
$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
File: twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft (raw, json)
Hash identifier: 0TkiKQEx4YXbg3TCnIEoR3y4lfxWXA30JlkVKqOpjYs=
Subject key identifier: B3:4B:8F:73:57:ED:19:EB:E6:6E:80:F7:D4:31:6D:8C:9E:A9:2C:3C
Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
Certificate issuer: /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Certificate serial: 0ABB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
Manifest number: 0A82
Signing time: Sun 26 Apr 2026 19:30:48 +0000
Manifest this update: Sun 26 Apr 2026 19:30:48 +0000
Manifest next update: Sun 03 May 2026 19:30:48 +0000
Files and hashes: 1: twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl (hash: cJLslJCOwlmHZ4Hcvv5ZrEuuEfUHfX8oX7EAhYlh1fk=)
2: EA7554AC82D011EA8BCCCA64C4F9AE02.roa (hash: swz+w1wHJ+NqyAfABnU3GcK3MY2a0AE7eky2WFH3BSE=)
3: 7DE09496DDD911EA90D9B84CC4F9AE02.roa (hash: 2SRueJuk/oI2Z3RrQ/efGcxSLtCYpUo5HpcBPACZQGM=)
4: C9E62876DD0A11EA97BF0347C4F9AE02.roa (hash: 8H0BV2UOGEWlzpdVFnm9AduIVjsTukqf5Aie6oiai8g=)
5: F8C86248AAF711EAB266AB46C4F9AE02.roa (hash: qimocfWgJO+7SVIx0Qj7RIltIvyJVQrbiJ35MnQnqvk=)
6: 4D3CA5D082D211EAB2F4F66AC4F9AE02.roa (hash: TH0pbEZTfFk/7QKlIYRFfHi6YWc6EnwN0PyoqfHcpyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl
rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 19:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2747 (0xabb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917576D, serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Validity
Not Before: Apr 26 19:30:48 2026 GMT
Not After : May 3 19:30:48 2026 GMT
Subject: CN=69ee67e8-bd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e8:51:d0:48:ad:a7:87:16:7d:45:5c:f0:b3:
69:ac:8f:d9:7b:c5:46:94:dc:b9:96:02:a1:89:36:
5c:7c:79:d1:42:27:6b:7b:59:51:39:0f:b3:85:0f:
a6:1f:61:22:86:22:16:11:50:17:38:df:24:66:9c:
06:d5:0a:e1:cf:1e:9c:5d:87:a6:61:de:e7:2a:fc:
7a:4c:32:61:e0:f7:f7:de:86:8e:fa:9a:e5:0f:ad:
d5:4a:6c:c8:b1:5b:c7:3a:3a:27:72:51:e2:a3:6a:
4b:b8:dc:55:78:1a:94:c2:75:84:82:f5:66:f5:39:
a3:f5:20:99:df:a4:95:43:27:82:7d:09:cd:0f:cb:
9c:b4:c0:09:0f:c1:31:86:26:f1:d3:12:83:9f:da:
29:38:28:76:fd:33:db:c6:89:9c:a8:c9:d5:99:c4:
e0:e9:9e:d7:83:67:bd:96:b9:d3:b3:5a:1e:a6:7a:
72:cc:bf:2a:03:48:21:8f:8d:00:3d:b4:ba:ee:d6:
45:73:14:cb:94:75:7f:66:32:e5:87:04:43:f4:a3:
08:83:25:5b:29:55:70:15:8a:9f:13:40:34:5e:8d:
6f:d9:42:93:00:52:60:7a:5c:79:e4:4f:c7:4a:d1:
84:f2:e2:80:87:f9:10:da:83:8b:c4:1d:0f:0f:22:
b6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4B:8F:73:57:ED:19:EB:E6:6E:80:F7:D4:31:6D:8C:9E:A9:2C:3C
X509v3 Authority Key Identifier:
keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:81:f7:c0:c7:c5:f3:6a:f4:30:a9:54:d2:da:8d:6d:21:83:
11:6e:02:88:ca:35:67:86:28:37:4c:7d:31:c3:26:f1:7b:57:
3d:34:ef:f1:cd:4b:2d:9f:6b:b7:09:d7:50:f7:7f:11:6d:0b:
c9:62:2e:96:f8:cf:96:96:32:04:8c:12:ee:99:b8:01:b5:ef:
4f:2c:53:1c:40:8e:03:e1:8d:e9:34:0e:03:49:8d:6f:2f:f8:
88:b3:7f:7f:49:d8:f0:4a:f6:35:97:75:40:20:ff:07:f8:be:
bf:c9:25:35:76:24:9c:5b:1a:1f:bb:d1:31:0b:6e:be:d0:f3:
2e:ff:4b:3d:76:ef:6e:de:dc:90:fe:81:83:7f:fb:b6:df:da:
93:fd:2c:ad:73:cd:da:02:5a:22:bf:88:b0:0f:0d:f6:20:97:
e5:f4:26:46:08:b3:29:d8:f4:86:2a:06:12:d5:14:23:c2:08:
54:2e:9d:29:37:3f:c2:a2:b3:d2:ac:7c:c5:7e:a8:40:84:60:
d5:10:31:b3:f7:2d:97:53:9a:31:4b:2a:7c:1e:27:b9:94:bf:
6b:80:83:2d:c1:0a:5e:4a:4d:1c:eb:42:ee:47:70:0d:78:93:
09:fb:e3:1c:50:06:45:14:57:01:94:e8:b6:fa:98:03:7d:0e:
99:b9:57:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:14:49 2026 by rpki-client