
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
File: TyFhsA_Cs23gqCRPCvKBQnkChg4.mft (raw, json)
Hash identifier: 7b60sZ7riHlp/GSBlXAq83fOm6GWAEZoeGZ2tgi7fCs=
Subject key identifier: 95:8C:84:37:BD:CC:D9:17:B5:99:42:06:2B:33:08:F9:F5:3E:16:D2
Authority key identifier: 4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E
Certificate issuer: /CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E
Certificate serial: 0AAF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
Manifest number: 0AA7
Signing time: Fri 04 Sep 2026 19:26:33 +0000
Manifest this update: Fri 04 Sep 2026 19:26:32 +0000
Manifest next update: Fri 11 Sep 2026 19:26:32 +0000
Files and hashes: 1: TyFhsA_Cs23gqCRPCvKBQnkChg4.crl (hash: JYH4hni6jnbgIc8iJOZfdNVfA49oWBV74JEmEHDjNw0=)
2: C09BAC8E860011EABD37250EC4F9AE02.roa (hash: 6IXTKp13HuxMWhW3hn1g3ZSbEaBP+PUeVbQIJFfugEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl
rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:26:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2735 (0xaaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C19F7, serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E
Validity
Not Before: Sep 4 19:26:32 2026 GMT
Not After : Sep 11 19:26:32 2026 GMT
Subject: CN=6a9b1b68-40c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:38:ad:f8:7f:68:bc:da:c9:5f:40:89:a1:
cd:9b:eb:26:b7:01:73:3e:9c:b6:1a:96:93:91:e7:
af:6e:92:f6:22:8d:46:37:92:cf:a7:95:84:7c:7d:
19:61:af:3c:70:11:c3:5c:d0:7a:f2:ae:be:40:80:
cc:02:f0:06:84:64:b6:41:8f:0e:b8:b0:cc:04:9e:
76:66:48:43:e5:97:73:44:e5:4d:15:ac:f0:56:d3:
d4:4c:dc:be:41:96:7f:81:ba:73:73:19:fe:9e:1a:
ea:ed:b7:32:83:8b:84:54:d7:6c:06:3c:8f:98:79:
29:55:d1:cd:39:f9:5f:c9:ea:6d:fc:b4:d9:dc:1c:
ef:ff:31:b0:be:4c:dc:fa:d4:92:2a:c7:86:c4:32:
d3:4c:62:6d:ea:df:54:d3:31:3d:56:e2:2f:36:1d:
fa:0f:aa:b1:d3:42:94:c0:f4:68:54:11:d1:29:cb:
62:dd:b7:7b:51:af:92:79:54:6e:21:6e:7d:79:45:
a8:02:a7:bb:e2:b6:de:3d:2f:3b:3b:f4:05:48:53:
e6:e1:2d:22:db:22:d3:84:df:bc:eb:06:ae:f9:9a:
cd:f7:61:3e:6a:bb:95:8d:48:4a:e6:fd:53:ea:df:
eb:99:67:b8:d9:c0:c7:b4:6d:ad:d9:45:3f:fe:0a:
f2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8C:84:37:BD:CC:D9:17:B5:99:42:06:2B:33:08:F9:F5:3E:16:D2
X509v3 Authority Key Identifier:
keyid:4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:21:05:f6:ae:f2:05:b3:b9:e8:97:82:d9:36:8e:d3:d1:e0:
41:56:b4:0f:8e:fd:8a:41:74:28:35:05:89:e7:87:2b:84:61:
21:8a:b2:15:ca:64:f0:46:a4:0d:bc:5b:c7:93:15:88:34:57:
35:ae:f0:fd:1f:35:14:6b:f4:02:be:99:d6:cc:89:1b:d1:12:
19:71:93:22:ad:b6:0b:d9:08:98:86:c9:61:83:db:b1:1b:80:
1c:4e:db:65:14:8d:76:f6:4e:45:1d:35:75:bc:9d:5b:f2:bf:
8b:f8:0e:30:d7:75:e3:6b:2c:12:8f:24:2d:fc:6d:3e:ae:33:
7b:64:db:e2:1c:40:4f:2e:60:09:7f:8c:3f:57:c7:da:27:5e:
c1:73:8d:bd:bb:a4:ff:d8:c9:ea:8d:76:cd:92:6f:93:2f:51:
32:8f:d6:ce:e6:0d:4b:36:94:43:ce:49:32:f1:1b:44:22:63:
76:15:b6:a8:7e:1b:84:89:75:c7:12:91:a8:6a:49:57:97:ae:
c2:ad:34:88:e5:17:7b:4a:13:b5:b4:e2:0c:6c:51:18:75:72:
b8:ce:b3:74:b8:25:7c:6a:31:63:16:0a:75:11:39:1c:63:60:
bc:5e:22:f5:aa:c9:d8:68:3e:98:2e:0c:bd:ef:b9:61:c7:8e:
14:60:7a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:39:40 2026 by rpki-client