
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
File: Ty_T8AtY8TSpqOPn3ajY0grANSc.mft (raw, json)
Hash identifier: bGrgfUK5t/1i46YpPHVl9aijt3LpluVELTeNfOYcvWA=
Subject key identifier: 8B:31:A7:73:F3:8F:B1:2F:2F:51:38:7E:32:C5:AE:D4:2A:1F:2D:1F
Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
Certificate issuer: /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Certificate serial: 3608
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
Manifest number: 359B
Signing time: Sat 04 Jul 2026 14:17:07 +0000
Manifest this update: Sat 04 Jul 2026 14:17:06 +0000
Manifest next update: Sat 11 Jul 2026 14:17:06 +0000
Files and hashes: 1: Ty_T8AtY8TSpqOPn3ajY0grANSc.crl (hash: bCDnBBrgwms7doYxOKsu0ifYLh2T1E6GSjh+S/5Sb3A=)
2: B5885EF852D411EC8C8CE26CC4F9AE02.roa (hash: K0D7rg55G2Vxgg4st1LsCOaUPeB0t55XfIkLwQZOLfU=)
3: 3869DF8A1C6011EEAF58FB61C4F9AE02.roa (hash: DmeP00Tglg1B2vHEmL9YYBPAmu6yzXlrGlk/VI9+C3Y=)
4: 5D81654A561E11E7A4FFF329C4F9AE02.roa (hash: /gJ9ZwtzzOTKqCZBrZuocfhT4XIIICVgFwfqJxZhD14=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 14:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13832 (0x3608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Validity
Not Before: Jul 4 14:17:06 2026 GMT
Not After : Jul 11 14:17:06 2026 GMT
Subject: CN=6a4915e3-15dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:52:e4:f1:04:60:06:13:9e:0b:52:f0:ba:
c7:5d:28:e1:60:4d:c4:d9:5f:47:e7:1e:3a:20:bb:
c4:e7:dd:27:e2:74:03:0f:a1:f5:f3:5a:76:9b:c0:
d8:82:2b:9e:09:7b:32:49:d3:7e:bb:2f:e5:e6:21:
fb:55:53:6a:d3:19:0f:52:51:54:a7:67:74:c9:70:
6a:f1:e8:ab:e7:fc:6f:15:06:70:4f:4b:7c:b9:0c:
34:58:c8:95:06:92:36:ec:50:14:86:8a:48:90:59:
e3:54:9f:49:46:7b:fc:91:63:d7:fc:fe:e6:51:4f:
44:88:4b:07:8e:9e:3a:e1:84:40:51:07:61:cb:b6:
8b:55:48:b6:50:6a:3f:0b:30:9d:12:87:48:72:3b:
1a:e2:1c:c3:bf:40:7a:48:0f:77:31:ea:c6:ee:11:
66:a0:37:0a:33:5e:61:a5:df:16:27:a0:67:7a:64:
0e:b8:e0:18:78:f8:03:11:e7:57:ca:67:0b:d6:17:
81:a1:b1:7e:15:a5:00:02:48:d3:bf:ca:6f:98:cb:
f0:b3:be:94:c2:15:65:5a:74:fe:d9:7b:82:2e:c4:
c9:21:6f:e0:01:47:de:11:56:50:f9:7a:53:ff:9b:
83:7f:6c:d0:36:e2:8b:3f:e5:89:b9:47:8f:15:78:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:31:A7:73:F3:8F:B1:2F:2F:51:38:7E:32:C5:AE:D4:2A:1F:2D:1F
X509v3 Authority Key Identifier:
keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f7:43:9b:ce:a0:7d:55:07:9b:fd:72:f2:44:05:88:41:4f:
a2:15:2a:35:ec:a7:46:a5:3e:68:77:13:9a:80:95:f4:f1:e1:
43:4d:68:9f:5c:78:12:40:0f:ad:27:83:68:bf:ea:28:47:de:
a8:ba:d4:4e:9a:26:2d:12:b4:2e:e5:1e:c8:52:f8:dc:16:2a:
30:9e:ac:3d:63:02:2e:38:7c:80:fe:d7:85:4c:71:44:17:4b:
bc:f8:f2:77:3d:e3:6b:67:1a:c8:b6:88:85:f3:5a:4a:76:7c:
f1:00:9c:fd:c4:e0:2a:9c:d5:43:ed:37:0a:de:ab:ef:3b:d4:
3c:cf:7d:f9:82:40:b9:a7:06:e6:d4:b9:47:97:a2:16:c3:21:
af:dd:47:8f:1f:86:49:b4:e2:e0:f2:41:30:e8:7d:8a:a3:a1:
72:4c:38:cd:b1:8b:bd:a5:17:a8:c4:d3:62:49:bd:fc:65:a1:
7b:29:2f:fe:16:1a:bf:85:f6:58:ba:e0:01:bf:e7:de:48:a1:
1d:fc:ea:c2:f5:e1:34:ca:24:1e:b3:3e:23:75:c0:d0:9f:09:
fc:e1:16:c9:07:b4:59:dd:8a:d4:4c:fc:ac:50:b2:7e:e9:b3:
20:39:1e:70:cf:61:ec:35:64:c8:4a:dc:dc:91:f3:21:b8:28:
1e:fc:c2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:39:16 2026 by rpki-client