
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft
File: tHZ0MTuUPsbL73VivRlw1ccz6ls.mft (raw, json)
Hash identifier: yunUrA2/u/fWg9nJmw8osSCDFFafnJTi9M0+0kMBQMk=
Subject key identifier: 19:AB:58:09:7D:70:32:01:D4:C4:82:6B:E4:DB:33:15:0D:45:89:E3
Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B
Certificate issuer: /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B
Certificate serial: 06F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft
Manifest number: 06DF
Signing time: Sat 26 Sep 2026 22:20:44 +0000
Manifest this update: Sat 26 Sep 2026 22:20:43 +0000
Manifest next update: Sat 03 Oct 2026 22:20:43 +0000
Files and hashes: 1: tHZ0MTuUPsbL73VivRlw1ccz6ls.crl (hash: 7XrPiMgFrIkDHjhpZp8SONZyEe+PdiatxOJ6dqKew1M=)
2: 76C5842CC3DD11EDAAED714EC4F9AE02.roa (hash: AksvgR3e+xXwbDovJAdap8RK4kJv79k9mUAmkMcDM9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl
rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 22:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1784 (0x6f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183898, serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B
Validity
Not Before: Sep 26 22:20:43 2026 GMT
Not After : Oct 3 22:20:43 2026 GMT
Subject: CN=6ab8453c-abfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0e:8d:b7:5a:7d:fa:30:cb:94:f1:6d:ec:25:
57:6f:37:fe:67:f6:a6:b2:2d:23:02:35:24:c3:7c:
a6:13:b3:d6:ce:68:4f:f5:9f:5d:c9:a7:38:10:14:
fd:0d:b6:34:0c:6b:69:a3:60:5e:fc:cf:80:f4:1d:
cf:9c:88:a9:6b:2b:17:e9:f6:08:fd:7d:e8:e8:1f:
41:c1:b0:14:6a:95:e6:81:9a:c6:f6:f6:8d:44:3f:
46:84:7c:b2:1d:c3:d9:0b:c2:57:a8:a2:ca:c0:d8:
f4:ef:4b:0c:cd:42:81:b4:06:e8:9f:9a:4f:2d:4b:
af:fe:4d:38:06:69:81:53:f1:27:df:a0:98:21:3d:
0c:74:a1:68:59:e6:62:1a:43:75:ab:14:a8:4a:22:
c5:3b:3f:73:ad:53:6f:0a:3b:d6:95:46:ec:bc:14:
6c:a2:70:37:5c:b3:74:1d:ad:f1:77:57:f1:7c:24:
63:6e:26:4a:b6:59:d8:80:90:d7:e4:f7:52:c6:9b:
e6:34:55:64:21:be:05:42:b2:bc:fb:a3:01:61:f2:
2b:81:9a:e7:2c:f9:56:b0:95:06:bb:48:4a:97:b7:
c0:2d:6d:77:64:4d:6e:62:01:63:de:a8:6f:1b:06:
3f:45:c7:01:b5:57:b4:1c:d4:70:1d:89:44:b7:c7:
35:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AB:58:09:7D:70:32:01:D4:C4:82:6B:E4:DB:33:15:0D:45:89:E3
X509v3 Authority Key Identifier:
keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f1:3f:a4:cd:9a:7d:f7:78:43:d8:4c:63:1d:fe:aa:02:2c:
4d:d6:6e:55:06:3a:f5:74:cf:10:2c:1f:1a:bf:c2:60:ea:ba:
c2:9f:5d:48:8c:a7:94:63:da:b0:6c:36:1d:12:73:61:31:3e:
fc:7d:61:4d:26:94:27:a5:54:54:04:3a:9e:db:37:38:fc:e7:
38:df:58:06:57:8d:14:18:7c:59:6b:da:34:ea:7d:78:b1:55:
a0:a2:df:b2:8c:a6:fd:f7:8a:08:a9:39:93:b8:0b:59:3c:6e:
e3:c8:8f:05:83:7f:7b:89:17:22:c8:f7:da:c4:6d:a0:f5:4c:
9b:ec:9e:3d:c4:36:9c:e8:23:57:ce:6b:f0:8f:17:f8:d6:89:
c3:7c:f3:f7:54:39:88:75:e2:70:87:ef:ef:b4:ca:ef:74:46:
6f:59:5d:ba:01:78:af:73:40:b5:af:90:9e:e0:c9:a7:ef:ca:
11:d1:86:e1:98:c7:24:9c:bf:20:7c:25:bd:0d:cc:d9:7e:da:
f5:96:1c:36:a6:1f:91:e0:cf:77:47:26:29:5a:b4:a8:94:6a:
b3:74:c8:f1:ce:8c:1b:0e:66:63:79:de:14:fb:69:81:5f:04:
98:05:a8:d4:c0:a8:6e:8d:99:d2:38:b5:e9:d2:f0:f0:91:b3:
04:b1:11:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:28:28 2026 by rpki-client