
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json)
Hash identifier: npdJmZmeoIUx+9EKxSATbzqR4c0lWRjqEgLAahEaLR0=
Subject key identifier: 45:1E:B1:A2:51:E7:31:6D:7E:5C:55:11:B4:1D:B4:D5:E2:02:62:DD
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial: 0559
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
Manifest number: 0519
Signing time: Wed 02 Sep 2026 23:45:03 +0000
Manifest this update: Wed 02 Sep 2026 23:45:02 +0000
Manifest next update: Wed 09 Sep 2026 23:45:02 +0000
Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: fAX0Ngh2LVOVZEpA8lD9nurPuRSGkUUQMj6ALRC4Aes=)
2: 0FA47F24751811F18B7B702072A30FBC.roa (hash: pV3GPCRI6eTouBuUqNrjOnvugz77VcQii6lWuzsU7aE=)
3: 98CF37B28F0E11F0880D4780C4F9AE02.roa (hash: uKQ3Os5h8Ciy1ALccS2eT5zdXu6OgoHV6FkwnLjZ7Y0=)
4: A6E8B05401D611F1A42696D7366F56BC.roa (hash: kH/loibssTw1SMlq4v4kn0TXgp71DRNjeiASfXICBKs=)
5: AFE4C282750E11F1AD641DF56EA30FBC.roa (hash: 1VaOurL2pMpKT7+o6fq7MiAiKhAra7u+Mj1RfzpWDXk=)
6: C3CDE52C01D611F1B315EDD8366F56BC.roa (hash: 3d/B1cImc/RFP7X2DoDqV9LtQ79OxGVpr8nJEv4LRf4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Sep 2026 23:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1369 (0x559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Validity
Not Before: Sep 2 23:45:02 2026 GMT
Not After : Sep 9 23:45:02 2026 GMT
Subject: CN=6a98b4ff-9f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:16:2a:83:cf:7e:96:df:aa:0c:2b:4a:ca:81:
dc:91:33:54:d3:83:d1:4b:f2:8e:7b:31:21:2a:f4:
4d:ff:49:4b:4c:ec:1e:e1:4c:2a:90:82:2f:68:bf:
0f:4c:c2:cd:40:2f:8f:1b:44:50:55:ff:64:91:c7:
bf:fa:7b:45:0f:d3:4c:f7:d2:f6:02:72:24:ea:1d:
1a:dd:5f:10:10:b7:9d:cf:9e:5e:11:4b:8f:a4:56:
4f:e9:ec:62:8b:44:7d:cd:fb:f3:25:c4:3e:3c:0b:
fa:b6:a5:17:65:63:68:ce:ed:92:76:0d:ec:79:f7:
f4:88:b3:3c:50:cb:c4:2e:27:85:c7:2c:55:40:a8:
f4:2a:ba:13:4e:e4:a9:ba:d9:cd:ee:0c:96:64:95:
21:4c:0c:54:db:07:11:4e:c0:36:3d:fb:18:49:c0:
d5:89:ba:9e:a0:2f:bf:22:81:59:d6:7e:4d:78:df:
78:42:c7:1a:9b:d9:d3:f0:66:2e:f9:3e:34:f9:40:
17:45:e6:e6:d0:9b:0a:5f:53:81:40:50:64:5f:da:
6d:16:17:04:b8:2c:6b:e4:ea:8a:ba:f8:b1:88:64:
60:9a:c3:88:d5:1f:b3:f3:c6:35:61:b9:d7:8d:34:
fe:9f:4f:d5:5f:7e:00:9a:38:34:33:5b:81:ea:d5:
5b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1E:B1:A2:51:E7:31:6D:7E:5C:55:11:B4:1D:B4:D5:E2:02:62:DD
X509v3 Authority Key Identifier:
keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:5c:45:76:e3:08:fd:b0:f9:04:d8:36:cb:05:5a:7d:f5:5c:
fb:7b:8c:dc:ce:ff:c3:69:91:1d:c7:e4:af:09:43:e5:18:3d:
ec:45:ea:27:14:09:70:86:77:3a:e7:66:31:79:80:9e:7d:19:
f8:8e:3a:c7:f8:26:69:a7:8d:1d:92:24:0d:a8:20:b5:57:aa:
d8:9e:1a:51:95:ff:42:02:1b:ef:24:e3:0d:b0:cd:8a:68:99:
6e:6f:5a:30:aa:93:6f:c6:66:a1:29:b1:b8:0e:28:ed:92:e3:
97:0e:e1:7d:60:89:df:34:33:2b:e0:ae:a8:c6:d9:20:77:06:
e3:6b:b8:87:b2:76:cd:38:b5:86:63:1b:6e:dd:3e:4c:e0:cf:
35:52:8a:19:3a:c7:a5:7d:53:48:80:b4:17:30:0a:28:f3:5f:
10:ad:c5:cc:e2:fc:78:42:27:44:fe:f0:ed:f4:c5:da:e9:ea:
db:2b:0f:f0:6c:f4:3a:06:49:8c:5c:57:d4:44:d8:2e:b6:ea:
c1:e2:7d:75:eb:f2:68:47:ff:4e:b1:16:f5:1f:49:53:ad:c2:
56:21:df:34:42:55:f6:4c:df:21:cb:ce:ac:59:d0:79:c4:0e:
c2:8f:bd:de:ee:db:0c:ad:6c:cd:09:6b:23:6d:65:92:19:c2:
3b:5e:80:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:00:44 2026 by rpki-client