
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
File: TYR1I-W92eO4lpgooEv-2isMAxs.mft (raw, json)
Hash identifier: RdN2cb9cODe8n4FxSMY6T4HK7xeBNZCHWh3oUWkM1lA=
Subject key identifier: DC:E0:E6:54:75:31:58:B2:BA:F7:DE:E2:55:14:84:F5:83:A0:04:F1
Authority key identifier: 4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B
Certificate issuer: /CN=A91AC726/serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B
Certificate serial: 084C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
Manifest number: 082E
Signing time: Mon 26 Oct 2026 21:08:09 +0000
Manifest this update: Mon 26 Oct 2026 21:08:09 +0000
Manifest next update: Mon 02 Nov 2026 21:08:09 +0000
Files and hashes: 1: TYR1I-W92eO4lpgooEv-2isMAxs.crl (hash: J5WBI8g7u9KuF/sZ0bvvxTZtY8Vg9WHvyfuApR2UbZ0=)
2: A8D1E0DE688811ECBE2C4F49C4F9AE02.roa (hash: UClPHshsGcyvq7g9LcOIEJ85L9Tn1p+WoRxD1Wzjhl0=)
3: CA9D82E8688511EC999E8B70C4F9AE02.roa (hash: ZSWT8bBIoiXkk5NHfAcRN305gYra6U3TCXFXnnRK7rU=)
4: 52EFDBAE687D11ECBF82F558C4F9AE02.roa (hash: vlQE6zfU8sldRsawycgscMRN/+d6UAyhTBqyJZ13gKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl
rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 21:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2124 (0x84c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC726, serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B
Validity
Not Before: Oct 26 21:08:09 2026 GMT
Not After : Nov 2 21:08:09 2026 GMT
Subject: CN=6adfc139-790e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:95:94:1f:02:d6:78:75:40:28:2c:a1:d5:0b:
85:c3:72:12:f6:d8:8b:99:55:33:53:db:70:6f:63:
be:8c:ed:ef:82:f0:83:2b:ec:07:d4:e1:ac:40:30:
ca:4d:5d:55:8b:b6:5a:07:6a:e2:ba:d4:a5:cb:76:
8b:f1:21:88:f6:14:d8:93:ed:7d:9a:85:62:bc:74:
db:84:d3:1c:b8:42:fc:9f:35:b9:41:1d:16:d0:9b:
74:c0:c5:e5:7e:4e:03:0f:a6:95:30:97:51:32:91:
3d:b7:fb:36:ab:c0:49:73:d1:87:29:4d:64:12:c1:
00:d2:99:39:4f:96:e0:ee:99:10:c8:c2:27:8c:a4:
9a:31:54:5f:4e:2b:44:97:09:c4:ac:35:db:93:53:
80:fa:db:a2:34:14:36:f0:2a:61:d5:62:03:5d:37:
6f:76:8a:a7:49:1b:84:8f:31:bb:e9:be:27:1a:2a:
dc:80:30:2b:46:b3:10:89:99:75:04:0a:de:0c:25:
cf:5f:a9:40:0e:30:11:6c:2a:03:59:3d:e9:28:4f:
3e:fe:07:70:01:4b:85:47:fe:a5:42:29:d8:1f:87:
e7:09:d0:14:c5:e9:01:fe:08:e3:eb:fe:1b:21:53:
75:45:37:83:1b:89:7f:ee:dc:52:0e:0a:ad:45:34:
69:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E0:E6:54:75:31:58:B2:BA:F7:DE:E2:55:14:84:F5:83:A0:04:F1
X509v3 Authority Key Identifier:
keyid:4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:bd:c8:03:57:dc:11:e4:65:f5:e1:d9:cc:0e:4d:74:8b:88:
e3:b7:20:fa:63:9c:38:64:24:7a:30:39:b0:6e:44:21:c4:7a:
d9:25:de:8b:88:37:94:09:7b:8b:ea:ad:88:24:6b:f4:f6:a7:
12:68:1f:d8:fc:a3:0b:35:f2:e8:9c:c0:fb:db:8a:d3:a7:65:
ca:48:3c:1b:b6:a9:6b:5c:88:4e:b4:f1:fc:41:bd:af:37:cc:
94:fa:c2:fa:96:28:ec:38:ed:84:e5:04:36:86:99:a9:3e:c6:
54:56:fb:f6:c9:de:c4:cd:ae:c0:06:99:7d:b5:68:ec:14:40:
98:f5:f9:df:03:98:17:da:f4:42:b1:b8:d2:71:ed:8e:60:1a:
0e:85:7f:bf:78:52:8c:d2:72:5e:11:5a:15:6a:6d:d7:db:ad:
31:e9:ea:65:10:8e:a3:0f:a0:ce:e7:68:3e:6e:d2:72:8c:e5:
a8:da:21:7b:3a:9d:fa:96:f1:0f:4d:2d:3c:bf:29:ee:eb:b5:
75:7a:a4:98:90:56:d0:fc:b5:15:32:3d:2a:86:12:b1:16:df:
cf:24:8f:08:9e:5a:c4:b2:46:af:78:62:01:c8:c8:c0:4c:33:
db:31:72:24:a5:71:92:3f:5f:cd:5c:b9:9e:2c:ce:0a:52:98:
25:c3:35:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:37:03 2026 by rpki-client