
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
File: TYR1I-W92eO4lpgooEv-2isMAxs.mft (raw, json)
Hash identifier: w2TeUSn+3N7Y8Oxmo349kGDZsDsbuXj2uNsk5byB5Xs=
Subject key identifier: 16:86:18:05:3A:59:12:BD:2E:F1:FB:95:2C:4C:DB:9D:07:B7:31:C8
Authority key identifier: 4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B
Certificate issuer: /CN=A91AC726/serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B
Certificate serial: 0835
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
Manifest number: 0817
Signing time: Thu 10 Sep 2026 21:08:00 +0000
Manifest this update: Thu 10 Sep 2026 21:07:59 +0000
Manifest next update: Thu 17 Sep 2026 21:07:59 +0000
Files and hashes: 1: TYR1I-W92eO4lpgooEv-2isMAxs.crl (hash: 1jhEXBcEJgZzLC43GwoiPB5KDYpY5DPyaKEu43IAwao=)
2: CA9D82E8688511EC999E8B70C4F9AE02.roa (hash: ZSWT8bBIoiXkk5NHfAcRN305gYra6U3TCXFXnnRK7rU=)
3: A8D1E0DE688811ECBE2C4F49C4F9AE02.roa (hash: UClPHshsGcyvq7g9LcOIEJ85L9Tn1p+WoRxD1Wzjhl0=)
4: 52EFDBAE687D11ECBF82F558C4F9AE02.roa (hash: vlQE6zfU8sldRsawycgscMRN/+d6UAyhTBqyJZ13gKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl
rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 21:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2101 (0x835)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC726, serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B
Validity
Not Before: Sep 10 21:07:59 2026 GMT
Not After : Sep 17 21:07:59 2026 GMT
Subject: CN=6aa31c30-1772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:39:de:3b:69:78:09:0f:32:5a:a2:89:17:
21:8e:c5:77:67:a2:6c:b0:ee:5d:47:14:62:82:5c:
a5:e3:90:74:f3:fb:cb:bc:76:39:42:5f:f5:1d:3c:
d6:36:66:24:88:11:e1:22:7a:c2:89:a6:b4:2b:ae:
5e:67:f2:b4:11:b6:38:55:ec:78:a5:9e:9a:da:2e:
23:21:e1:64:e8:f5:b9:b8:82:22:37:bd:3b:cf:7b:
eb:c6:27:43:b8:eb:b3:9a:cd:ca:65:9d:e1:b3:4a:
ef:54:a9:5a:8b:61:2e:a4:cf:f0:40:80:33:53:bf:
ae:37:05:17:e4:4d:bf:8a:3d:bd:15:ef:da:d9:21:
65:3d:b1:cd:0d:54:b1:15:e7:d4:c2:cf:e3:de:fa:
ac:f1:bd:75:f7:b2:ff:ce:ae:96:c6:15:8e:f8:3a:
51:ba:e3:5d:ae:af:3a:be:47:ca:d7:b1:0a:2f:d9:
a2:71:ea:c1:98:03:77:1c:a6:d6:7e:01:96:00:52:
7c:91:1e:39:67:a6:c8:79:4e:7e:6d:20:15:50:bf:
a5:1b:e3:ee:8b:62:fa:74:37:c3:ca:63:bd:ec:85:
f7:de:79:65:69:70:fe:13:aa:c7:33:35:81:35:a9:
c4:ec:5a:01:65:6c:cc:05:24:35:9a:c3:cb:1c:ee:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:86:18:05:3A:59:12:BD:2E:F1:FB:95:2C:4C:DB:9D:07:B7:31:C8
X509v3 Authority Key Identifier:
keyid:4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:82:c6:30:cc:3d:e5:2f:8d:4d:33:7f:78:ef:90:6e:89:30:
a2:94:83:b7:73:20:2c:f4:71:f8:01:a8:78:93:9a:05:33:40:
2e:7f:a1:c5:68:d1:8e:1d:c4:6e:22:a4:ef:cb:89:90:3b:8f:
05:70:b3:10:41:02:4c:23:34:ff:45:d9:ca:04:4f:6b:12:b5:
3a:b5:cb:39:6b:b8:9f:c3:48:10:31:3e:d2:6c:59:96:a1:8f:
fd:e4:34:bf:4c:22:e3:c1:23:8a:08:66:7e:6b:3a:8a:21:84:
8f:97:14:7d:60:03:d0:7e:52:e9:32:3b:d8:95:0e:64:85:7d:
f6:03:27:56:e6:c7:ce:d4:66:43:97:24:77:c3:e8:d4:bd:fb:
13:d5:c0:fa:6c:a6:27:e6:1a:40:1f:6f:8a:1c:ff:a6:c1:42:
a9:fb:e1:06:fa:4a:4f:3c:0a:35:59:0a:42:39:fa:68:ad:a5:
1f:8b:2c:2a:cf:34:99:7a:31:96:9f:31:64:fa:80:26:52:41:
f1:9f:c2:96:b3:a8:6d:b7:02:fa:f9:f1:47:4e:a2:30:44:6b:
e8:25:ad:24:5b:2e:53:4b:e8:9d:62:90:97:aa:e5:29:69:34:
94:bb:40:e9:68:38:fc:77:a0:c7:21:10:db:8e:40:8b:58:21:
95:f2:e5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:59:38 2026 by rpki-client