
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft
File: taoJHUe5b__ilkNNAcZFS04cnhk.mft (raw, json)
Hash identifier: dqU74prFh485EpYQ5OPdMTIHhcAZbjV2J2GqFB2Gamw=
Subject key identifier: 67:F8:07:95:D2:0E:B0:9C:78:E7:16:15:A0:C7:CC:35:21:BB:DB:1A
Authority key identifier: B5:AA:09:1D:47:B9:6F:FF:E2:96:43:4D:01:C6:45:4B:4E:1C:9E:19
Certificate issuer: /CN=A9188AB8/serialNumber=B5AA091D47B96FFFE296434D01C6454B4E1C9E19
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft
Manifest number: B1
Signing time: Wed 23 Sep 2026 06:49:08 +0000
Manifest this update: Wed 23 Sep 2026 06:49:08 +0000
Manifest next update: Wed 30 Sep 2026 06:49:08 +0000
Files and hashes: 1: taoJHUe5b__ilkNNAcZFS04cnhk.crl (hash: L5VBvcEOKKDbT9Qyi3E6gwtn4AhVkPEIuo9BohSzDcU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.crl
rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188AB8, serialNumber=B5AA091D47B96FFFE296434D01C6454B4E1C9E19
Validity
Not Before: Sep 23 06:49:08 2026 GMT
Not After : Sep 30 06:49:08 2026 GMT
Subject: CN=6ab37664-a0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:87:90:68:2d:ce:a6:0a:86:1a:ec:2b:a1:
05:b6:16:b2:e0:f2:45:7f:de:3e:e1:c8:4a:f1:d2:
5e:6d:bb:b9:64:38:6c:68:85:2d:de:65:b2:32:de:
7c:d2:83:e9:9a:59:a5:a6:03:9b:2c:a4:71:9f:9a:
83:9a:89:af:bf:3e:a4:84:e6:39:22:ec:91:77:0a:
20:af:4b:49:41:df:65:1b:e4:12:87:57:04:f5:d7:
d3:db:1f:ad:3a:5e:50:65:81:5d:b9:34:a4:e6:75:
66:8a:d9:57:a4:b8:f8:f8:04:b7:08:1f:7f:e4:61:
b9:4b:4b:11:f5:ba:70:09:ea:43:16:29:5a:7a:e0:
ff:5c:b7:a5:66:e3:ad:0b:5b:71:9e:a0:31:3a:28:
3a:09:ae:a5:41:63:2b:23:0c:4d:f8:19:eb:69:7c:
fa:20:19:41:2e:54:20:ae:c9:a7:b0:e6:10:d2:00:
c8:7f:81:23:d3:a4:39:fe:1f:aa:99:60:22:c6:cf:
f6:92:18:80:4b:a5:bf:ca:df:b6:bf:92:b7:41:96:
37:dc:66:45:a8:67:40:ce:34:c5:83:dd:2a:8c:33:
cb:c5:c0:b1:9e:58:44:ca:61:d0:aa:4a:74:b1:a8:
3c:78:39:d3:d0:b3:cb:b5:82:e9:63:f0:42:02:3c:
2f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F8:07:95:D2:0E:B0:9C:78:E7:16:15:A0:C7:CC:35:21:BB:DB:1A
X509v3 Authority Key Identifier:
keyid:B5:AA:09:1D:47:B9:6F:FF:E2:96:43:4D:01:C6:45:4B:4E:1C:9E:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:7b:37:79:08:f6:2b:6a:7f:fe:88:d9:06:e3:5d:82:4c:74:
7d:34:b3:66:4a:81:d5:04:a8:75:5a:7f:84:25:77:75:d4:82:
