
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json)
Hash identifier: shwZ+HSlhs46i2BdiRuQkiScbeJIfFVj8LtwPuT8DnA=
Subject key identifier: F6:03:CE:C0:91:80:81:EA:C0:07:DD:CA:DD:F0:68:1A:77:BD:A1:A6
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial: 056B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
Manifest number: 0528
Signing time: Sun 20 Sep 2026 23:34:44 +0000
Manifest this update: Sun 20 Sep 2026 23:34:43 +0000
Manifest next update: Sun 27 Sep 2026 23:34:43 +0000
Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: 0T4ebFuJuvdIGR9+/F6dp/Vq7z35BJmk/7/HBvs13K8=)
2: A6E8B05401D611F1A42696D7366F56BC.roa (hash: kH/loibssTw1SMlq4v4kn0TXgp71DRNjeiASfXICBKs=)
3: 2F793F64AC1911F1899FFC913311F970.roa (hash: TOGdUCSf1FUktkxbLQfTgHxXSfyAA99mDaspuQGpnTQ=)
4: 84D37FC6AFFF11F18E4DACF96311F970.roa (hash: crArvlb+Ze86ihALqTtqfNZ24fabeO5GjETbQL/fyLw=)
5: 98CF37B28F0E11F0880D4780C4F9AE02.roa (hash: uKQ3Os5h8Ciy1ALccS2eT5zdXu6OgoHV6FkwnLjZ7Y0=)
6: 0FA47F24751811F18B7B702072A30FBC.roa (hash: pV3GPCRI6eTouBuUqNrjOnvugz77VcQii6lWuzsU7aE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1387 (0x56b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Validity
Not Before: Sep 20 23:34:43 2026 GMT
Not After : Sep 27 23:34:43 2026 GMT
Subject: CN=6ab06d94-3587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:cf:2a:d2:3e:65:8a:10:0d:59:18:b8:00:
77:1a:fa:ff:10:93:1d:3e:5d:91:95:72:e8:f7:0d:
78:b8:94:d4:0f:06:fc:df:2d:92:db:24:dc:ee:38:
35:bb:86:d0:62:de:4f:f8:04:bc:a4:4e:82:7f:d8:
b0:46:4e:78:8b:fd:3e:39:30:a9:26:58:ae:6e:88:
c8:7b:97:47:8b:6a:e6:0d:b9:85:77:db:43:24:03:
a1:6a:e4:c3:d1:43:f0:4a:05:9b:22:fd:32:90:5b:
ab:32:65:fe:4c:03:23:e6:41:b9:e8:57:35:9d:2b:
27:18:50:69:3e:ac:fe:c6:75:3d:d8:80:bb:4b:c2:
69:12:32:91:6f:9a:72:98:b2:9f:f3:40:a6:30:56:
88:68:17:f3:2c:60:23:c2:f1:c4:02:80:89:6a:2c:
d5:cc:a3:f0:e7:a8:08:61:56:f5:66:56:2d:44:d0:
13:5e:39:56:33:1a:3f:e0:a8:2a:78:57:ce:ee:8a:
c2:07:a5:75:e3:bb:5f:dc:af:5d:2e:e4:fc:06:01:
77:e7:e8:76:e9:3a:5d:1b:8c:80:7b:72:80:c1:3e:
8a:b7:75:f3:15:4b:55:ae:e1:00:59:93:98:31:46:
7c:d3:ef:39:35:68:fb:a6:2d:1d:7e:f5:40:13:37:
b1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:03:CE:C0:91:80:81:EA:C0:07:DD:CA:DD:F0:68:1A:77:BD:A1:A6
X509v3 Authority Key Identifier:
keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:66:41:3f:2c:6c:2e:9e:e9:11:82:cf:3d:2f:cf:a6:c8:1f:
f5:89:12:25:c5:5a:ec:de:08:9c:05:38:27:0f:7d:19:5a:7f:
95:91:5c:2d:a9:e7:af:dd:13:49:be:78:5a:91:14:b3:55:79:
7d:ca:5b:4d:38:25:ae:0b:4d:72:0b:b0:2a:0e:7c:3e:3b:2e:
24:80:74:ea:ad:08:e6:27:04:49:c4:e6:36:d5:18:9b:53:71:
fd:aa:d7:49:fb:da:72:11:17:98:0e:7b:a9:fc:5d:12:90:10:
49:b3:9a:96:ba:a8:4f:8b:be:d8:7c:e6:cc:12:21:d4:e5:93:
ce:38:1e:ad:fa:c6:d0:f1:c7:fc:6b:85:0c:84:b8:03:39:38:
3f:06:5e:7f:b4:b8:32:fb:f5:be:b8:63:8c:40:6b:99:35:7e:
be:f3:53:99:6f:db:70:50:f1:3a:02:61:c5:f6:b4:3b:2d:8f:
08:a1:49:e5:0b:d1:91:7b:74:78:f8:8c:db:54:55:7a:fe:48:
a8:09:a8:e5:cb:a1:49:d3:a6:9b:bd:62:80:59:f8:21:cf:fd:
36:77:24:2b:b2:e9:c1:e9:35:a8:84:e9:a1:35:2e:25:de:ca:
46:73:35:43:92:b1:74:2a:3b:23:d5:18:7a:c6:5b:6d:87:b5:
9c:11:06:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:08:18 2026 by rpki-client