
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
File: tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft (raw, json)
Hash identifier: q6M8UVL2lWdya1Ydpif7CueSL8Ux8LrNDvg81lA1a2E=
Subject key identifier: 9D:56:33:41:DD:19:E2:96:1A:F3:F9:12:36:46:39:CB:8A:0F:37:31
Authority key identifier: B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F
Certificate issuer: /CN=A9131181/serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
Manifest number: 011B
Signing time: Fri 25 Sep 2026 05:59:31 +0000
Manifest this update: Fri 25 Sep 2026 05:59:31 +0000
Manifest next update: Fri 02 Oct 2026 05:59:31 +0000
Files and hashes: 1: tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl (hash: ACnXQJN1sOLqf49j9dmSmmZG83OZhl87YYnfxxeYnH8=)
2: AD57493E0B7B11F09EB3322EC4F9AE02.roa (hash: kJueAKUE3Sd3o6wDYoPNiGbGdW9zWY3YeQpVU6pBXdw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl
rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:59:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131181, serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F
Validity
Not Before: Sep 25 05:59:31 2026 GMT
Not After : Oct 2 05:59:31 2026 GMT
Subject: CN=6ab60dc3-b08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:95:01:14:67:2e:38:79:83:73:3f:5b:c2:95:
74:7f:ef:8c:78:1a:79:a5:9f:89:19:35:eb:54:06:
f2:a7:3b:a4:52:d7:2d:95:fa:15:92:7c:1b:02:00:
67:f0:31:2f:fb:46:63:cb:31:dd:4f:35:19:39:79:
4f:3d:49:8e:0f:2b:31:03:3e:53:bb:6e:3f:a0:97:
e7:38:8e:7e:83:82:7d:f4:82:88:1a:f0:36:5d:bb:
0c:27:f9:4c:e2:9e:6b:0e:6d:a7:a8:c8:cc:a7:9a:
b1:e2:bc:a8:82:05:7e:29:7e:e2:d5:d3:44:7e:11:
8e:8c:d1:e2:3c:15:35:6f:9f:09:29:36:fa:80:c0:
a4:27:fd:d1:62:a6:56:30:a1:d8:32:d6:62:a8:2f:
1b:71:a2:58:93:59:55:6a:fd:be:a7:8e:f8:45:1a:
2e:23:4a:0d:65:b7:a7:61:46:62:6c:0e:90:a3:45:
1e:11:e9:38:5c:9c:a0:e0:bf:56:c7:93:42:77:fd:
6b:81:95:19:92:10:97:82:a9:e7:f0:d0:0a:70:5f:
41:4b:ec:6f:92:11:2a:08:da:d0:78:5d:c9:a5:f8:
a7:06:4d:4d:2a:68:28:c4:90:22:f2:67:4b:a0:03:
f1:e6:1c:df:43:01:1d:50:38:65:7a:40:db:5b:e5:
bd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:56:33:41:DD:19:E2:96:1A:F3:F9:12:36:46:39:CB:8A:0F:37:31
X509v3 Authority Key Identifier:
keyid:B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:14:dd:6d:aa:08:01:df:b7:8a:2f:96:d3:e4:54:62:62:15:
bc:82:7b:d1:26:29:6e:ab:69:0f:0a:57:13:ba:b4:02:01:68:
16:dd:f2:7f:4a:49:ca:03:48:2d:fa:62:8c:ab:d3:05:99:0f:
84:3c:2e:21:cd:e9:64:01:0c:a1:c1:36:a2:47:7b:b6:40:8f:
9f:a3:40:fd:e4:f9:6a:d3:d4:c3:56:07:a1:ea:29:7f:e8:f5:
a8:68:0e:16:5b:2d:8b:03:60:fe:0d:0b:b0:00:89:30:ea:77:
2f:ac:ca:32:47:5f:70:95:d0:26:41:08:fb:0e:58:7c:0c:74:
b1:67:31:4d:b9:15:9f:3a:49:43:7b:e4:81:34:de:08:c0:0f:
06:f3:61:6b:a4:5d:74:5b:80:75:47:d7:f2:70:36:98:39:6a:
38:fd:6e:72:21:00:26:df:13:5b:3b:93:67:82:4d:8f:64:fe:
ff:d8:94:2b:b4:ed:33:d7:d5:21:88:ce:31:60:76:a9:99:c4:
75:e2:3e:c4:f8:63:bb:cb:12:cf:ea:29:8e:48:af:c7:54:88:
b3:4e:77:17:dd:3c:8e:de:f7:32:27:a0:9b:6f:81:d4:40:dc:
d5:01:60:c4:79:d2:40:54:34:88:b3:10:9b:0c:97:b9:16:df:
ea:9d:dd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:21:17 2026 by rpki-client