
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
File: tsy15DHkUBkVDE83IfT4Cm8u19s.mft (raw, json)
Hash identifier: ybN4nOPjTqqQO1fbkqS3LkCdvtWFr56AkrBvUQ6ZoXg=
Subject key identifier: E0:D6:A4:35:52:25:80:9E:C8:81:FD:5F:8A:DF:0C:B9:17:12:0C:37
Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
Certificate issuer: /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Certificate serial: 0855
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
Manifest number: 082A
Signing time: Mon 26 Oct 2026 21:12:23 +0000
Manifest this update: Mon 26 Oct 2026 21:12:23 +0000
Manifest next update: Mon 02 Nov 2026 21:12:23 +0000
Files and hashes: 1: tsy15DHkUBkVDE83IfT4Cm8u19s.crl (hash: G6EeOfdKyk5qmbS0p/TvIfwDT2CtC/om+uTz81CFSB8=)
2: 48EFF31A621B11EF8FB5117AC4F9AE02.roa (hash: 67g+qKVwsfhFWOuOMEWITQ1nmAIPrEarQJhLRzQm0IY=)
3: BC04E5745E4E11F082F8D529C4F9AE02.roa (hash: +n6sT0DNVEtTay2c7eDEYpMLVSmyIfomBjZvDH6GPyg=)
4: 9C42D762163D11F19AE99B533D3D8C67.roa (hash: bXkxRodSVPRMA9XhTrb2GxuFt/+D/R2TC7v8l62JmaQ=)
5: E181BAA059DD11EF9C39750CC4F9AE02.roa (hash: wNwawcsHbM0YHaF0zdZbSvwLiLwGJzedMyT2pC2bOpg=)
6: C098EF8E499811EFBB8C701EC4F9AE02.roa (hash: uB385efdqTb3/LugdWT8rNVy3FgK+9CSA2XsUkIjqtY=)
7: 2574266EAA4911F09A71D135C4F9AE02.roa (hash: Yq5oiH0EmhCavwCaD+J0apl3DbYBY7zFMqkNNlPV3Kc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 21:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2133 (0x855)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186513, serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Validity
Not Before: Oct 26 21:12:23 2026 GMT
Not After : Nov 2 21:12:23 2026 GMT
Subject: CN=6adfc237-5282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:e2:6c:d4:36:ae:bb:97:ac:a1:6e:3f:35:
1b:58:3e:d3:89:a6:35:43:8f:ef:0d:24:c2:b6:c0:
99:fd:70:d1:7b:d5:b4:2a:51:b9:3e:da:13:2f:18:
c9:96:9a:d8:7c:2d:d2:b4:17:92:93:e7:eb:1e:4a:
3c:05:fd:05:8c:5d:d5:39:ff:7e:7f:1e:10:43:dd:
92:53:dc:b0:15:98:2e:68:b2:dd:9d:6f:e9:2d:e2:
a8:2f:62:a2:38:01:d6:30:a8:db:de:c4:be:30:1f:
b5:aa:ed:04:67:dc:47:e5:2f:e1:9c:65:03:cf:d5:
3e:dd:a2:b7:59:3e:0f:9d:18:a3:cd:61:f8:11:0b:
1c:07:c5:2e:cb:00:7f:e4:34:8d:35:1d:b6:21:f3:
7e:75:4c:fc:da:3b:6d:8c:ee:7c:b1:6b:28:8f:8e:
a1:5c:1b:29:76:04:a0:46:41:19:31:5e:9f:d0:cb:
fa:e4:20:f6:85:c7:86:ca:8b:b5:db:39:16:ec:be:
38:1f:64:00:61:84:e9:60:78:0e:4d:12:ae:01:4f:
7a:6a:af:ba:18:14:40:33:9f:21:c7:53:d5:88:ac:
f5:e9:cc:c2:e7:96:e4:c1:12:35:89:69:e3:ec:06:
d3:c5:e5:8e:0c:7a:cf:ce:95:e8:76:be:e6:7f:fb:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D6:A4:35:52:25:80:9E:C8:81:FD:5F:8A:DF:0C:B9:17:12:0C:37
