
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
File: Ty_T8AtY8TSpqOPn3ajY0grANSc.mft (raw, json)
Hash identifier: CDC+WP5sh8xDjgAQDpo+CCjRZONvT/Xu+9/8gbQTfok=
Subject key identifier: 31:56:2A:32:40:FE:D9:ED:77:F6:45:92:34:DE:F1:E7:2E:78:D4:7F
Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
Certificate issuer: /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Certificate serial: 359A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
Manifest number: 3557
Signing time: Sat 28 Feb 2026 14:17:26 +0000
Manifest this update: Sat 28 Feb 2026 14:17:26 +0000
Manifest next update: Sat 07 Mar 2026 14:17:26 +0000
Files and hashes: 1: Ty_T8AtY8TSpqOPn3ajY0grANSc.crl (hash: R9fSIfRe4aYV3WXS/wKRdrcSvHC+tSju2DyCup2uOE0=)
2: 5D81654A561E11E7A4FFF329C4F9AE02.roa (hash: KsAXbBAtUhVz+UVmegsopThNl/Mv9RZcafSTJFJXVt4=)
3: 3869DF8A1C6011EEAF58FB61C4F9AE02.roa (hash: na6D5MT1LprX316cXbP/lhvtb/2BzuNUnH7V1pK1SnQ=)
4: B5885EF852D411EC8C8CE26CC4F9AE02.roa (hash: KSd87kYfN+cVDiwWy8vlRr1Y12RS3oWEKFNDzPhKEAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13722 (0x359a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Validity
Not Before: Feb 28 14:17:26 2026 GMT
Not After : Mar 7 14:17:26 2026 GMT
Subject: CN=69a2f8f6-c310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c7:26:4a:ac:3c:33:f9:88:cf:a5:30:77:48:
2e:f9:0f:6c:e8:9f:b2:26:45:f3:47:b6:e9:45:19:
e4:01:7b:f0:96:5f:91:b3:22:2a:b4:46:84:89:8d:
b4:68:92:f3:7a:79:61:2c:c9:29:d0:62:3b:f8:d2:
9a:b2:69:6e:e9:5f:39:38:66:3a:9c:e3:08:8c:b2:
12:cb:7c:d7:19:fe:43:b5:78:63:4b:e2:5b:d5:51:
34:b5:9f:44:2b:82:49:37:0b:cf:c6:11:ae:b8:6c:
ac:85:83:93:32:68:13:c3:6a:bd:2b:b4:1b:3a:75:
7c:81:8f:e3:ef:b2:cf:3f:49:7b:9b:e7:78:be:1f:
9c:c4:26:68:3a:09:ab:95:f6:73:2d:71:49:fd:55:
41:7c:8e:7c:5a:aa:19:ce:48:82:31:09:b8:0c:45:
a4:af:87:10:ca:80:90:7c:cb:09:ce:dd:c6:b8:c5:
4f:88:31:b2:10:6e:71:29:10:77:7a:01:a0:4c:2b:
9f:62:15:e7:01:90:06:11:fd:ba:5d:5c:d0:e1:fa:
15:a7:9d:2b:51:1c:79:3b:73:ab:72:60:8d:93:8d:
76:15:8b:f2:fc:33:09:19:4c:4b:59:be:b5:bf:61:
35:5f:71:d8:1e:b4:cf:a7:e1:99:4b:e2:57:d4:3b:
0f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:56:2A:32:40:FE:D9:ED:77:F6:45:92:34:DE:F1:E7:2E:78:D4:7F
X509v3 Authority Key Identifier:
keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8c:7a:89:07:63:77:df:01:54:65:15:a0:ea:40:a6:a2:1e:
f2:80:a6:b4:2f:75:0b:c6:f7:1a:83:08:df:95:3a:24:33:14:
10:97:91:11:ae:4c:c7:a0:ce:c6:e5:f5:1e:03:04:c3:38:d7:
f9:31:ab:cc:77:cd:cd:80:c3:bd:e0:18:d5:78:f3:a3:6c:92:
48:fe:97:41:1c:1b:58:a3:12:1d:86:5f:85:e2:cb:f9:52:97:
6e:09:f3:ee:f1:01:cb:ad:b1:a4:48:b1:fc:89:b3:7f:a8:6e:
40:81:ec:8d:71:1d:3b:a9:17:3f:97:73:b6:b3:1d:0d:11:56:
7a:f7:e3:75:e2:65:62:bd:20:30:a5:fe:c8:47:55:d7:0f:22:
cc:e4:86:f0:4f:e9:10:05:6f:fc:d8:d3:00:34:fc:df:4f:28:
e2:a7:c8:b5:2c:0c:c9:e4:db:dc:86:83:e0:87:56:e0:4f:5a:
fd:84:db:4b:e7:76:ab:dc:1f:ce:83:89:60:6a:99:8e:a8:f0:
02:21:bc:55:c8:32:3b:5c:60:f6:33:a1:bb:c2:1b:0e:2a:e8:
39:00:60:a4:b7:66:45:79:c3:6b:60:4f:de:ce:3f:10:64:76:
2e:49:41:14:53:a9:5b:b9:2d:df:55:58:3f:43:8e:f5:ad:0b:
f0:49:af:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:10 2026 by rpki-client