
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
File: TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft (raw, json)
Hash identifier: XQsTj/qtTDPoj9kTRBeyWTCGmxzPxZpuYFndRHsBTKw=
Subject key identifier: 32:44:0B:B5:52:63:DD:66:AF:0B:FB:69:95:77:7A:B2:5A:88:24:5D
Authority key identifier: 4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB
Certificate issuer: /CN=A918E951/serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
Manifest number: 77
Signing time: Sun 01 Mar 2026 09:09:46 +0000
Manifest this update: Sun 01 Mar 2026 09:09:45 +0000
Manifest next update: Sun 08 Mar 2026 09:09:45 +0000
Files and hashes: 1: TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl (hash: AeHJPDxDeO2PNVsKaRghC61+tD/K7LuSe2kky03I2Do=)
2: A24902C8623B11F0BEB49510C4F9AE02.roa (hash: 1rdsiyPcI00KSV/hreF4AXkXOxk2hHL3dZ7PhIJoG0c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl
rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:09:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E951, serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB
Validity
Not Before: Mar 1 09:09:45 2026 GMT
Not After : Mar 8 09:09:45 2026 GMT
Subject: CN=69a40259-7af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:b7:89:fc:53:e0:05:43:b9:cd:d7:94:48:
86:ea:d7:79:a5:3a:61:ec:a5:86:49:a0:48:6b:ac:
11:4c:50:11:fb:81:f6:f9:51:e2:0b:20:09:da:75:
2f:6c:4d:a1:ef:6d:29:21:23:66:ee:bd:c5:45:55:
26:1f:38:ed:36:33:50:ae:59:90:f5:f9:14:fa:f8:
b0:a6:1c:f5:82:e2:b8:c9:4d:f6:3d:7d:d9:30:84:
12:24:5e:c8:6c:58:3c:18:15:12:9e:0d:13:ee:d3:
ae:50:69:af:c4:e4:e8:6e:d7:9b:f1:50:93:00:49:
be:e7:4c:57:c1:a2:95:a0:be:9d:9a:94:ef:fb:07:
79:fd:6b:73:1c:6f:c6:99:43:d4:68:2f:bd:e3:22:
3d:a8:8e:bd:6a:b2:31:7d:99:54:10:58:38:43:4e:
22:4d:a2:77:91:56:95:9e:84:a4:4b:10:c1:76:b5:
eb:85:65:34:5c:68:b2:84:48:ec:65:a3:23:49:47:
11:fd:b1:dc:75:3e:1a:55:a3:f0:32:71:f4:c7:d2:
d6:00:73:a3:6b:ae:4c:af:f3:d8:39:35:28:c6:a2:
65:fe:e5:17:e2:b8:f0:a1:a0:cb:1d:dc:de:09:d2:
c7:31:41:24:c1:4e:79:eb:49:ea:ba:4a:e1:16:b9:
a1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:44:0B:B5:52:63:DD:66:AF:0B:FB:69:95:77:7A:B2:5A:88:24:5D
X509v3 Authority Key Identifier:
keyid:4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:35:e5:de:2e:2f:59:45:40:fb:83:67:d0:4c:0a:a2:86:73:
fa:41:89:dd:a6:bd:fc:c0:29:08:96:4f:18:d0:01:3c:d4:22:
88:a6:d8:b7:73:47:d5:a8:76:1b:d3:40:fb:c5:e0:f9:d6:4f:
e8:0d:09:0f:26:b9:5f:c9:99:50:e1:99:8c:c4:d6:02:1c:3b:
5e:ce:38:ab:c5:34:05:0f:71:31:41:8b:17:03:3e:cf:75:ad:
a0:f2:db:80:14:ab:77:38:ee:f0:cc:61:ca:d8:ec:12:3a:b9:
e1:a5:ad:88:aa:2d:e2:f9:d0:1c:ba:0b:e1:ae:7c:5f:35:88:
7a:8d:be:bf:6f:49:a5:83:a6:75:e8:3f:bd:c6:eb:f3:9f:09:
8a:2f:e2:ff:22:01:74:ec:d0:30:ae:2e:12:19:ac:1b:66:a3:
27:10:48:e4:5e:a5:87:7e:4a:e5:ef:a1:c9:18:62:93:1e:c4:
09:7e:55:9f:05:ad:2e:65:4f:29:0b:62:48:c0:8d:69:e3:74:
b3:5b:25:1f:94:35:9a:dd:f7:4f:b2:ac:bc:9a:0e:3f:ae:b1:
22:b9:ea:50:5d:bb:13:00:1e:89:a1:b6:cf:31:41:94:dc:7e:
d0:60:cb:57:cd:46:16:b2:e2:6a:db:46:62:65:7c:5e:e8:57:
04:a4:8d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:48:17 2026 by rpki-client