
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
File: twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft (raw, json)
Hash identifier: Lc6jZSoO7mBXNc+Mah/U0II49vVdYKxdgfZ54qRz+GU=
Subject key identifier: BB:36:D1:3D:F0:70:30:21:16:4F:E4:4C:38:E6:F8:C3:65:9B:68:F3
Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
Certificate issuer: /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Certificate serial: 0B1E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
Manifest number: 0AE3
Signing time: Mon 26 Oct 2026 19:26:00 +0000
Manifest this update: Mon 26 Oct 2026 19:26:00 +0000
Manifest next update: Mon 02 Nov 2026 19:26:00 +0000
Files and hashes: 1: twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl (hash: /+1Q1tN+veASeU0mzDbTJpee6HwVY73tP9od4KQsZIc=)
2: C9E62876DD0A11EA97BF0347C4F9AE02.roa (hash: 8H0BV2UOGEWlzpdVFnm9AduIVjsTukqf5Aie6oiai8g=)
3: 4D3CA5D082D211EAB2F4F66AC4F9AE02.roa (hash: TH0pbEZTfFk/7QKlIYRFfHi6YWc6EnwN0PyoqfHcpyU=)
4: 7DE09496DDD911EA90D9B84CC4F9AE02.roa (hash: 08/Bns5oicGJqt6kPsNA08rh33SYBkfA62ruEUE1kTw=)
5: F8C86248AAF711EAB266AB46C4F9AE02.roa (hash: qimocfWgJO+7SVIx0Qj7RIltIvyJVQrbiJ35MnQnqvk=)
6: EA7554AC82D011EA8BCCCA64C4F9AE02.roa (hash: swz+w1wHJ+NqyAfABnU3GcK3MY2a0AE7eky2WFH3BSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl
rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 19:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2846 (0xb1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917576D, serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Validity
Not Before: Oct 26 19:26:00 2026 GMT
Not After : Nov 2 19:26:00 2026 GMT
Subject: CN=6adfa948-8737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:49:e7:9c:79:78:a3:93:d5:c0:53:90:b6:
83:2d:db:32:0e:bc:d4:2c:59:34:57:81:b1:77:46:
ba:0f:47:2e:c7:32:50:ec:29:91:60:f5:9c:08:8d:
c1:8f:32:cf:3c:1f:75:51:da:ea:85:e9:98:8b:f9:
c5:34:42:c3:ab:46:17:12:c3:74:fb:77:2c:86:de:
20:4b:0e:71:3e:9f:3f:6d:73:f1:bc:05:0e:0e:a7:
26:0b:94:e6:29:63:ba:c5:86:45:63:0d:f4:62:1f:
5d:56:3b:2b:d0:95:25:85:fb:70:78:ef:13:8d:ad:
57:ba:49:b8:15:93:4f:fd:7b:6b:c9:d1:79:fd:ed:
e1:31:11:78:04:18:e7:98:d4:fe:30:4e:26:cb:c5:
52:7e:74:4f:f9:b2:cd:53:60:4a:37:a6:4b:7e:0e:
9f:cc:9b:bb:51:af:dd:24:3f:12:f1:ba:1e:40:8c:
3b:5b:d9:c1:34:13:b1:e8:9e:66:72:b2:f8:e2:90:
d3:53:09:c2:9d:9a:fb:5f:4f:85:04:1f:f4:67:a6:
c7:fd:3d:65:9b:a2:50:b1:3f:45:01:42:ad:88:29:
07:df:29:f0:e3:23:3f:60:ec:fd:e1:50:f7:0a:6c:
86:d4:5b:5b:c2:49:c4:ae:03:99:95:6c:b3:b3:06:
a1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:36:D1:3D:F0:70:30:21:16:4F:E4:4C:38:E6:F8:C3:65:9B:68:F3
X509v3 Authority Key Identifier:
keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:cf:ca:b8:4b:08:68:0b:7a:14:b0:d7:0d:0b:75:2d:ca:8a:
bd:d4:19:a5:99:89:c1:16:e0:e7:a4:3f:86:91:34:ea:de:74:
13:db:48:ef:b5:c7:70:a4:3d:b4:64:ff:66:71:ae:2b:59:5a:
e7:98:ae:a9:56:b1:5a:67:53:5e:cc:ab:09:6f:00:de:22:ef:
0e:01:d3:e7:f2:26:8d:44:7d:80:94:58:4b:9f:e7:8f:73:70:
df:af:68:c8:4c:8d:17:c5:31:98:ce:51:2c:0f:8c:5f:3e:19:
43:94:35:93:32:59:a8:e9:e6:37:ea:2a:33:0e:63:63:2c:75:
01:e2:87:76:e0:46:c6:25:a3:8a:5c:41:53:bc:27:cf:c8:ff:
95:ed:f2:ed:f5:34:fb:94:43:1e:fe:b7:85:a2:ec:a9:0d:c0:
e7:a0:bc:2a:27:b1:61:39:da:9b:3d:95:21:ee:c4:75:1b:63:
c4:42:74:0c:ab:f1:a8:5e:fc:ec:47:a3:4c:15:29:a3:9a:77:
73:25:e2:a3:0b:4c:cb:5e:e7:18:f1:56:4e:46:6b:ba:3f:74:
be:dd:c9:22:40:79:24:7a:bf:5d:8c:65:b7:b3:a3:ff:71:9d:
25:09:80:a7:5f:f2:2d:22:1d:be:a3:18:4a:3a:c4:27:2e:07:
75:89:8b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:15:44 2026 by rpki-client