
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
File: tLhVi-xUNiD-bqkv68XoqSchTDk.mft (raw, json)
Hash identifier: vpKj2o3oWVGcHITvW2VaRmOMd1Rihgyfl3C0co04mt4=
Subject key identifier: C7:0E:13:5D:98:33:61:F6:EB:0E:56:3E:42:39:D7:FC:89:A0:54:91
Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39
Certificate issuer: /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39
Certificate serial: 0B06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
Manifest number: 0AF7
Signing time: Wed 22 Jul 2026 19:44:42 +0000
Manifest this update: Wed 22 Jul 2026 19:44:41 +0000
Manifest next update: Wed 29 Jul 2026 19:44:41 +0000
Files and hashes: 1: tLhVi-xUNiD-bqkv68XoqSchTDk.crl (hash: bEeiJYiXTNzsqqyY2izyPw+tys/fXfl6zeRdiqgQ898=)
2: FC46090E9C2611F093B6FA57C4F9AE02.roa (hash: Js8cZgoWxEm28eX384SK+YZXcmAPJ6mZANs9VezfqXk=)
3: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (hash: utr9cvGOzINqaYUQ/dmwQU5yDRbxn3goNF9CCVXnSpA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl
rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2822 (0xb06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110BA6, serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39
Validity
Not Before: Jul 22 19:44:41 2026 GMT
Not After : Jul 29 19:44:41 2026 GMT
Subject: CN=6a611da9-16bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5f:b9:e7:cf:28:6b:cd:04:27:67:b3:82:a8:
54:9d:67:33:99:fc:14:28:c2:c9:61:ba:58:98:df:
06:79:af:b1:5f:2f:e5:b7:5e:7b:84:ee:dc:c6:d6:
b3:da:a6:7d:ad:b2:b9:08:aa:54:72:a7:92:06:82:
46:9e:11:52:99:92:70:f9:e0:0a:5f:c1:1e:c0:b7:
c4:a6:38:b4:06:e2:f8:a9:62:b0:85:0c:32:b6:29:
23:5e:d2:e9:7e:ed:d9:4b:c8:39:fc:41:93:e7:a0:
ab:7f:9c:11:82:31:98:a1:a2:bb:7c:83:a3:5a:86:
b5:75:3c:37:d8:7f:26:17:ef:0a:22:87:d8:6e:8f:
93:37:40:38:b6:a2:c8:b6:8f:a6:0d:16:d1:cb:2b:
8a:2c:fb:95:8b:e1:44:39:d1:de:51:b0:4a:cb:b0:
9f:2a:20:19:7b:37:d4:16:0e:12:a1:4a:1f:c2:2a:
ce:9e:89:8c:65:ac:1e:4b:44:26:ed:ed:cf:70:c7:
17:f7:c2:05:e7:12:01:e3:b0:14:58:e4:75:3d:77:
68:5f:b2:b0:c3:a4:27:2a:d1:23:68:1b:8e:52:4f:
83:12:52:0a:e2:6a:e2:29:8c:6b:2a:84:05:ff:37:
f3:79:96:74:af:27:6b:cb:92:9d:19:81:1a:49:a1:
13:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0E:13:5D:98:33:61:F6:EB:0E:56:3E:42:39:D7:FC:89:A0:54:91
X509v3 Authority Key Identifier:
keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9d:da:03:57:47:0e:fd:c1:26:04:7b:93:de:96:59:30:59:
bd:c8:b9:04:ff:19:bb:4c:df:90:f3:63:1e:04:fa:99:14:7f:
11:6b:f4:29:ae:f8:83:f2:05:2d:13:76:1e:a2:9e:46:2d:76:
e7:84:f7:af:e5:45:90:b0:57:50:dc:4a:67:78:e8:24:1c:55:
95:88:13:8d:ef:8f:43:49:cf:5d:8a:f1:68:61:c6:9e:6d:ca:
ed:d2:9f:17:f8:90:81:af:4b:37:6c:ae:64:a6:63:d6:fe:ee:
82:cd:da:18:38:89:ab:21:6e:f9:21:bf:e8:3b:08:1e:1d:a9:
a9:8d:ab:c4:fc:2c:ce:47:99:72:08:87:d3:2c:99:ef:c9:a6:
e0:45:48:af:43:bf:48:c7:6e:d7:3b:9e:49:ec:fb:58:39:ae:
95:aa:6e:5b:38:81:ac:97:5e:64:8a:79:cf:06:fc:6f:8e:98:
55:01:e7:27:1c:0f:bb:b6:10:3b:e6:84:0e:95:b8:31:4a:d0:
84:7d:d8:af:2a:b8:30:be:3e:cb:6a:f8:11:b5:13:35:5f:f0:
2b:72:ca:61:1d:73:83:e2:f0:f5:77:a1:b8:cc:f0:4a:8f:01:
6f:a6:09:ff:68:5a:99:44:84:02:92:91:17:81:97:8d:05:fa:
8e:02:7b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:21:00 2026 by rpki-client