
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
File: TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft (raw, json)
Hash identifier: AWJitLINwvvA8mufFIJf7VcA/hbzjTL8bToSwN8a7ZA=
Subject key identifier: E9:A9:88:15:16:8B:1F:B0:5F:5A:0D:30:33:70:CC:8F:32:5C:D6:EA
Authority key identifier: 4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB
Certificate issuer: /CN=A918E951/serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
Manifest number: 8F
Signing time: Fri 17 Apr 2026 07:15:26 +0000
Manifest this update: Fri 17 Apr 2026 07:15:26 +0000
Manifest next update: Fri 24 Apr 2026 07:15:26 +0000
Files and hashes: 1: TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl (hash: KqW+SqW/wQIDBw7uuaYqWDoPN9tiFeQDaWOZMtVjSio=)
2: A24902C8623B11F0BEB49510C4F9AE02.roa (hash: 1rdsiyPcI00KSV/hreF4AXkXOxk2hHL3dZ7PhIJoG0c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl
rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E951, serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB
Validity
Not Before: Apr 17 07:15:26 2026 GMT
Not After : Apr 24 07:15:26 2026 GMT
Subject: CN=69e1de0e-47c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:58:bf:7b:35:45:1c:4f:5f:55:cc:2f:82:
b4:7d:ff:21:fc:04:12:fc:53:99:bc:2c:5e:e5:1b:
a8:3a:0f:f3:74:b0:30:59:e2:05:7b:c2:a3:a5:d9:
2f:1a:5a:f8:4d:bf:11:56:91:c7:a3:df:a8:c7:ec:
88:62:d4:32:b2:86:74:f2:ea:06:7e:98:c9:40:82:
01:f7:3a:29:b4:42:aa:98:51:c3:fc:12:5c:c3:cd:
f7:07:ce:e8:44:37:9d:68:5c:19:87:fa:23:0e:08:
7a:74:89:87:f0:c7:14:84:a0:0b:c4:58:16:55:a2:
46:94:d5:53:c0:0b:50:70:a4:b6:7a:c1:89:16:d8:
6a:54:13:62:4c:88:37:33:4a:15:7b:30:09:b5:e3:
60:2c:92:7c:cf:2a:de:57:53:0b:7a:f3:3e:03:3f:
53:a7:9a:64:4f:41:ed:59:53:ca:da:f9:5b:2e:d9:
3a:6d:21:92:4f:1f:93:ca:b1:72:d1:74:e4:b4:52:
bf:2f:1b:1f:17:76:af:5b:16:33:b2:92:c9:05:2d:
01:8e:8d:68:ef:41:c5:c6:7a:26:89:69:ca:0a:6d:
69:10:63:19:74:b6:08:e5:4b:b5:cb:3e:20:0a:47:
46:0f:58:8a:e1:b0:76:50:2d:4f:fd:bb:10:be:c5:
c2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A9:88:15:16:8B:1F:B0:5F:5A:0D:30:33:70:CC:8F:32:5C:D6:EA
X509v3 Authority Key Identifier:
keyid:4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bd:b3:d0:64:5e:70:eb:6c:07:bb:92:0d:e8:68:a8:00:f1:
13:db:f2:e6:d5:53:6a:71:64:62:30:7e:e1:e1:08:1c:8f:d7:
e7:11:86:5a:f0:a8:a6:13:81:54:c4:1d:50:ec:0f:cd:ed:ee:
54:64:58:b0:d4:b4:9b:c5:42:68:d6:c7:02:99:f6:19:be:ea:
7b:2f:44:3b:b4:5d:0c:f9:ae:a0:36:ca:7c:94:74:96:19:f6:
64:2c:59:8e:87:27:eb:2b:50:28:6d:24:82:ba:94:8b:0f:c8:
d8:41:ed:6b:98:aa:b4:57:1f:d0:c4:e6:13:f9:45:24:45:83:
67:0b:cf:80:cc:cc:94:b6:43:84:83:61:2e:80:52:de:80:5f:
9f:d8:d9:1f:d5:96:0a:00:69:20:8c:d1:f9:08:ba:7c:58:0e:
b7:d9:c4:3b:c6:1e:01:5a:22:34:75:fb:f9:db:e4:e7:62:20:
8a:d7:b2:da:01:eb:c2:d7:69:bb:cc:29:5c:37:b9:a0:fa:9e:
83:5b:1b:9b:33:eb:dd:e3:22:d8:84:85:c6:3c:d0:ff:d2:41:
8c:60:c0:8f:50:5a:ae:df:88:48:6e:f8:16:f1:01:ac:9c:cc:
99:89:0c:fe:2b:8c:75:f3:c1:5c:eb:c9:b1:63:d7:30:8a:dd:
33:1e:a0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:03 2026 by rpki-client