
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
File: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft (raw, json)
Hash identifier: taa48Uw8ukthjk2ZhDOWZrjVK/XyMlJnW5fyM+l/E4s=
Subject key identifier: F8:BB:9B:BB:26:E5:E3:B7:91:39:C7:7F:71:01:E7:E1:35:42:78:21
Authority key identifier: 4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
Certificate issuer: /CN=A9176C8F/serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
Manifest number: 0168
Signing time: Thu 23 Jul 2026 06:31:36 +0000
Manifest this update: Thu 23 Jul 2026 06:31:35 +0000
Manifest next update: Thu 30 Jul 2026 06:31:35 +0000
Files and hashes: 1: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl (hash: eaO3hKe4UnMRIUsKIh0DbWjX2zSopgsVvxsuEiR4gjA=)
2: 4E9597086B5C11EFABB11F60C4F9AE02.roa (hash: xaj9ev9gObxEarMjWAx7hyuUavQ9BGr2NQce4XrNjSg=)
3: 43749A72824E11F0A1C4B018C4F9AE02.roa (hash: o9Xs3io38RTaw4LTZVDWVNHdH5+V8NMTsg37SGZ03EY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl
rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176C8F, serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
Validity
Not Before: Jul 23 06:31:35 2026 GMT
Not After : Jul 30 06:31:35 2026 GMT
Subject: CN=6a61b548-cada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:a9:e8:43:6a:d9:d8:88:be:49:35:6c:f8:
4d:d5:7c:44:9b:89:90:ee:f5:39:3e:4c:dc:73:f6:
3f:44:35:46:4e:fe:ed:06:da:94:1b:ce:73:38:92:
d9:2f:68:0a:01:d3:da:96:f9:5c:ff:af:d7:82:84:
f4:f3:70:61:27:6f:0a:39:7a:20:16:6b:6e:b1:d3:
3e:91:25:da:18:78:43:29:59:30:58:f9:4f:88:c1:
3f:3c:05:ce:ee:84:c9:fc:3c:f2:b1:a4:8b:7b:7e:
29:f5:ea:31:d5:22:0f:bf:d0:6d:40:34:96:76:59:
da:b3:31:b1:db:f7:e9:93:2c:3b:04:b0:ef:d3:09:
2e:cd:92:21:dd:36:18:15:42:1a:82:cb:2b:13:ea:
d5:5a:0f:eb:d4:94:6f:d6:4f:ab:be:e7:3d:b8:2d:
3b:b3:93:30:3d:df:1e:98:cd:97:b5:23:7d:51:c8:
98:e6:f6:72:50:a7:68:d5:b4:50:f8:a1:54:fe:e8:
0b:11:1f:68:9d:50:c9:70:56:c3:2b:92:57:57:a7:
10:7c:a3:49:4b:60:4f:ee:8b:5b:e9:54:c2:13:4b:
9c:e0:60:45:45:34:55:3e:cd:d5:28:72:6e:7d:77:
61:10:5b:1e:2b:ec:37:9a:91:38:89:a4:c7:ca:bc:
8a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BB:9B:BB:26:E5:E3:B7:91:39:C7:7F:71:01:E7:E1:35:42:78:21
X509v3 Authority Key Identifier:
keyid:4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:74:d5:3c:7c:e7:e1:ad:41:93:33:a0:5a:97:6f:e1:5d:4d:
9f:e1:e6:58:b0:e6:c9:32:b7:2f:9e:d3:15:fa:b1:50:3e:ea:
81:8c:cd:6f:2c:b3:7d:78:03:1a:5b:28:7f:cf:ec:d2:d3:ff:
19:fe:20:83:5a:2a:54:76:49:ab:0f:7f:75:72:ce:61:7b:91:
e7:ba:f8:5b:d9:11:1b:2a:27:42:b7:db:eb:6a:03:16:1d:08:
96:84:51:40:09:15:56:1b:a8:90:7d:13:a6:a9:c2:68:a3:ea:
f2:73:ad:c6:09:bd:07:dc:5d:9d:bc:80:4e:ca:8b:6d:6f:29:
02:a6:a5:da:e1:80:5a:38:56:00:62:32:0c:4f:96:28:e8:b2:
11:ea:66:22:bd:e6:51:92:54:eb:61:98:a3:d4:33:5f:e4:fc:
12:70:c6:94:89:74:71:09:3f:f5:a0:58:c0:e2:09:dc:47:10:
3b:5a:56:59:30:53:2e:4f:a3:8e:46:06:84:af:c1:5a:78:e9:
b8:80:30:72:cf:37:75:de:3f:23:f8:ba:2a:8b:23:01:4f:e4:
34:19:f7:d4:b0:fe:d7:86:fc:45:96:9a:fd:bc:6f:85:ec:a8:
2b:80:74:af:90:e6:59:1e:8b:97:e4:05:4c:67:00:eb:0c:7e:
20:66:97:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzZDOEYxMTAvBgNVBAUTKDRFN0VEOTUxQzRGODlGMTFGMTk0NDY4RUE4MTU0NEQ3
MzM1RTRGNTkwHhcNMjYwNzIzMDYzMTM1WhcNMjYwNzMwMDYzMTM1WjAYMRYwFAYD
VQQDEw02YTYxYjU0OC1jYWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq8ep6ENq2diIvkk1bPhN1XxEm4mQ7vU5Pkzcc/Y/RDVGTv7tBtqUG85zOJLZ
L2gKAdPalvlc/6/XgoT083BhJ28KOXogFmtusdM+kSXaGHhDKVkwWPlPiME/PAXO
7oTJ/DzysaSLe34p9eox1SIPv9BtQDSWdlnaszGx2/fpkyw7BLDv0wkuzZIh3TYY
FUIagssrE+rVWg/r1JRv1k+rvuc9uC07s5MwPd8emM2XtSN9UciY5vZyUKdo1bRQ
+KFU/ugLER9onVDJcFbDK5JXV6cQfKNJS2BP7otb6VTCE0uc4GBFRTRVPs3VKHJu
fXdhEFseK+w3mpE4iaTHyryKrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPi7m7sm
5eO3kTnHf3EB5+E1QnghMB8GA1UdIwQYMBaAFE5+2VHE+J8R8ZRGjqgVRNczXk9Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GMTRFRUQ5ODZC
NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9UbjdaVWNUNG54SHhsRWFPcUJWRTF6TmVU
MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RuN1pVY1Q0bnhIeGxFYU9xQlZFMXpOZVQxay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NkM4Ri9GMTRFRUQ5ODZCNUExMUVGQkM5OTkyNUNDNEY5QUUwMi9UbjdaVWNUNG54
SHhsRWFPcUJWRTF6TmVUMWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeHTVPHzn4a1BkzOgWpdv4V1Nn+HmWLDmyTK3L57TFfqxUD7qgYzNbyyzfXgD
Glsof8/s0tP/Gf4gg1oqVHZJqw9/dXLOYXuR57r4W9kRGyonQrfb62oDFh0IloRR
QAkVVhuokH0TpqnCaKPq8nOtxgm9B9xdnbyATsqLbW8pAqal2uGAWjhWAGIyDE+W
KOiyEepmIr3mUZJU62GYo9QzX+T8EnDGlIl0cQk/9aBYwOIJ3EcQO1pWWTBTLk+j
jkYGhK/BWnjpuIAwcs83dd4/I/i6KosjAU/kNBn31LD+14b8RZaa/bxvheyoK4B0
r5DmWR6Ll+QFTGcA6wx+IGaXeg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:55:43 2026 by rpki-client