
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
File: TyFhsA_Cs23gqCRPCvKBQnkChg4.mft (raw, json)
Hash identifier: 7u0F1zxr6xt+/6J63zD5hYWKr3HcJK2/918v+omYaBI=
Subject key identifier: 1E:81:BE:61:BF:84:AB:F6:DE:BB:85:7E:C4:C5:D2:90:38:25:85:7E
Authority key identifier: 4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E
Certificate issuer: /CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E
Certificate serial: 0AC8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
Manifest number: 0AC0
Signing time: Sat 24 Oct 2026 19:29:11 +0000
Manifest this update: Sat 24 Oct 2026 19:29:10 +0000
Manifest next update: Sat 31 Oct 2026 19:29:10 +0000
Files and hashes: 1: TyFhsA_Cs23gqCRPCvKBQnkChg4.crl (hash: CWQoe+BcXETZZvyIoGJzNPgNlo7bktMsF/0y4KoKr5w=)
2: C09BAC8E860011EABD37250EC4F9AE02.roa (hash: 6IXTKp13HuxMWhW3hn1g3ZSbEaBP+PUeVbQIJFfugEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl
rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 19:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2760 (0xac8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C19F7, serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E
Validity
Not Before: Oct 24 19:29:10 2026 GMT
Not After : Oct 31 19:29:10 2026 GMT
Subject: CN=6add0707-6127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ae:b4:38:29:4c:48:d1:de:9e:e2:ea:58:82:
27:a7:33:67:cf:a1:43:dc:93:51:28:88:58:a5:22:
e7:1a:18:ac:bb:2d:ab:ac:75:39:c3:88:02:cc:a2:
da:37:24:91:16:42:d7:b2:59:b4:63:d1:5f:00:f4:
48:0c:51:fa:db:49:be:30:32:11:2c:6d:dd:68:60:
a6:1d:7a:5e:05:74:09:29:ce:c1:92:69:9b:21:53:
06:c6:96:04:d4:b7:28:bb:68:46:83:99:63:72:6e:
5f:33:0c:31:d1:cd:2d:af:04:26:5b:a8:45:5e:22:
84:16:a6:ee:54:37:0e:39:5b:5a:59:65:59:19:fb:
7c:a3:af:da:e8:86:60:ee:e6:ff:d4:cc:cc:3b:24:
02:ac:ca:42:38:32:06:18:6c:be:08:df:9f:45:9e:
dd:69:c7:45:a5:88:32:dd:44:2d:4b:8e:87:dd:58:
9e:b9:31:e2:ea:c8:6a:ab:8e:1a:a5:3e:d7:09:0a:
8c:06:0d:d5:f3:45:22:66:31:a8:66:66:b8:2d:f9:
40:3f:5a:74:b5:d3:40:23:8e:6d:e1:85:67:ce:c9:
1d:d2:93:26:24:ab:42:04:e6:11:e1:ab:60:f7:23:
b2:f6:f7:7b:15:25:d6:61:16:e0:9e:50:27:23:94:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:81:BE:61:BF:84:AB:F6:DE:BB:85:7E:C4:C5:D2:90:38:25:85:7E
X509v3 Authority Key Identifier:
keyid:4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:ca:ab:7d:a7:bf:4f:21:5f:55:ef:a5:d2:9d:ad:11:da:b5:
ec:35:cf:bb:c9:f3:cc:8b:7a:a2:d6:db:14:7c:ec:84:24:22:
e0:2a:77:8b:94:a7:6d:aa:57:b1:ea:3e:ea:3f:3e:15:44:ae:
8c:d8:7b:05:89:71:0f:4e:1f:bc:7b:95:88:bc:a3:2c:50:14:
ef:e2:ff:1f:78:8b:90:27:fb:3d:83:b9:cb:51:7a:6c:35:9c:
3b:ce:f9:cf:cf:30:85:4c:ff:fa:a9:71:f2:8e:01:83:7d:d6:
76:50:0e:4b:7f:27:b6:38:3c:a2:66:42:98:54:29:6d:47:75:
af:49:1e:8e:b4:fe:be:64:37:46:73:54:17:3d:45:82:79:82:
6d:25:38:cc:2b:df:29:f6:16:ec:e1:14:40:c0:a5:71:1e:c9:
1e:5d:6a:89:5e:85:49:77:e3:97:3a:d7:c6:c3:2b:47:ca:96:
7f:d3:eb:ab:f0:94:4e:ee:d4:10:b2:73:9e:32:fd:f8:4e:d3:
52:ee:5c:b2:a5:7d:8f:a9:0f:e7:25:7f:45:91:92:a6:f3:3a:
ba:c0:0a:72:b4:b7:5d:aa:dd:e3:9f:17:ab:c7:72:5d:02:79:
40:28:8c:a7:60:97:b6:5f:09:da:2f:e7:04:36:22:5d:16:e9:
f9:5f:a2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:46:02 2026 by rpki-client