
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
File: TyFhsA_Cs23gqCRPCvKBQnkChg4.mft (raw, json)
Hash identifier: FyWKUbgjb1wJtOiuO/RHDOxQFgeQ3+sJK93/rcXl7zY=
Subject key identifier: 53:2F:E3:09:B1:E5:49:2F:8F:62:58:F8:6E:C6:CE:0B:64:99:B4:44
Authority key identifier: 4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E
Certificate issuer: /CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E
Certificate serial: 0A9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
Manifest number: 0A93
Signing time: Tue 28 Jul 2026 19:53:31 +0000
Manifest this update: Tue 28 Jul 2026 19:53:31 +0000
Manifest next update: Tue 04 Aug 2026 19:53:31 +0000
Files and hashes: 1: TyFhsA_Cs23gqCRPCvKBQnkChg4.crl (hash: oZcuiFh4moMHBGaCJniwJPCIUMBCkN1XjAc0IaBkxvA=)
2: C09BAC8E860011EABD37250EC4F9AE02.roa (hash: 6IXTKp13HuxMWhW3hn1g3ZSbEaBP+PUeVbQIJFfugEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl
rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:53:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2715 (0xa9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C19F7, serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E
Validity
Not Before: Jul 28 19:53:31 2026 GMT
Not After : Aug 4 19:53:31 2026 GMT
Subject: CN=6a6908bb-3da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c2:f6:99:6a:1c:d6:4e:44:00:d4:cc:60:1e:
91:90:fd:15:c6:ee:dc:f3:6f:01:07:ec:a0:92:66:
e3:7e:4e:43:75:40:85:e1:3d:f4:8f:b5:df:16:2c:
9c:9a:cf:4b:1f:5c:59:84:69:99:5a:98:24:ed:21:
9d:8a:22:fa:1c:13:3e:0e:2e:16:09:4a:c2:c8:d8:
87:23:ea:9c:fe:47:d8:27:96:f3:b1:ce:1f:37:3a:
0d:87:a0:cd:5e:8d:b0:dd:04:a4:84:f3:9f:54:54:
e3:15:f1:67:a6:e7:59:71:8e:6e:45:63:fe:94:e9:
d3:22:a7:db:ea:8d:cc:a0:2f:69:9c:83:52:c9:33:
87:57:fc:89:da:be:02:1c:b2:48:41:73:c0:ef:3c:
66:96:49:28:2d:59:18:4d:1e:e3:8a:bc:4c:12:2f:
38:fe:b6:56:d9:d7:53:89:e9:03:2d:a7:4f:d4:8c:
72:76:b5:c1:8f:71:d6:ac:3c:27:78:b0:c2:f3:1a:
96:9a:46:2c:95:26:fc:6c:dd:30:d3:8f:4a:60:74:
f4:2a:04:e6:44:fa:76:3d:58:b8:49:a0:fa:8b:8a:
cd:87:39:76:a5:88:a4:11:9b:06:1d:97:49:a9:d9:
51:07:72:bd:0e:db:6b:b5:98:b5:2a:9b:fb:8c:17:
d7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2F:E3:09:B1:E5:49:2F:8F:62:58:F8:6E:C6:CE:0B:64:99:B4:44
X509v3 Authority Key Identifier:
keyid:4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5d:52:76:97:3e:e3:26:b8:64:54:ed:29:46:cc:26:6e:a7:
7f:0a:f3:6f:c3:71:2f:6a:53:16:73:8d:0f:ae:f1:18:72:cf:
1b:71:52:44:7b:0a:ce:6c:f5:f1:9c:11:7a:47:1f:e8:de:4c:
ad:17:17:42:a2:8a:3c:49:97:ea:51:0b:09:9d:21:ea:c8:aa:
1a:f0:c2:86:94:55:00:f1:e0:f5:74:17:8c:77:26:43:71:51:
21:b4:64:5f:9d:ca:9a:e2:c9:2c:f7:30:40:8d:94:06:4c:0b:
7f:98:b6:4a:0b:37:bf:fd:a9:06:00:4d:fd:3e:3d:e8:f6:97:
8f:51:d7:2d:b7:6c:c0:bc:72:ab:9b:b9:db:8e:a5:8f:fe:41:
da:ed:98:25:fd:dc:f1:28:70:f7:76:ba:65:b4:aa:14:35:6d:
c0:fe:a9:12:f0:f5:97:13:71:f7:b3:9c:6b:ff:e2:be:32:f2:
d2:fe:69:1a:77:ae:d6:8e:63:62:59:36:e6:a7:5c:15:92:dc:
cc:2f:93:3f:ad:d6:c3:c0:d2:db:4c:22:bb:4e:cf:59:ee:90:
47:5c:e2:44:8b:57:69:d5:b7:cf:5e:69:62:5d:67:76:e5:4d:
2e:1a:51:fc:a2:f9:73:30:8e:9d:c1:68:02:d4:22:ca:27:99:
a4:c8:cd:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE5RjcxMTAvBgNVBAUTKDRGMjE2MUIwMEZDMkIzNkRFMEE4MjQ0RjBBRjI4MTQy
NzkwMjg2MEUwHhcNMjYwNzI4MTk1MzMxWhcNMjYwODA0MTk1MzMxWjAYMRYwFAYD
VQQDEw02YTY5MDhiYi0zZGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz8L2mWoc1k5EANTMYB6RkP0Vxu7c828BB+ygkmbjfk5DdUCF4T30j7XfFiyc
ms9LH1xZhGmZWpgk7SGdiiL6HBM+Di4WCUrCyNiHI+qc/kfYJ5bzsc4fNzoNh6DN
Xo2w3QSkhPOfVFTjFfFnpudZcY5uRWP+lOnTIqfb6o3MoC9pnINSyTOHV/yJ2r4C
HLJIQXPA7zxmlkkoLVkYTR7jirxMEi84/rZW2ddTiekDLadP1IxydrXBj3HWrDwn
eLDC8xqWmkYslSb8bN0w049KYHT0KgTmRPp2PVi4SaD6i4rNhzl2pYikEZsGHZdJ
qdlRB3K9DttrtZi1Kpv7jBfXTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFMv4wmx
5Ukvj2JY+G7GzgtkmbREMB8GA1UdIwQYMBaAFE8hYbAPwrNt4KgkTwrygUJ5AoYO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTlGNy82MUQ5RjVCMjg1
RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3MyM2dxQ1JQQ3ZLQlFua0No
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R5RmhzQV9DczIzZ3FDUlBDdktCUW5rQ2hnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTlGNy82MUQ5RjVCMjg1RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3My
M2dxQ1JQQ3ZLQlFua0NoZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW11Sdpc+4ya4ZFTtKUbMJm6nfwrzb8NxL2pTFnOND67xGHLPG3FSRHsKzmz1
8ZwRekcf6N5MrRcXQqKKPEmX6lELCZ0h6siqGvDChpRVAPHg9XQXjHcmQ3FRIbRk
X53KmuLJLPcwQI2UBkwLf5i2Sgs3v/2pBgBN/T496PaXj1HXLbdswLxyq5u5246l
j/5B2u2YJf3c8Shw93a6ZbSqFDVtwP6pEvD1lxNx97Oca//ivjLy0v5pGneu1o5j
Ylk25qdcFZLczC+TP63Ww8DS20wiu07PWe6QR1ziRItXadW3z15pYl1nduVNLhpR
/KL5czCOncFoAtQiyieZpMjNdA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:07:54 2026 by rpki-client