
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
File: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft (raw, json)
Hash identifier: dsPjkk4d5hPUQGupTsQIyhL/S4/+uedpEDKvt4BRArU=
Subject key identifier: AE:06:6E:FE:0B:62:3E:91:9D:E8:C6:7C:B6:87:CD:65:4F:BE:F8:CD
Authority key identifier: 4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E
Certificate issuer: /CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E
Certificate serial: 19E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
Manifest number: 19D8
Signing time: Wed 22 Jul 2026 16:28:15 +0000
Manifest this update: Wed 22 Jul 2026 16:28:14 +0000
Manifest next update: Wed 29 Jul 2026 16:28:14 +0000
Files and hashes: 1: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl (hash: d7XIvqYXRWba0aDrYRHTKWmTi7PaoxFZQyT2G81x7Bg=)
2: 9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa (hash: tuFhPkM88OAOhbJHPJWo76XV19a6w7QlA1gqkoBuKS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl
rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6632 (0x19e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173C8A, serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E
Validity
Not Before: Jul 22 16:28:14 2026 GMT
Not After : Jul 29 16:28:14 2026 GMT
Subject: CN=6a60ef9f-97f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a6:0a:05:c5:dd:6a:d7:5b:43:90:15:ab:70:
16:57:0a:ff:52:bc:65:c2:a1:86:7a:39:c5:0a:3f:
d8:bd:b5:bf:d9:49:ff:12:78:b4:2a:16:f9:9f:57:
bd:42:47:fe:d2:89:48:a2:49:fc:61:4f:37:51:b9:
a0:5b:5d:a9:23:25:3f:fa:d1:2e:99:8a:e3:06:e2:
ba:9a:68:6c:5b:f6:09:58:74:af:4d:3d:c9:4b:01:
8e:00:18:cc:80:52:d8:f0:62:e4:65:d9:86:17:0a:
ff:b6:c9:aa:82:c6:fa:9a:5c:dc:15:3e:0c:3b:45:
3c:f5:58:b1:c4:62:cf:56:24:cd:3e:c8:9f:2b:07:
83:94:a1:9c:44:fe:2a:77:2a:d1:e6:9b:53:95:c1:
af:e7:f8:3c:82:ec:ac:46:7d:b8:f7:75:26:43:49:
1d:09:2c:2b:d7:3b:bd:d3:1e:1e:4f:b7:a6:f8:40:
fc:e6:cd:62:dd:a7:c8:ad:4f:74:6e:0a:72:ff:7c:
dd:e5:56:62:28:e0:8f:75:b9:9d:c4:c4:6a:52:6d:
e0:20:3f:cc:33:46:c1:10:e9:9d:15:ec:b6:e1:f9:
15:7a:27:73:2d:60:d8:d5:3b:c0:a2:0a:01:0d:c8:
3e:f7:05:f1:03:fa:ed:70:de:f6:5d:5e:7b:61:cf:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:06:6E:FE:0B:62:3E:91:9D:E8:C6:7C:B6:87:CD:65:4F:BE:F8:CD
X509v3 Authority Key Identifier:
keyid:4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a7:d2:6a:f8:56:13:23:65:eb:8c:6f:d5:20:65:91:eb:12:
fb:d7:87:c8:f3:de:ce:1d:29:5b:41:30:27:65:e1:4d:e7:4e:
05:af:fd:24:48:ef:ff:01:86:90:e9:85:30:58:ae:3a:6e:6c:
72:a4:03:b5:f9:ac:b4:09:20:28:a0:b5:4a:81:cf:63:99:33:
8a:8e:56:13:f7:34:f2:34:44:c4:27:80:bb:71:a1:e3:5a:fa:
6e:25:ae:59:b6:30:4e:d4:e1:67:d8:b4:5f:d8:aa:57:60:63:
4f:6f:41:94:fd:1c:02:66:b4:2b:4e:82:fb:d3:eb:87:c5:20:
c0:cc:d7:ab:a3:84:6e:9e:64:59:0f:45:53:11:c7:5b:29:40:
1e:24:c8:69:f2:d2:90:70:45:eb:b7:ce:29:2b:6c:46:c6:db:
fd:37:e8:a1:86:fe:78:40:73:2b:84:3e:73:f9:a4:f4:e5:f7:
92:a8:07:ae:a9:83:85:61:95:48:b9:74:f3:12:53:11:2d:a5:
c4:ad:d7:8f:b4:9e:7c:8f:4d:a3:bc:6b:7c:e0:6b:cc:5b:e7:
6d:2c:e7:03:c4:6f:91:85:60:96:ad:2c:94:1d:20:39:3d:7d:
63:36:88:fd:07:8d:e7:54:7e:7a:84:59:4e:11:b8:c3:ed:3a:
d6:8e:43:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:07:32 2026 by rpki-client