
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
File: tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json)
Hash identifier: oSr7ynwjcyjtlTv/jGIEFP0BO7CyqpEYlfGXPs7A6/Q=
Subject key identifier: 20:DF:5E:CA:33:26:51:E4:75:AF:45:7B:AD:C3:E8:DE:42:39:93:89
Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
Certificate issuer: /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Certificate serial: 0350
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
Manifest number: 0342
Signing time: Thu 01 Oct 2026 01:23:17 +0000
Manifest this update: Thu 01 Oct 2026 01:23:16 +0000
Manifest next update: Thu 08 Oct 2026 01:23:16 +0000
Files and hashes: 1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: 8UzlGgyXKcakZUq3LWRxajRcemPJGDfeKZR2xr4CJz0=)
2: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: k7oa0gyVDVstpxNJdtdSBjaevXmXY8KxLGB4YjxHPeM=)
3: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: zLRwlyYQoMCNATwicvYcavIJagOdRZfxbGUFbhuhVoc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 01:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 848 (0x350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Validity
Not Before: Oct 1 01:23:16 2026 GMT
Not After : Oct 8 01:23:16 2026 GMT
Subject: CN=6abdb605-812e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:9b:38:b8:16:e0:61:f1:50:f3:38:5b:ae:
2a:b9:1a:ef:9b:65:30:f5:54:82:06:6a:02:b2:5e:
23:6e:5b:64:da:4b:a1:28:9f:82:df:d3:f6:24:76:
00:8c:38:6e:19:71:53:81:83:76:b6:7d:ff:15:fa:
84:4e:c5:e5:01:2c:b1:0f:4f:76:9f:7c:0a:f5:66:
15:13:56:49:13:69:da:fd:a1:cb:e1:ed:5a:5c:7e:
ed:f2:0d:cb:72:03:05:e4:2c:bb:38:d6:91:8b:8f:
66:0f:c2:02:77:46:1d:4d:f5:ee:e4:2f:13:5a:e8:
4f:a1:5f:a1:b2:82:24:cc:ce:a9:76:40:6b:16:9e:
e6:fa:8f:f0:54:9c:35:8a:fc:ed:6e:ce:79:0e:67:
76:a7:80:06:a8:5a:6e:59:72:2b:41:77:cc:57:d7:
97:9b:47:9b:01:37:59:79:7c:6b:b9:ec:94:3a:8d:
d3:e9:e1:64:3d:66:6a:fb:6d:59:36:0b:15:30:37:
00:41:33:c1:98:fe:09:19:79:c1:a9:a0:f3:70:95:
60:32:e9:bc:07:01:d7:86:ca:a3:a7:79:7b:76:41:
54:1a:06:a6:fb:3a:d5:ba:9d:9e:bd:b6:93:0d:c8:
6d:8b:bf:c4:46:ca:40:4b:8e:28:a8:c7:e4:fc:e4:
b8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DF:5E:CA:33:26:51:E4:75:AF:45:7B:AD:C3:E8:DE:42:39:93:89
X509v3 Authority Key Identifier:
keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:b5:45:c6:01:a2:50:84:d5:72:fa:6c:6d:27:e4:b0:d8:0b:
14:c5:a5:f7:72:a2:27:96:4f:23:9b:fc:5f:b9:9c:d7:4c:12:
75:ed:a1:87:f5:c0:7d:72:fb:02:4b:43:85:de:b0:14:18:a0:
5e:ba:ee:d3:05:9e:89:cd:6b:5e:6b:f8:b5:b4:0c:50:e1:85:
fa:5b:d2:ca:8b:47:bc:8d:7d:34:c5:98:88:da:8e:e7:f1:f0:
4c:e9:4d:c3:3b:c7:45:68:90:01:8b:60:56:ba:c6:ad:6a:b5:
72:4e:74:ab:f8:e2:99:21:81:15:02:65:44:39:dc:d5:63:80:
59:35:38:0b:5e:dc:0a:a1:c2:a6:65:82:3e:10:22:c0:66:94:
e4:98:bf:da:c6:cb:ce:83:1d:fa:4d:8f:a2:a3:6e:63:88:e7:
9a:a9:af:6f:81:32:b7:b8:5e:63:4a:4c:09:0a:26:16:2a:49:
34:35:11:b7:1e:67:c1:e5:48:33:48:67:a9:20:6a:62:2e:5b:
0f:92:75:7d:39:96:7a:d2:f0:89:45:f5:de:0e:a0:55:60:67:
80:1c:23:b3:27:72:4f:c2:d4:bd:c0:b0:54:72:4d:38:3f:13:
ee:7f:f7:3f:b2:d9:ee:d8:e1:c0:97:fa:81:7e:33:16:63:f6:
ea:b5:cd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 14:42:22 2026 by rpki-client