X509v3 Authority Key Identifier:
keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:8c:9e:b4:1e:32:d6:09:e5:08:c7:0c:88:30:90:1e:8a:97:
4d:2f:ff:09:44:0b:af:9e:69:cf:8d:8d:38:ce:65:0b:37:2c:
8b:ee:4b:ef:ff:a2:ee:7d:61:12:c5:08:71:33:d5:63:49:f1:
bc:67:37:a5:35:37:2c:d9:25:72:af:cb:20:88:00:84:63:e5:
de:75:bb:11:ad:b1:29:c6:77:12:02:c7:29:3d:43:3a:95:40:
9b:87:ba:50:1d:96:66:76:1e:3a:58:6b:34:c4:6e:87:e6:1b:
46:93:27:58:f1:44:5d:70:38:3a:88:a3:b6:59:3e:cf:a5:2d:
a7:28:cb:d1:3a:2b:58:d0:1e:d6:67:e0:ea:1c:15:41:b6:c0:
61:10:c0:3e:68:3d:ca:24:ce:5f:d5:41:dd:6d:97:28:71:6e:
c7:2e:d7:49:4e:f4:21:db:5e:78:ff:72:29:03:7f:9f:a0:d8:
91:bc:84:6b:2d:d4:f2:ec:91:2d:e6:0f:09:b6:84:3f:2a:9e:
28:5d:43:64:d5:3f:f2:f7:71:b0:74:7f:a6:f5:6b:1a:6f:0e:
f2:a6:dd:54:18:27:f5:b2:15:86:65:99:a6:b1:3b:f9:9f:bc:
8a:2c:7e:f3:c2:b9:04:ff:59:17:c9:4f:d2:39:41:5f:71:3c:
4a:ce:5e:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY1MTMxMTAvBgNVBAUTKEI2Q0NCNUU0MzFFNDUwMTkxNTBDNEYzNzIxRjRGODBB
NkYyRUQ3REIwHhcNMjYxMDI2MjExMjIzWhcNMjYxMTAyMjExMjIzWjAYMRYwFAYD
VQQDEw02YWRmYzIzNy01MjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsHvibNQ2rruXrKFuPzUbWD7TiaY1Q4/vDSTCtsCZ/XDRe9W0KlG5PtoTLxjJ
lprYfC3StBeSk+frHko8Bf0FjF3VOf9+fx4QQ92SU9ywFZguaLLdnW/pLeKoL2Ki
OAHWMKjb3sS+MB+1qu0EZ9xH5S/hnGUDz9U+3aK3WT4PnRijzWH4EQscB8UuywB/
5DSNNR22IfN+dUz82jttjO58sWsoj46hXBspdgSgRkEZMV6f0Mv65CD2hceGyou1
2zkW7L44H2QAYYTpYHgOTRKuAU96aq+6GBRAM58hx1PViKz16czC55bkwRI1iWnj
7AbTxeWODHrPzpXodr7mf/ufkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODWpDVS
JYCeyIH9X4rfDLkXEgw3MB8GA1UdIwQYMBaAFLbMteQx5FAZFQxPNyH0+ApvLtfb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjUxMy9DMkJBNkJGMDQy
MDExMUVCQUJGRDVFNjBDNEY5QUUwMi90c3kxNURIa1VCa1ZERTgzSWZUNENtOHUx
OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RzeTE1REhrVUJrVkRFODNJZlQ0Q204dTE5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjUxMy9DMkJBNkJGMDQyMDExMUVCQUJGRDVFNjBDNEY5QUUwMi90c3kxNURIa1VC
a1ZERTgzSWZUNENtOHUxOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUYyetB4y1gnlCMcMiDCQHoqXTS//CUQLr55pz42NOM5lCzcsi+5L7/+i7n1h
EsUIcTPVY0nxvGc3pTU3LNklcq/LIIgAhGPl3nW7Ea2xKcZ3EgLHKT1DOpVAm4e6
UB2WZnYeOlhrNMRuh+YbRpMnWPFEXXA4Ooijtlk+z6UtpyjL0TorWNAe1mfg6hwV
QbbAYRDAPmg9yiTOX9VB3W2XKHFuxy7XSU70IdteeP9yKQN/n6DYkbyEay3U8uyR
LeYPCbaEPyqeKF1DZNU/8vdxsHR/pvVrGm8O8qbdVBgn9bIVhmWZprE7+Z+8iix+
88K5BP9ZF8lP0jlBX3E8Ss5eCg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:17:14 2026 by rpki-client