
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
File: t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft (raw, json)
Hash identifier: toWYteO2K+Qpkbc/jE+XbsgZjQrFhJEpTatVrNRZoUc=
Subject key identifier: E5:82:2D:2B:DA:19:30:A0:13:61:F1:56:2E:43:52:9C:B3:F1:DB:AD
Authority key identifier: B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA
Certificate issuer: /CN=A9149680/serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA
Certificate serial: 087C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
Manifest number: 0870
Signing time: Wed 22 Jul 2026 21:19:40 +0000
Manifest this update: Wed 22 Jul 2026 21:19:40 +0000
Manifest next update: Wed 29 Jul 2026 21:19:40 +0000
Files and hashes: 1: t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl (hash: HvDkyqOuOzMLdacipEINZKmUjd7migD5NXZ5isg7D3M=)
2: 4EF261AE0BA211EB99DE471BC4F9AE02.roa (hash: BdATbPDfE/iZAiRXCrZ7rIo/NSEdNWqhiAdwuIU9JvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl
rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:19:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2172 (0x87c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149680, serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA
Validity
Not Before: Jul 22 21:19:40 2026 GMT
Not After : Jul 29 21:19:40 2026 GMT
Subject: CN=6a6133ec-6de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:a5:3a:e1:53:f5:9c:5f:a7:dd:dc:43:dd:
82:c9:77:f9:a3:83:e9:25:89:62:7a:e0:f4:7b:37:
a5:37:98:38:43:c0:de:37:47:56:3f:c6:4c:d9:ab:
95:3f:f8:ad:b8:70:c2:0c:f5:23:d2:fe:fc:b3:85:
aa:0a:a8:79:8a:8f:89:fe:fa:cc:38:2f:a4:06:80:
ad:c4:e9:cc:72:38:dc:11:04:60:a1:34:ee:07:3a:
59:e1:6c:1e:c2:ee:4b:b8:19:8e:c8:94:98:fa:ab:
43:50:f5:48:4a:c1:86:38:b3:87:49:b5:71:50:41:
dc:e1:3a:1b:0b:95:c0:84:6c:5b:12:33:43:50:bb:
a1:0d:fd:53:c5:fb:ce:5d:db:28:da:6b:f0:20:70:
2e:f1:88:df:55:95:35:e4:57:4b:bd:e0:b9:03:6b:
c0:c5:c6:c8:63:50:12:ea:30:1e:cc:c7:91:40:22:
be:5c:b7:0c:5d:5b:e1:69:3b:92:f8:b6:f5:58:2c:
b7:1f:d1:e3:20:16:75:97:43:a8:bf:6a:83:f0:18:
01:7c:42:52:9b:0f:cb:b3:54:89:ae:85:14:45:9f:
81:a0:75:e4:d0:48:1f:ec:4e:c8:8c:69:85:68:e6:
4e:70:99:53:97:a1:01:5a:46:10:e0:5b:12:9a:ea:
65:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:82:2D:2B:DA:19:30:A0:13:61:F1:56:2E:43:52:9C:B3:F1:DB:AD
X509v3 Authority Key Identifier:
keyid:B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:b4:99:d7:38:71:bc:fa:e9:ca:84:44:49:5e:b9:b9:98:c2:
e3:e7:99:c3:70:1a:e6:55:32:1c:7c:9b:dd:51:06:41:c2:4f:
cb:73:0b:29:45:84:57:59:27:0e:b4:8a:7f:25:92:86:a7:f5:
7d:e0:22:60:c8:b8:a9:13:f9:9e:a1:28:88:69:4c:91:e3:58:
78:c9:f1:d3:46:01:ab:3c:8e:e8:69:be:d4:92:b1:5f:62:bf:
ba:3a:f4:06:8d:d4:59:a5:51:fc:bd:d1:4c:81:6f:3a:f6:a8:
f6:f8:1c:32:57:95:4f:84:c8:96:60:55:5e:ed:f5:5a:86:9a:
e1:b7:d1:29:df:cc:36:a9:da:34:e2:50:6c:5a:9e:ea:f1:9a:
43:89:4d:6a:b4:33:3b:9c:24:37:5d:65:f9:25:d5:b1:e0:3e:
65:5b:fa:63:23:d7:f9:63:21:86:c1:4c:44:02:c6:e9:ed:8b:
91:a1:31:05:8d:3b:ce:70:c1:7a:e3:61:54:69:9d:da:e3:05:
bb:5d:56:db:d6:45:75:63:39:70:95:c6:ca:f3:31:57:5e:8a:
ce:69:52:3f:0a:d1:54:7a:08:3f:e3:02:4b:3c:4a:71:f3:19:
c4:8c:f9:04:27:28:42:b2:a9:fc:4b:40:0d:b4:35:4b:a6:d2:
e3:80:10:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:38:39 2026 by rpki-client