
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
File: Ty_T8AtY8TSpqOPn3ajY0grANSc.mft (raw, json)
Hash identifier: ML60HKnJ/VnxX92OmFK7RBONLm8kqFY+QCEKJAhPm10=
Subject key identifier: 45:45:ED:72:2D:2C:75:F4:76:3F:E6:2E:23:FA:D6:27:7B:C4:D4:17
Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
Certificate issuer: /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Certificate serial: 35E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
Manifest number: 3574
Signing time: Sat 18 Apr 2026 14:16:53 +0000
Manifest this update: Sat 18 Apr 2026 14:16:53 +0000
Manifest next update: Sat 25 Apr 2026 14:16:53 +0000
Files and hashes: 1: Ty_T8AtY8TSpqOPn3ajY0grANSc.crl (hash: PWBJQM8x+6IwafomnMhFuvzi+iE0mYaQgDbwSXW+fxg=)
2: B5885EF852D411EC8C8CE26CC4F9AE02.roa (hash: K0D7rg55G2Vxgg4st1LsCOaUPeB0t55XfIkLwQZOLfU=)
3: 3869DF8A1C6011EEAF58FB61C4F9AE02.roa (hash: DmeP00Tglg1B2vHEmL9YYBPAmu6yzXlrGlk/VI9+C3Y=)
4: 5D81654A561E11E7A4FFF329C4F9AE02.roa (hash: /gJ9ZwtzzOTKqCZBrZuocfhT4XIIICVgFwfqJxZhD14=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:16:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13793 (0x35e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Validity
Not Before: Apr 18 14:16:53 2026 GMT
Not After : Apr 25 14:16:53 2026 GMT
Subject: CN=69e39255-ecd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:14:c4:a6:31:7f:84:9b:76:3c:1b:ef:40:
7a:d8:4e:1f:24:31:75:96:dc:2c:00:52:29:1f:dd:
2b:00:21:73:31:b5:ba:30:d5:ce:0a:d1:3d:67:be:
4b:5f:4b:cb:28:3a:3c:f1:95:8c:4a:cd:d6:ae:4f:
d8:79:1d:1a:20:2c:ff:47:d1:53:91:e4:a7:d4:83:
1a:cd:d2:f1:d8:68:a2:e2:89:79:b9:79:41:b9:fd:
55:31:38:af:84:12:ea:05:ec:78:9d:97:af:81:4f:
1a:5d:01:ae:88:bd:2d:80:41:85:b5:b5:b8:09:8e:
9e:80:94:5f:13:24:21:8c:96:ac:fa:92:c1:c6:5a:
1f:01:63:30:8e:d7:1b:42:16:a8:69:38:87:31:38:
3f:bc:f1:f6:32:6d:1b:c3:de:f7:1d:05:e7:12:9a:
cb:94:b8:a9:73:00:4c:39:b4:47:61:39:8b:c2:79:
74:06:ac:74:3d:8a:a2:af:25:34:5e:bd:8c:c5:57:
fc:d6:d3:34:d9:fc:cf:e2:eb:3d:ed:8e:08:b8:c1:
28:44:84:ae:ff:9d:df:98:48:5c:a3:87:df:cc:f2:
95:07:a1:bc:ea:7c:5f:fb:49:8e:c9:31:5a:ec:b9:
c0:d5:8b:ef:93:6b:9f:19:a6:ca:0f:94:d2:c6:12:
d8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:45:ED:72:2D:2C:75:F4:76:3F:E6:2E:23:FA:D6:27:7B:C4:D4:17
X509v3 Authority Key Identifier:
keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:c1:04:45:cf:b3:52:57:ef:04:83:b6:42:a8:74:d0:a4:0e:
24:0e:bf:03:2b:4a:00:38:1a:99:d8:8a:fe:a2:23:2d:c4:d0:
29:83:b1:c1:ba:c8:8b:be:69:88:3a:6d:e2:4e:24:5b:f1:56:
22:d1:dc:e9:25:40:5a:3a:62:2b:8e:c6:77:09:5c:c9:ca:3a:
7c:9e:51:a0:39:19:80:96:9c:68:5d:b5:be:6e:d7:f3:73:86:
e2:a6:dd:7c:ca:bd:c5:ad:a5:ae:9a:ab:51:36:43:ec:09:53:
87:95:70:cd:08:e9:b7:90:3f:a2:b0:36:84:4e:1e:bd:37:f4:
ab:fc:84:9b:23:b3:fd:57:93:d4:0d:42:72:fb:66:71:f7:70:
76:65:b0:6d:e9:13:3e:a2:c1:74:48:5c:b5:7f:cb:94:ad:32:
b1:f6:db:a4:ff:d8:63:49:49:92:c5:12:71:d8:b2:81:a5:16:
00:ed:46:77:42:d7:ec:ef:d6:3a:50:e7:d8:29:e0:25:e3:2b:
d4:38:a3:72:10:47:5c:72:71:82:7e:e3:24:87:07:68:7f:55:
7b:44:8e:4c:ea:e6:22:ac:91:4b:13:a3:a0:bd:03:89:da:e8:
11:ab:74:f6:14:74:09:fe:f2:47:47:83:e1:e4:cb:17:dc:80:
15:c4:9b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 02:22:36 2026 by rpki-client