
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json)
Hash identifier: MEcelXwKOq0CqLej0/rB7Gl07HR3VAOIsaLAIZqSdso=
Subject key identifier: AA:86:1F:58:AA:20:2B:1F:BC:A3:CF:7B:C8:7C:90:19:C3:71:A9:33
Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65
Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565
Certificate serial: 0AE9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
Manifest number: 1AE1
Signing time: Wed 22 Jul 2026 17:36:49 +0000
Manifest this update: Wed 22 Jul 2026 17:36:49 +0000
Manifest next update: Wed 29 Jul 2026 17:36:49 +0000
Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: Wci5uYSyGBBcQ6OlguX52WD27GO55BkWHtXcofRMdpg=)
2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: WglSFimwBIxRaonVvtON24BGZwGg55rZ2VzaZUYH4UA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl
rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:36:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2793 (0xae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565
Validity
Not Before: Jul 22 17:36:49 2026 GMT
Not After : Jul 29 17:36:49 2026 GMT
Subject: CN=6a60ffb1-9744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:2e:ce:a1:5b:e9:f6:32:0d:63:cf:0a:df:
39:8c:8c:20:37:fe:7f:a1:45:0a:f6:51:cb:ad:50:
b5:3a:c0:6d:72:61:31:e3:19:0c:98:31:91:ac:4c:
c4:1a:88:1f:4e:a5:46:0a:f6:bb:eb:c5:6f:d7:9b:
e4:09:6b:47:67:15:d2:57:36:85:3e:2c:22:aa:7a:
11:6f:d5:66:d6:fc:47:14:03:47:a6:7c:f9:5f:e3:
5c:af:47:96:46:16:97:90:1d:ff:f8:15:b3:21:01:
36:aa:17:60:5c:e4:38:03:99:d8:46:41:c3:5b:2c:
24:2f:2e:67:d5:7a:2f:7c:f7:1b:04:19:40:d6:99:
8f:1a:e7:2b:db:8a:ff:c7:e7:e3:12:84:1d:1a:27:
8a:87:34:ac:dc:97:b6:7c:f7:64:51:ec:0b:e5:72:
fd:39:b4:d9:93:91:5c:1d:8a:27:f7:bd:b1:fb:c5:
0d:04:3b:fa:ee:11:d1:61:c3:ab:23:38:3c:c2:9f:
e7:04:39:2f:ee:01:52:05:3e:4e:4b:b3:e8:e3:8a:
1c:e7:dc:53:ee:7e:15:89:55:52:5b:13:9f:31:f5:
bd:3d:7d:88:08:7e:a4:e1:e2:00:dd:ce:e1:b8:04:
c6:e4:db:07:bc:2d:aa:63:0a:06:0e:a8:f0:3e:39:
0c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:86:1F:58:AA:20:2B:1F:BC:A3:CF:7B:C8:7C:90:19:C3:71:A9:33
X509v3 Authority Key Identifier:
keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:67:a0:96:0d:97:e8:4c:8e:e9:9d:17:d6:5d:c5:64:cd:8b:
1e:99:5d:9c:4f:92:45:a9:19:67:73:0b:03:11:ab:32:72:3e:
60:c8:20:7b:0f:a8:67:a0:7e:e8:0c:d4:f0:f7:5a:3f:f3:ef:
f3:5f:18:09:7e:5b:ba:9c:3a:ea:cf:16:65:70:35:c3:14:9c:
ee:76:80:fb:9a:fa:a7:c3:58:02:f2:94:56:be:9c:7e:41:72:
ca:45:a5:54:e8:4d:63:ea:b3:4c:f7:ce:fc:9c:2f:10:07:46:
f1:a6:55:16:aa:73:28:10:d5:2d:66:fd:f1:15:e1:6b:a1:bd:
61:ea:88:ae:94:5b:32:79:c6:ac:fa:a2:31:b4:b0:9d:8e:f6:
f7:55:5c:2c:e4:20:be:c2:4b:e5:4d:5f:48:2a:54:02:41:97:
77:81:e5:ef:b7:75:21:5d:1e:4b:eb:57:a4:a0:27:1a:ca:65:
1b:d2:89:7c:38:a4:3d:59:a0:e9:ce:6b:45:9a:b7:09:3c:aa:
0e:0f:ed:87:2a:80:73:c7:0f:22:4c:6a:f9:7c:b5:c1:e9:5c:
aa:35:cf:88:ee:fc:41:55:8a:29:8f:90:42:9b:e3:12:ec:0e:
3d:ed:21:c3:75:e6:93:71:79:bb:01:b4:69:c7:59:7e:52:d7:
a9:a2:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:03:54 2026 by rpki-client