
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json)
Hash identifier: byraKGKO8dVZrx7pAfxrFfuL1uTMS9tnp+t2WZdauN4=
Subject key identifier: B8:E0:E6:AA:A6:99:98:A4:4B:D3:3E:44:CB:EC:12:2A:34:BE:90:48
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial: 0524
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
Manifest number: 04E8
Signing time: Fri 12 Jun 2026 23:58:04 +0000
Manifest this update: Fri 12 Jun 2026 23:58:03 +0000
Manifest next update: Fri 19 Jun 2026 23:58:03 +0000
Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: 7YO/KyRc3+62fysjYk1lkcrdqwfICrUB8D+i9y98YC0=)
2: 98CF37B28F0E11F0880D4780C4F9AE02.roa (hash: uKQ3Os5h8Ciy1ALccS2eT5zdXu6OgoHV6FkwnLjZ7Y0=)
3: 383B44025D9611F1B9265F2C96833773.roa (hash: EO2xxLUvNm7FBpTOWiIAm3NKdCmim8bp+YI/OdPLP8c=)
4: C3CDE52C01D611F1B315EDD8366F56BC.roa (hash: 3d/B1cImc/RFP7X2DoDqV9LtQ79OxGVpr8nJEv4LRf4=)
5: A6E8B05401D611F1A42696D7366F56BC.roa (hash: YEAiHBQjv0Zqw7hAyBqvx7s0VzUV/cItMf0F3kX5g2g=)
6: 8000E572494F11F1BF737F10BE833773.roa (hash: RSiETjjKzvCQ0UxbntfjXpMp1b8caiQTMLYifGRmsgs=)
7: 942DCEF2FC0B11F0BEECCDA4756F56BC.roa (hash: J5KApiO82LjzqeOhyJKbcpqwAb46zG+PlR5LTK867CE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:58:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1316 (0x524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Validity
Not Before: Jun 12 23:58:03 2026 GMT
Not After : Jun 19 23:58:03 2026 GMT
Subject: CN=6a2c9d0b-dee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:de:b3:95:c4:8a:68:02:1e:d4:72:40:9e:
4b:4e:39:cf:25:53:69:06:79:b5:db:75:6d:f1:87:
8d:b7:ee:fa:39:e8:f9:c4:44:1c:46:da:32:70:e9:
3b:6f:c8:3d:d1:60:ce:73:fe:b9:8d:21:a1:4a:4e:
69:f7:b0:f3:be:39:e0:53:a8:11:c3:fa:05:08:13:
cc:06:d3:e3:49:70:23:a5:f4:7b:2f:fb:76:91:48:
18:d6:d8:9a:63:36:68:ec:e4:18:a6:36:fc:37:95:
50:81:60:ce:7b:4d:5e:a5:53:1f:93:f6:20:77:e3:
15:e4:96:1b:7b:fc:6d:f6:fe:c0:60:b1:1b:5f:01:
35:60:88:3d:3c:58:18:9d:82:6d:18:f7:37:c1:30:
a8:2d:a8:7d:58:7f:31:cf:5c:26:33:63:4e:8c:c3:
a4:f9:2c:d9:69:f7:7b:d9:17:7b:11:57:8f:bc:fd:
b3:54:37:a3:7b:aa:bf:96:5d:81:92:4f:2d:76:e4:
86:dd:be:ea:cf:47:e8:d2:83:21:ba:2a:02:40:db:
6d:e7:cf:08:ed:08:7a:bb:44:42:f9:94:7e:b4:52:
a2:90:9d:3d:76:2f:17:fa:7a:23:f6:db:f7:52:67:
fb:a8:11:52:55:0b:6a:8d:6f:07:d6:7c:ac:16:8c:
7b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E0:E6:AA:A6:99:98:A4:4B:D3:3E:44:CB:EC:12:2A:34:BE:90:48
X509v3 Authority Key Identifier:
keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:49:44:6f:25:cb:18:3c:fe:b8:27:85:e8:1a:9a:bb:bc:6c:
6a:83:35:29:8d:1f:b2:24:a3:9a:94:7d:d6:62:6e:61:5b:5a:
c2:a0:ef:85:9e:eb:63:48:92:58:37:eb:26:24:6e:ea:8d:e0:
a4:f7:74:db:ee:28:3e:1c:9a:e0:14:89:50:9f:a8:8c:0b:7f:
e3:d9:f3:8a:98:b2:5c:2c:72:2a:53:f0:ad:81:dc:8a:75:3c:
53:96:45:42:ae:0d:57:ba:c6:ba:0a:32:6d:9c:87:9a:3a:5f:
05:25:c6:68:40:68:db:af:9f:76:ea:85:2e:3d:69:c4:e6:52:
4c:37:7d:25:01:83:81:7e:85:e4:bf:9f:4e:fd:b7:00:33:44:
91:ec:b4:df:50:31:f1:04:90:99:ae:ad:e2:13:da:37:e8:7d:
7f:fa:f1:1c:ab:af:de:66:4a:75:9d:f5:39:b7:34:53:a2:85:
38:68:02:58:ae:6d:d9:bd:5d:ae:91:e8:2e:9b:4a:94:cd:12:
cd:7c:fd:d5:dc:0a:20:74:c1:40:72:db:c0:48:4d:b8:2e:4b:
e9:69:cb:b9:2c:a6:a6:20:98:58:4b:1e:bc:9d:c4:51:b3:f6:
c9:e3:34:ec:56:2d:ea:25:f0:36:f6:23:f1:de:ce:72:20:53:
db:00:fe:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:11:50 2026 by rpki-client