
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
File: tsy15DHkUBkVDE83IfT4Cm8u19s.mft (raw, json)
Hash identifier: ke6R00Iq3kXeHtpS5e1/u5DKhG+uuZgbyLCokCFPegM=
Subject key identifier: 18:11:9A:7E:8C:C6:8B:E4:AD:FC:50:AB:DD:61:73:32:CD:EA:9C:7B
Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
Certificate issuer: /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Certificate serial: 07D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
Manifest number: 07AF
Signing time: Mon 02 Mar 2026 02:36:32 +0000
Manifest this update: Mon 02 Mar 2026 02:36:30 +0000
Manifest next update: Mon 09 Mar 2026 02:36:30 +0000
Files and hashes: 1: tsy15DHkUBkVDE83IfT4Cm8u19s.crl (hash: GxoZgOlj2PH0ufGA5wkMn1vSAAlxArhgoZ+oGpa36gk=)
2: 2574266EAA4911F09A71D135C4F9AE02.roa (hash: Yq5oiH0EmhCavwCaD+J0apl3DbYBY7zFMqkNNlPV3Kc=)
3: BC04E5745E4E11F082F8D529C4F9AE02.roa (hash: +n6sT0DNVEtTay2c7eDEYpMLVSmyIfomBjZvDH6GPyg=)
4: E181BAA059DD11EF9C39750CC4F9AE02.roa (hash: wNwawcsHbM0YHaF0zdZbSvwLiLwGJzedMyT2pC2bOpg=)
5: 48EFF31A621B11EF8FB5117AC4F9AE02.roa (hash: 67g+qKVwsfhFWOuOMEWITQ1nmAIPrEarQJhLRzQm0IY=)
6: C098EF8E499811EFBB8C701EC4F9AE02.roa (hash: uB385efdqTb3/LugdWT8rNVy3FgK+9CSA2XsUkIjqtY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2009 (0x7d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186513, serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Validity
Not Before: Mar 2 02:36:30 2026 GMT
Not After : Mar 9 02:36:30 2026 GMT
Subject: CN=69a4f7b0-84b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a9:a8:6b:67:8d:18:6b:46:d4:59:29:41:0f:
1c:e4:df:9f:ef:50:29:1a:66:04:9d:f9:c4:dc:65:
bd:b0:70:36:33:e4:d1:85:d6:12:b0:ce:b9:4b:aa:
a3:dc:b6:fb:c6:d0:4f:03:bf:2c:a4:6a:55:04:57:
74:ec:a1:53:f4:db:37:aa:b9:4a:0e:61:85:4e:44:
77:ec:92:be:46:66:b1:45:1b:d1:21:47:7e:98:60:
4e:40:55:3e:13:b4:a2:8a:d1:61:1b:29:de:8f:69:
95:f2:f8:16:0e:e5:49:1c:96:a3:22:b9:d2:a5:d6:
df:fa:02:6e:61:b6:90:89:f6:17:c5:c6:de:d2:1d:
82:0b:0c:0c:bc:00:21:53:33:5f:81:00:33:55:ce:
ae:25:36:ab:61:3b:d1:d1:f9:72:56:ba:65:f2:41:
ef:2d:9e:43:07:fb:70:a8:0b:bf:32:18:6c:8f:0f:
8f:71:d4:7a:fb:f1:25:10:30:27:00:f7:b3:1a:d1:
7b:d8:5a:50:60:89:28:96:e4:40:74:55:7f:f4:ac:
56:3e:fa:75:6f:1e:9d:76:94:2b:e2:de:30:93:ea:
24:f7:96:8c:1a:8e:ca:0b:62:c5:58:e1:39:99:8a:
38:f2:34:21:b6:b0:a1:bd:68:60:76:4f:fb:69:de:
15:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:11:9A:7E:8C:C6:8B:E4:AD:FC:50:AB:DD:61:73:32:CD:EA:9C:7B
