
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
File: Ty_T8AtY8TSpqOPn3ajY0grANSc.mft (raw, json)
Hash identifier: 0aYw0cH4L/RUuzS5HZSlcg80Gqe3dk3mYPHVGWN559s=
Subject key identifier: 68:E0:BE:F0:4A:9F:97:E5:A5:67:3A:61:58:18:D9:22:3A:F0:EA:AC
Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
Certificate issuer: /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Certificate serial: 35FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
Manifest number: 3590
Signing time: Fri 12 Jun 2026 14:16:56 +0000
Manifest this update: Fri 12 Jun 2026 14:16:56 +0000
Manifest next update: Fri 19 Jun 2026 14:16:56 +0000
Files and hashes: 1: Ty_T8AtY8TSpqOPn3ajY0grANSc.crl (hash: vdjGBYjnSOXhx+po5m1RjWS/UjuExQJR/EvaefssUPM=)
2: 5D81654A561E11E7A4FFF329C4F9AE02.roa (hash: /gJ9ZwtzzOTKqCZBrZuocfhT4XIIICVgFwfqJxZhD14=)
3: 3869DF8A1C6011EEAF58FB61C4F9AE02.roa (hash: DmeP00Tglg1B2vHEmL9YYBPAmu6yzXlrGlk/VI9+C3Y=)
4: B5885EF852D411EC8C8CE26CC4F9AE02.roa (hash: K0D7rg55G2Vxgg4st1LsCOaUPeB0t55XfIkLwQZOLfU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13821 (0x35fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Validity
Not Before: Jun 12 14:16:56 2026 GMT
Not After : Jun 19 14:16:56 2026 GMT
Subject: CN=6a2c14d8-3c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:1f:57:f6:9d:84:75:ee:fd:5d:67:d8:ea:
d1:6d:c8:a2:81:8e:b2:3e:d3:ec:9b:a4:a2:64:db:
c0:cc:d1:21:c5:57:46:16:ac:58:59:bc:44:53:3c:
8c:23:56:94:d0:a8:52:6c:80:f6:c4:e1:0a:7c:f1:
24:80:bb:d8:ae:0b:a8:10:46:cd:16:fd:4d:7a:ca:
22:26:22:82:d9:d3:ae:38:a6:c6:33:0f:87:f7:e8:
dd:30:8f:26:44:79:de:f3:18:d8:86:c3:df:33:ed:
bd:c0:74:94:5d:a6:90:b0:77:39:db:2d:c9:5e:50:
3d:41:84:7f:82:60:ec:3d:9a:76:d2:c6:29:73:20:
49:e3:e3:3e:8c:34:0c:ef:68:23:fd:92:30:38:af:
4e:d5:55:70:8f:6a:e8:9d:2a:da:1b:cd:58:7e:f6:
31:16:65:c9:76:fa:6d:39:d7:a5:b8:45:6b:ad:de:
5b:09:b2:6e:eb:50:52:ec:3d:ea:91:88:9f:97:96:
71:72:74:d6:63:69:b1:24:9b:06:ab:f9:3b:40:59:
63:7e:1a:cb:ac:75:2e:e1:4e:16:9b:6d:98:8c:4e:
1c:cc:03:db:e1:ef:3c:61:ef:f8:59:e8:34:92:67:
c1:92:7d:88:8d:84:b9:e2:77:50:70:4c:88:b7:69:
39:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E0:BE:F0:4A:9F:97:E5:A5:67:3A:61:58:18:D9:22:3A:F0:EA:AC
X509v3 Authority Key Identifier:
keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:ca:0c:a4:11:f8:cd:68:a2:0c:ce:f0:37:91:a7:67:a3:14:
2d:45:71:4d:be:fe:fd:66:32:47:8a:62:06:d0:c4:45:1b:58:
59:8d:bb:ba:d9:31:c3:01:5d:27:33:87:0c:78:13:ba:d7:39:
ee:1a:03:9e:28:7c:14:0e:f3:75:17:c6:ac:0e:a9:d3:5d:5d:
99:b1:1e:09:b5:f0:2e:df:fd:07:4e:eb:ef:ce:83:70:d0:f6:
a2:a1:94:36:d2:e7:74:f7:4f:3a:50:76:c2:bb:24:78:f5:19:
6c:0c:f0:f3:16:78:d9:7c:2b:40:c4:af:63:a7:0d:d4:e2:30:
87:6a:e7:ec:2a:4e:90:3d:7b:c8:5c:55:ad:5c:7f:e5:19:51:
12:f1:af:42:30:b6:db:2e:eb:0f:51:c6:25:59:7c:8c:9c:4b:
68:45:86:96:21:a1:90:f3:f5:53:d2:bf:5c:70:37:50:44:32:
99:ea:47:d3:46:3d:8b:ae:8e:e1:ee:af:06:aa:64:48:76:51:
86:64:37:e3:7a:7a:07:e0:b8:f0:a4:b4:98:e0:02:d3:19:f9:
47:e9:18:72:d8:32:7b:54:5a:8b:ba:80:54:f4:04:62:63:62:
6d:a2:e2:c2:42:69:d1:63:33:21:03:8e:74:75:75:0b:4c:21:
e6:51:c0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:51:39 2026 by rpki-client