
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
File: twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft (raw, json)
Hash identifier: YUdKe8azlJI/KYCEKX1uineyvbGCaK45LxnExo8NpW4=
Subject key identifier: B1:92:1D:08:9F:8B:DE:07:72:72:4F:54:EF:82:AD:60:56:C8:FE:B0
Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
Certificate issuer: /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Certificate serial: 0B00
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
Manifest number: 0AC7
Signing time: Tue 08 Sep 2026 19:34:02 +0000
Manifest this update: Tue 08 Sep 2026 19:34:02 +0000
Manifest next update: Tue 15 Sep 2026 19:34:02 +0000
Files and hashes: 1: twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl (hash: 6XdEYs5rstcslTvAWlOaMrl8kctiBFe7hM8QNfsxTSQ=)
2: F8C86248AAF711EAB266AB46C4F9AE02.roa (hash: qimocfWgJO+7SVIx0Qj7RIltIvyJVQrbiJ35MnQnqvk=)
3: EA7554AC82D011EA8BCCCA64C4F9AE02.roa (hash: swz+w1wHJ+NqyAfABnU3GcK3MY2a0AE7eky2WFH3BSE=)
4: 7DE09496DDD911EA90D9B84CC4F9AE02.roa (hash: 2SRueJuk/oI2Z3RrQ/efGcxSLtCYpUo5HpcBPACZQGM=)
5: C9E62876DD0A11EA97BF0347C4F9AE02.roa (hash: 8H0BV2UOGEWlzpdVFnm9AduIVjsTukqf5Aie6oiai8g=)
6: 4D3CA5D082D211EAB2F4F66AC4F9AE02.roa (hash: TH0pbEZTfFk/7QKlIYRFfHi6YWc6EnwN0PyoqfHcpyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl
rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 19:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2816 (0xb00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917576D, serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Validity
Not Before: Sep 8 19:34:02 2026 GMT
Not After : Sep 15 19:34:02 2026 GMT
Subject: CN=6aa0632a-b86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a7:6d:cd:f8:f7:44:33:75:66:22:87:ca:df:
15:c5:ef:c4:ab:7c:e5:8a:69:cf:28:1b:bc:91:0c:
22:f1:42:61:57:5d:20:ac:83:1e:ba:2e:fb:c4:79:
6d:c7:f0:19:95:7c:73:c5:6b:33:f9:8a:0e:e7:1c:
1c:98:31:11:e0:6f:69:87:37:5e:51:03:23:a8:a3:
c0:07:c9:4f:de:c2:96:b8:49:45:cf:07:10:0b:2c:
6d:73:d6:0e:6e:a4:25:4e:20:15:9b:9e:28:60:eb:
be:03:7c:40:88:cf:5d:70:69:8b:cc:a2:9e:db:46:
42:95:29:1c:98:77:e8:22:4c:d5:a6:6e:c4:d9:5f:
79:56:6c:61:58:aa:93:8d:ae:2e:cb:35:60:7b:32:
91:a7:5f:a3:2b:51:e4:d4:24:4f:3f:72:ef:82:4e:
a0:54:8d:ee:47:c1:47:0e:19:e0:3a:62:c0:84:2d:
45:a1:a5:48:65:0e:f5:6b:27:13:94:3b:44:ad:c8:
ba:37:c7:be:11:e7:35:3a:5c:c6:a3:aa:68:b7:dc:
01:f8:76:d3:25:a7:56:fb:48:b1:54:c8:08:1c:67:
fb:cd:f3:8f:00:ea:ee:8b:a1:43:30:2e:3d:0b:62:
3a:31:9c:9d:80:54:68:05:81:57:88:bc:ea:5a:34:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:92:1D:08:9F:8B:DE:07:72:72:4F:54:EF:82:AD:60:56:C8:FE:B0