bc:53:51:3e:81:50:bf:3d:78:9c:da:42:3e:4b:28:7a:9e:52:
0d:08:c1:8b:dd:42:f2:1b:9b:bb:a0:a4:31:a5:8e:2c:5d:fd:
f5:1e:c9:ca:47:c0:e2:b8:0f:c7:b5:2f:89:d0:e2:48:cb:f7:
26:33:06:70:24:4c:4f:49:f4:f7:ac:77:95:ff:4b:78:76:99:
7f:86:ca:46:6a:bb:db:02:c8:d9:19:1b:d5:c3:f8:a4:95:81:
d9:c5:9a:fd:cf:8b:b8:3e:6e:44:d5:0a:72:31:1f:74:9f:97:
fe:21:56:e9:6f:d2:e1:a9:16:1e:48:32:e2:5d:38:b5:00:ac:
0e:0b:dc:f1:37:43:bf:5f:aa:9a:ee:5d:ce:62:bc:70:8d:d5:
dc:23:e7:47:77:3c:89:10:bc:4a:a1:4a:53:2d:2f:e3:94:db:
83:25:b1:1f:3d:cc:64:aa:0a:90:cc:e7:d2:f5:05:1d:ee:bf:
c9:75:54:44:0a:a7:0b:1f:fb:66:0e:58:e7:f8:be:7f:26:10:
ad:9a:e5:ae:77:d7:08:13:a0:a0:5f:8a:e6:18:78:e0:bd:fc:
04:8b:68:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhBQjgxMTAvBgNVBAUTKEI1QUEwOTFENDdCOTZGRkZFMjk2NDM0RDAxQzY0NTRC
NEUxQzlFMTkwHhcNMjYwOTIzMDY0OTA4WhcNMjYwOTMwMDY0OTA4WjAYMRYwFAYD
VQQDEw02YWIzNzY2NC1hMGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs4+HkGgtzqYKhhrsK6EFthay4PJFf94+4chK8dJebbu5ZDhsaIUt3mWyMt58
0oPpmlmlpgObLKRxn5qDmomvvz6khOY5IuyRdwogr0tJQd9lG+QSh1cE9dfT2x+t
Ol5QZYFduTSk5nVmitlXpLj4+AS3CB9/5GG5S0sR9bpwCepDFilaeuD/XLelZuOt
C1txnqAxOig6Ca6lQWMrIwxN+BnraXz6IBlBLlQgrsmnsOYQ0gDIf4Ej06Q5/h+q
mWAixs/2khiAS6W/yt+2v5K3QZY33GZFqGdAzjTFg90qjDPLxcCxnlhEymHQqkp0
sag8eDnT0LPLtYLpY/BCAjwvvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGf4B5XS
DrCceOcWFaDHzDUhu9saMB8GA1UdIwQYMBaAFLWqCR1HuW//4pZDTQHGRUtOHJ4Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEFCOC82M0QzQjM2RUFC
NzIxMUYwODVDNkRGNUJDNEY5QUUwMi90YW9KSFVlNWJfX2lsa05OQWNaRlMwNGNu
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Rhb0pIVWU1Yl9faWxrTk5BY1pGUzA0Y25oay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OEFCOC82M0QzQjM2RUFCNzIxMUYwODVDNkRGNUJDNEY5QUUwMi90YW9KSFVlNWJf
X2lsa05OQWNaRlMwNGNuaGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl3s3eQj2K2p//ojZBuNdgkx0fTSzZkqB1QSodVp/hCV3ddSCvFNRPoFQvz14
nNpCPksoep5SDQjBi91C8hubu6CkMaWOLF399R7JykfA4rgPx7UvidDiSMv3JjMG
cCRMT0n096x3lf9LeHaZf4bKRmq72wLI2Rkb1cP4pJWB2cWa/c+LuD5uRNUKcjEf
dJ+X/iFW6W/S4akWHkgy4l04tQCsDgvc8TdDv1+qmu5dzmK8cI3V3CPnR3c8iRC8
SqFKUy0v45TbgyWxHz3MZKoKkMzn0vUFHe6/yXVURAqnCx/7Zg5Y5/i+fyYQrZrl
rnfXCBOgoF+K5hh44L38BIto4g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:09:54 2026 by rpki-client