
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
File: TYR1I-W92eO4lpgooEv-2isMAxs.mft (raw, json)
Hash identifier: eb3eP+1MKSc6MpsALfCYAyOBz64AZm1cnKeHlqgJRC4=
Subject key identifier: F4:52:16:58:EA:AA:14:F6:55:AE:EB:34:02:98:70:F4:87:57:E4:F9
Authority key identifier: 4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B
Certificate issuer: /CN=A91AC726/serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B
Certificate serial: 07EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
Manifest number: 07CC
Signing time: Thu 16 Apr 2026 21:18:07 +0000
Manifest this update: Thu 16 Apr 2026 21:18:07 +0000
Manifest next update: Thu 23 Apr 2026 21:18:07 +0000
Files and hashes: 1: TYR1I-W92eO4lpgooEv-2isMAxs.crl (hash: DzYpeJfwXStDiI7iZTc7RX5lwPFe4wA6rwYqSvdbQ50=)
2: A8D1E0DE688811ECBE2C4F49C4F9AE02.roa (hash: UClPHshsGcyvq7g9LcOIEJ85L9Tn1p+WoRxD1Wzjhl0=)
3: CA9D82E8688511EC999E8B70C4F9AE02.roa (hash: ZSWT8bBIoiXkk5NHfAcRN305gYra6U3TCXFXnnRK7rU=)
4: 52EFDBAE687D11ECBF82F558C4F9AE02.roa (hash: vlQE6zfU8sldRsawycgscMRN/+d6UAyhTBqyJZ13gKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl
rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2026 (0x7ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC726, serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B
Validity
Not Before: Apr 16 21:18:07 2026 GMT
Not After : Apr 23 21:18:07 2026 GMT
Subject: CN=69e1520f-7949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:3b:38:9c:0a:bd:23:0f:02:d4:98:12:28:
8f:c9:6d:be:f6:1f:13:52:ff:6a:fa:91:1d:ce:04:
4f:78:cb:79:e6:34:2c:37:a6:39:56:c2:81:bd:a9:
cf:ac:11:b2:43:50:31:0c:ac:03:8b:83:c6:a5:44:
9c:bd:09:42:d5:2a:8a:ce:a3:10:ad:b3:b8:a1:44:
f5:ef:92:87:d3:b4:88:a6:f2:68:fe:fb:48:41:89:
a4:46:69:df:98:8b:bf:d8:22:18:78:9b:5f:2c:5d:
a4:31:2c:c9:7f:b2:0a:32:74:70:5a:2c:4b:42:c3:
7d:f4:48:34:d5:4a:c6:ea:f3:3c:26:14:99:51:7c:
bf:4c:42:09:8b:d4:f3:b2:d9:1a:5d:c3:68:9d:63:
bc:8e:69:27:a9:31:a0:d7:72:98:95:b4:e1:36:09:
c3:8e:cf:54:9c:16:f2:e3:94:58:1f:f9:3f:58:fc:
e2:6b:1e:8b:e6:2e:24:f9:e2:30:e2:7f:cc:d0:ba:
f0:a2:21:41:68:3d:4a:20:e7:10:c0:46:67:75:63:
09:eb:9e:68:cd:35:79:88:e4:bf:8c:e5:9b:35:4e:
a7:b7:b9:68:c3:c7:a4:d3:35:3e:50:2d:9f:0b:6b:
02:6f:50:c6:39:55:85:67:5e:e2:c1:60:b6:17:1d:
12:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:52:16:58:EA:AA:14:F6:55:AE:EB:34:02:98:70:F4:87:57:E4:F9
X509v3 Authority Key Identifier:
keyid:4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:50:84:8b:1b:33:e5:d9:a4:8c:ef:7e:ea:93:0b:a0:be:9e:
76:86:fe:19:83:77:da:51:d0:fb:8e:95:19:58:ec:e0:9a:3d:
be:66:70:44:b4:73:b1:5c:48:27:e9:4a:ed:b7:43:70:dd:8a:
f5:8e:56:96:bf:f3:53:2c:90:11:c4:2f:b4:ce:85:59:93:94:
d9:15:8c:11:d8:e3:09:f7:dd:5f:67:a1:d0:5a:5c:77:74:e5:
4e:1d:85:b2:2f:5d:b0:e6:4e:41:30:b7:86:c2:a4:fd:ce:d8:
a0:a1:41:c8:a3:00:95:7f:78:e1:e7:46:e0:e1:88:3a:62:47:
8a:a3:4b:da:21:d9:64:6e:33:04:64:48:6d:4c:0a:4b:ac:85:
de:99:39:c6:b3:78:27:ad:c1:03:2d:3f:65:b7:7a:16:0a:84:
a2:c0:9d:5a:15:8c:ea:17:38:71:ed:65:82:89:ea:ca:c7:51:
ef:c7:77:93:c0:f3:0a:cf:8d:e5:93:89:a5:ef:cd:ef:3f:71:
19:a6:5e:c8:8e:1f:6c:5d:03:d5:d4:7d:fc:01:d6:20:83:00:
7a:7a:76:f1:3a:e7:59:ae:f8:f7:65:eb:d0:e5:cb:7f:08:3f:
b5:6e:11:19:52:b7:46:70:5a:96:ac:01:97:cc:49:1d:d3:f3:
b2:11:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:04 2026 by rpki-client