X509v3 Authority Key Identifier:
keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:bc:24:f8:61:d7:5f:de:43:43:9f:81:13:b5:97:8f:05:04:
33:8d:67:44:ec:a3:da:49:5b:d9:e6:56:89:4e:fe:41:4f:cd:
9e:d6:cf:6c:54:fd:ec:f2:87:ff:70:f7:1d:f9:d4:e6:d9:64:
f6:9a:8f:35:bc:63:6d:db:c5:44:35:0c:90:6a:bb:d8:e6:5a:
41:e5:fa:b8:94:dd:ae:13:a7:10:d1:ac:af:29:af:10:0d:35:
17:c7:78:e6:76:62:3b:7d:f7:b0:0d:50:bb:45:fd:4f:4b:5a:
75:b8:18:22:40:f6:58:86:44:1e:81:28:91:99:a0:78:17:8c:
09:ec:02:d5:40:0d:d3:5e:4c:27:b6:f9:1f:95:34:8e:e5:6a:
f9:99:31:90:03:8f:02:ba:01:cf:23:b4:66:fc:56:3e:a3:20:
1f:9e:31:a0:29:fe:de:29:a5:e2:23:0d:0b:33:31:23:f7:fd:
af:c6:50:a8:1e:2c:3d:aa:00:1d:3f:b8:76:15:89:6f:29:7a:
bf:47:0b:b4:82:59:a6:54:cd:80:6c:9b:4d:0b:a9:d4:0e:93:
a1:de:06:45:e0:3d:6a:9c:06:ee:e5:2f:22:2e:db:31:d3:5b:
79:63:39:a4:34:1c:d5:b0:2a:99:9a:60:c5:71:81:25:75:4e:
a1:a0:6f:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU3NkQxMTAvBgNVBAUTKEI3MDMxOEQ3MUFBMEU4MDQzMjRFMDEzQzMwOTdGREJD
RDYwMTM0RDQwHhcNMjYwOTA4MTkzNDAyWhcNMjYwOTE1MTkzNDAyWjAYMRYwFAYD
VQQDEw02YWEwNjMyYS1iODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6qdtzfj3RDN1ZiKHyt8Vxe/Eq3zlimnPKBu8kQwi8UJhV10grIMeui77xHlt
x/AZlXxzxWsz+YoO5xwcmDER4G9phzdeUQMjqKPAB8lP3sKWuElFzwcQCyxtc9YO
bqQlTiAVm54oYOu+A3xAiM9dcGmLzKKe20ZClSkcmHfoIkzVpm7E2V95VmxhWKqT
ja4uyzVgezKRp1+jK1Hk1CRPP3Lvgk6gVI3uR8FHDhngOmLAhC1FoaVIZQ71aycT
lDtErci6N8e+Eec1OlzGo6pot9wB+HbTJadW+0ixVMgIHGf7zfOPAOrui6FDMC49
C2I6MZydgFRoBYFXiLzqWjSi9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLGSHQif
i94HcnJPVO+CrWBWyP6wMB8GA1UdIwQYMBaAFLcDGNcaoOgEMk4BPDCX/bzWATTU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8yRTc2N0UzMjgy
Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZBUXlUZ0U4TUpmOXZOWUJO
TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3R3TVkxeHFnNkFReVRnRThNSmY5dk5ZQk5OUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTc2RC8yRTc2N0UzMjgyQ0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZB
UXlUZ0U4TUpmOXZOWUJOTlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiLwk+GHXX95DQ5+BE7WXjwUEM41nROyj2klb2eZWiU7+QU/NntbPbFT97PKH
/3D3HfnU5tlk9pqPNbxjbdvFRDUMkGq72OZaQeX6uJTdrhOnENGsrymvEA01F8d4
5nZiO333sA1Qu0X9T0tadbgYIkD2WIZEHoEokZmgeBeMCewC1UAN015MJ7b5H5U0
juVq+ZkxkAOPAroBzyO0ZvxWPqMgH54xoCn+3iml4iMNCzMxI/f9r8ZQqB4sPaoA
HT+4dhWJbyl6v0cLtIJZplTNgGybTQup1A6Tod4GReA9apwG7uUvIi7bMdNbeWM5
pDQc1bAqmZpgxXGBJXVOoaBv8A==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:26:44 2026 by rpki-client