39:f0:a7:6e:a9:89:91:6f:
25:ab:3b:c4:cb:05:4d:26:9e:ee:90:6b:74:3a:a7:
7f:72:02:ee:32:77:ce:18:84:ad:88:3d:d0:89:3b:
87:9b:3a:c2:a1:2b:3b:38:09:f8:10:c5:d9:f6:2c:
23:e8:7b:a6:47:c2:35:04:ba:f5:17:a5:4d:12:57:
d7:6e:1a:6a:c1:fe:8a:06:bc:b8:69:17:3b:37:c2:
60:d1:7c:11:92:1b:57:ef:35:0c:1e:18:bc:5b:14:
91:7b:e9:3a:b1:1f:7f:dc:09:06:78:82:72:3a:85:
35:84:95:09:6d:1f:b2:5c:f6:29:6e:0e:ff:d0:92:
d3:9e:20:8b:ae:07:f6:a0:6c:2d:4e:2a:0d:ea:f8:
19:92:e5:68:ae:85:65:4b:13:d2:a4:2a:28:59:09:
fd:93:1e:46:2e:8c:c8:19:fa:0a:85:f7:17:e2:cc:
97:e7:83:67:4a:62:f8:fa:38:08:fa:80:55:de:e6:
5e:78:9f:b0:5f:4e:aa:a9:52:75:6f:4d:8b:b3:27:
36:58:2c:e0:a0:c0:6e:0e:c4:4a:50:63:10:8c:bb:
df:2a:51:01:d4:4d:5e:f7:be:ff:f5:76:d4:e8:c0:
a5:e1:5c:52:17:54:07:d1:3d:f7:57:e6:69:43:63:
fa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D4:53:59:C0:AB:30:C3:71:A3:A6:55:BB:B5:DB:C7:8A:BD:DE:2C
X509v3 Authority Key Identifier:
keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8b:fd:7c:19:b6:06:24:44:93:39:d9:14:45:7a:cb:b0:00:
93:38:9f:72:cc:60:6b:e4:84:89:88:fd:54:bc:3a:4b:6f:b6:
ee:94:a8:21:ba:6d:10:c3:7c:db:77:3b:81:5f:61:a7:e6:11:
be:60:1c:f3:61:e0:9a:4c:0c:97:8f:4b:cc:98:32:8a:15:f5:
9d:11:ef:ab:7b:f7:32:02:d8:bf:40:1f:52:fb:37:ff:3d:a8:
21:7e:b8:cd:27:da:36:44:75:f4:f9:34:59:12:56:0b:8c:35:
fe:77:51:bf:4d:ba:62:41:97:22:9f:df:07:5f:b2:65:e2:3c:
9e:82:20:53:37:88:c8:6e:38:49:a0:11:8c:0e:cc:b7:d1:65:
67:9a:60:b3:e7:de:00:d4:6f:e1:d4:fb:0a:bb:78:1e:09:dc:
9d:63:44:34:8f:28:14:3f:20:70:04:f7:4e:1b:af:55:47:67:
6d:de:87:8e:37:3c:78:10:44:e5:63:81:64:a4:9b:8c:fd:cf:
0f:a1:a0:47:e9:cc:97:91:f3:f1:3b:bc:af:5f:1e:5b:43:47:
dc:3c:c7:5c:8e:50:89:c9:b9:f4:f3:4e:e6:19:29:ce:1b:44:
be:87:fe:7a:82:99:d9:ad:82:5b:3d:a2:ae:d3:bf:f1:bd:3c:
ed:f1:34:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:43:09 2026 by rpki-client