X509v3 Authority Key Identifier:
keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:cc:bc:7f:4d:a7:c4:81:a2:0c:5a:14:42:38:a0:56:89:98:
29:b2:4f:be:e3:8e:cc:5c:1a:56:18:aa:d1:ec:7c:8a:65:e7:
a3:cc:be:d1:f7:9f:ac:5b:1a:1c:9d:7d:e2:64:6b:ee:71:3f:
d7:7e:3f:3a:73:40:f6:eb:d2:c0:fb:9d:fb:7b:31:3f:fb:08:
11:f5:83:be:b1:31:53:62:dc:a9:a4:1e:72:78:88:50:0f:c8:
f1:0b:74:82:18:48:49:c2:0c:a1:e7:15:0a:6e:e0:ba:49:ec:
ca:0a:de:8b:8f:fb:44:c9:6d:3d:ce:79:d9:c7:34:1f:a8:e1:
73:cc:18:d3:2b:f3:1b:20:73:61:d6:43:62:e6:9a:b8:87:a6:
f6:31:35:e4:43:36:bb:59:de:fb:33:00:68:c6:d0:f5:32:00:
71:4b:73:3f:5a:9e:3c:a3:f9:8e:25:99:12:e8:67:6a:b2:ab:
05:1f:af:15:0f:94:60:ef:01:22:a5:d0:23:45:f9:bd:3f:da:
67:e6:60:59:c9:41:29:02:4c:c8:f2:58:03:3c:0b:cc:cc:f6:
53:d6:95:5a:58:f4:8b:d0:c9:39:a6:15:df:b3:ee:b8:bc:e0:
91:22:01:ee:40:7e:e0:ba:35:1c:4f:3c:96:f7:72:c0:c3:cd:
b8:6e:7d:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY1MTMxMTAvBgNVBAUTKEI2Q0NCNUU0MzFFNDUwMTkxNTBDNEYzNzIxRjRGODBB
NkYyRUQ3REIwHhcNMjYwMzAyMDIzNjMwWhcNMjYwMzA5MDIzNjMwWjAYMRYwFAYD
VQQDEw02OWE0ZjdiMC04NGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Kmoa2eNGGtG1FkpQQ8c5N+f71ApGmYEnfnE3GW9sHA2M+TRhdYSsM65S6qj
3Lb7xtBPA78spGpVBFd07KFT9Ns3qrlKDmGFTkR37JK+RmaxRRvRIUd+mGBOQFU+
E7SiitFhGynej2mV8vgWDuVJHJajIrnSpdbf+gJuYbaQifYXxcbe0h2CCwwMvAAh
UzNfgQAzVc6uJTarYTvR0flyVrpl8kHvLZ5DB/twqAu/Mhhsjw+PcdR6+/ElEDAn
APezGtF72FpQYIkoluRAdFV/9KxWPvp1bx6ddpQr4t4wk+ok95aMGo7KC2LFWOE5
mYo48jQhtrChvWhgdk/7ad4VUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBgRmn6M
xovkrfxQq91hczLN6px7MB8GA1UdIwQYMBaAFLbMteQx5FAZFQxPNyH0+ApvLtfb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjUxMy9DMkJBNkJGMDQy
MDExMUVCQUJGRDVFNjBDNEY5QUUwMi90c3kxNURIa1VCa1ZERTgzSWZUNENtOHUx
OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RzeTE1REhrVUJrVkRFODNJZlQ0Q204dTE5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjUxMy9DMkJBNkJGMDQyMDExMUVCQUJGRDVFNjBDNEY5QUUwMi90c3kxNURIa1VC
a1ZERTgzSWZUNENtOHUxOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1My8f02nxIGiDFoUQjigVomYKbJPvuOOzFwaVhiq0ex8imXno8y+0fefrFsa
HJ194mRr7nE/134/OnNA9uvSwPud+3sxP/sIEfWDvrExU2LcqaQecniIUA/I8Qt0
ghhIScIMoecVCm7guknsygrei4/7RMltPc552cc0H6jhc8wY0yvzGyBzYdZDYuaa
uIem9jE15EM2u1ne+zMAaMbQ9TIAcUtzP1qePKP5jiWZEuhnarKrBR+vFQ+UYO8B
IqXQI0X5vT/aZ+ZgWclBKQJMyPJYAzwLzMz2U9aVWlj0i9DJOaYV37PuuLzgkSIB
7kB+4Lo1HE88lvdywMPNuG59oQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:00 2026 by rpki-client