
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
File: -ty5VaOsFGWZfQjySL-GxDNE-3g.mft (raw, json)
Hash identifier: ezpUC6yvUVWJZGJkQtJo81Bo9STPcFxiuq4wRmPHoXw=
Subject key identifier: 21:8F:89:99:84:68:BB:F4:49:FD:66:49:C4:33:ED:D6:F6:D9:88:89
Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
Certificate issuer: /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78
Certificate serial: 0687
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
Manifest number: 067F
Signing time: Fri 12 Jun 2026 22:35:19 +0000
Manifest this update: Fri 12 Jun 2026 22:35:19 +0000
Manifest next update: Fri 19 Jun 2026 22:35:19 +0000
Files and hashes: 1: -ty5VaOsFGWZfQjySL-GxDNE-3g.crl (hash: yhKlzpxn5OAKj1be4Z7O2u0iYHq5ZKsZ4D3vLVZjjEc=)
2: 4D470362C55811EB981FA987C4F9AE02.roa (hash: wQ1ccwGJlTNocRYfMJoEjZ0WE0y8wwNJkSvp/kcCKyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl
rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1671 (0x687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148F32, serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78
Validity
Not Before: Jun 12 22:35:19 2026 GMT
Not After : Jun 19 22:35:19 2026 GMT
Subject: CN=6a2c89a7-1a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a9:e7:69:09:44:2d:76:c1:fa:c5:c6:62:0e:
a7:b9:b8:38:b5:0b:b9:24:16:08:29:cb:8f:5a:8f:
93:1c:c7:11:aa:82:c0:f2:f4:4a:68:c6:8c:ea:f2:
35:5a:ff:53:83:90:3c:f9:0c:2e:8e:bd:bc:e7:42:
a4:81:9a:ef:88:b1:cb:35:6d:c5:d2:ff:05:a9:6a:
04:27:d7:ae:9c:48:4a:0b:3b:d5:b6:b0:54:8e:fb:
d6:7e:8f:a5:60:89:b2:6f:e1:6d:ed:44:d3:99:e4:
28:ab:07:00:60:f9:d6:05:c2:78:02:24:76:29:14:
ec:b5:24:f5:d9:ee:8f:77:19:fc:0d:f6:6e:27:7e:
72:03:15:b3:67:e2:a7:d1:54:79:fb:6d:84:f2:d1:
75:17:44:73:d9:54:68:ad:8b:53:e8:9c:1a:4b:f7:
66:4e:9b:3d:f4:6d:81:a8:ff:b9:18:0e:60:39:5c:
9e:0e:11:e4:8a:7e:f7:c9:f0:2f:05:37:b4:14:b9:
c1:46:8a:b9:2f:02:3d:e4:f9:a3:76:9d:b4:27:cc:
42:49:64:da:95:a6:e5:d3:10:16:42:d2:29:8f:b2:
0b:cf:cf:8b:ef:90:d4:f4:3f:c8:0b:08:a2:b8:7c:
33:3d:a6:e1:e6:19:2d:b2:b2:33:2b:ca:b1:04:e0:
58:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8F:89:99:84:68:BB:F4:49:FD:66:49:C4:33:ED:D6:F6:D9:88:89
X509v3 Authority Key Identifier:
keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:9a:34:fb:23:14:dd:56:24:12:17:70:bf:85:47:d9:9e:0b:
4f:b1:ee:63:f2:79:5d:8f:b5:fc:22:69:8b:a4:13:1a:a3:eb:
af:28:c0:bf:56:cd:83:72:80:f7:14:6b:3f:c6:06:75:fb:03:
cc:cd:44:63:c4:63:f6:57:2f:04:55:5a:20:cc:96:13:35:13:
26:ef:2e:88:72:9e:9e:09:08:84:d5:27:ef:ce:cb:e2:dc:cc:
be:91:04:44:cb:03:2e:f4:00:b5:85:4d:38:48:2b:a4:0a:47:
39:05:51:bd:98:f1:fc:0b:a6:4c:ec:ab:eb:ad:42:bf:d5:f7:
4a:f5:a3:8c:1f:7c:47:4a:6b:44:62:1b:5f:40:7f:aa:94:d2:
39:db:ce:de:fb:17:a5:10:26:ab:02:0d:4b:e3:a1:ed:05:16:
51:b7:ae:34:9e:85:e8:b8:ee:06:bc:4d:64:91:2f:58:1e:3d:
1f:ba:45:e3:5f:fb:c6:f8:c5:4a:30:2c:f6:b3:43:66:0a:0d:
15:4b:1b:1b:ad:45:47:73:74:d7:5b:06:58:0f:1e:6d:31:d0:
80:ca:13:77:0d:bb:9d:12:6e:b3:9c:ba:9e:d4:36:2c:ac:64:
8f:b4:15:15:77:0d:43:c4:e3:6f:0e:a0:d9:38:58:04:8a:6b:
3f:93:69:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:09:39 2026 by rpki-client