
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
File: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json)
Hash identifier: fG6VgOQxGr56DWcp3+i4i9sfs25cVuZN582kdCz8EIY=
Subject key identifier: 0E:D0:6B:33:D7:87:71:E2:F4:A3:7A:4A:CF:E8:14:67:B4:90:18:09
Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Certificate serial: 08B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
Manifest number: 08A8
Signing time: Wed 22 Jul 2026 20:59:19 +0000
Manifest this update: Wed 22 Jul 2026 20:59:18 +0000
Manifest next update: Wed 29 Jul 2026 20:59:18 +0000
Files and hashes: 1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: nfq11QCRmhQXlrDROkIyCRDFtwsraUyNuAS9O1gvh+s=)
2: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: olzU9jiah+vCL2TYo6oua28ch8EeQcQTF/v3T6cuGv0=)
3: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: O/7YA16zUHlRs4EqhBTZvR5d/9Wf8oxzD6m86xewXDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2224 (0x8b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Validity
Not Before: Jul 22 20:59:18 2026 GMT
Not After : Jul 29 20:59:18 2026 GMT
Subject: CN=6a612f27-3dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:2a:20:e0:e4:e3:0f:77:59:61:4c:5f:f3:
8f:d5:5b:6d:c2:7c:63:c8:d6:af:9f:cc:e5:84:26:
96:96:68:0d:bb:a0:4a:3a:b2:c2:45:eb:77:84:6e:
90:bf:dd:7c:f5:c8:45:8f:0d:1f:9b:69:79:dc:d4:
1d:cb:2d:38:15:79:ac:f5:d5:e4:4d:b7:26:f8:5b:
96:a5:e4:08:6c:14:1b:ad:8f:ab:60:a9:0f:d8:12:
29:0e:29:e2:40:fe:49:56:76:11:a9:c0:59:ff:b0:
a5:2c:23:11:e6:9f:78:f2:92:e2:65:b0:0d:f9:4a:
97:50:2e:10:bc:1a:93:5a:45:3b:62:cb:11:3d:34:
b1:db:70:db:36:18:0e:3b:db:a6:0c:18:b9:b6:57:
7f:48:1e:7e:e9:b3:ce:33:bb:81:4a:d1:70:50:d1:
63:56:70:40:cf:20:72:02:b7:09:f9:58:8d:07:63:
7b:18:38:98:bc:92:bc:d8:79:b3:3b:66:42:ed:55:
90:70:fb:5b:8d:25:14:0c:15:8a:8b:e2:1b:b6:b9:
38:d0:e4:1a:ba:08:8a:14:9d:86:bd:7f:77:63:3f:
12:22:8e:65:66:a1:41:77:b5:49:4d:84:16:a9:02:
0c:ca:c8:df:e5:f1:23:bb:33:ab:85:45:2f:3c:8b:
a8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D0:6B:33:D7:87:71:E2:F4:A3:7A:4A:CF:E8:14:67:B4:90:18:09
X509v3 Authority Key Identifier:
keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:04:96:14:19:1a:80:d7:0e:c4:af:2b:60:51:b6:e6:7a:a6:
5d:2a:11:02:1a:6a:e8:bb:b4:c1:55:30:03:93:4e:84:c7:ea:
37:11:b1:da:45:b7:dc:97:d0:24:7f:fc:5a:1e:b5:a3:60:9a:
db:43:8e:f6:ab:21:a6:49:e7:de:d4:d8:5d:53:dd:70:e8:70:
da:a2:33:8f:69:75:ed:33:31:92:e2:0a:84:76:2e:9d:1a:47:
2f:02:2c:08:52:e5:4c:43:57:c3:31:a0:db:19:dc:2d:ba:33:
cf:a1:a6:04:db:1b:aa:c7:36:66:f6:93:eb:dd:5b:a5:6f:88:
20:69:10:67:18:ee:31:5e:c5:26:1c:7e:45:5b:69:dd:09:ae:
0a:08:10:4b:25:61:11:53:d4:60:3a:6b:bc:e8:85:ca:4f:6e:
bc:e1:5b:5e:36:dc:00:04:06:e5:93:e8:f1:6c:72:8e:7d:f5:
31:57:fc:ba:fc:36:1a:a5:74:8c:ed:7e:7a:50:34:74:bf:24:
ca:db:04:92:89:7c:ab:fd:ae:73:65:5f:fc:70:f9:82:96:de:
73:2f:9d:fe:63:ee:d8:f5:e6:72:5b:1a:45:fb:2d:12:4f:be:
4f:33:64:9c:20:69:50:55:e3:ff:db:c2:35:43:ed:4d:c4:7f:
f7:24:90:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:18:04 2026 by rpki-client