
$ rpki-client -vvf rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft
File: tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft (raw, json)
Hash identifier: mr7Og9cMcuk6VTG86J+PrQbDqltDl8XKgx1/CIjw4zw=
Subject key identifier: 46:A9:32:04:BA:30:98:8D:E8:FA:6E:E6:AE:A1:2A:E9:E5:50:AE:3C
Authority key identifier: B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91
Certificate issuer: /CN=A918ABAC/serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft
Manifest number: D9
Signing time: Thu 23 Jul 2026 08:35:03 +0000
Manifest this update: Thu 23 Jul 2026 08:35:02 +0000
Manifest next update: Thu 30 Jul 2026 08:35:02 +0000
Files and hashes: 1: tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl (hash: EH1jNqUcz4Z9o3zLZP2wlB4c6dcGFWwy99G296AxMGc=)
2: E641780E535211F0A795A950C4F9AE02.roa (hash: fENxtsD75pzT8XaFqFAo0t9dutKfb4gC7DIenHcT3ww=)
3: ACE7F9985DF711F084BC8A50C4F9AE02.roa (hash: BcNgGbp9R5muzvSnB/YVBhMpcVEZktWqP0cVBxkO3vw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl
rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ABAC, serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91
Validity
Not Before: Jul 23 08:35:02 2026 GMT
Not After : Jul 30 08:35:02 2026 GMT
Subject: CN=6a61d237-acf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:a9:20:08:66:d1:0e:66:7f:70:00:cb:8b:
ec:54:08:55:b8:9d:4c:e7:d9:f9:01:3b:bf:62:e0:
26:6d:1c:52:e8:d6:8e:0e:af:b8:68:1b:66:17:32:
d9:10:26:be:69:27:53:cc:35:2d:fc:48:27:a8:cc:
a3:68:02:89:dc:83:f7:a3:f5:43:9d:1b:9f:61:1a:
b9:60:79:a6:d5:b1:0d:eb:85:4f:b6:08:aa:d1:19:
0f:99:b2:09:55:96:3f:e2:9c:1a:f3:a8:87:83:87:
5a:a3:e0:19:ed:8d:e6:5e:e7:30:9d:6c:e0:21:da:
e3:1a:6f:46:9f:5e:64:18:77:54:69:c3:0f:51:ee:
ce:d4:5e:b8:00:ac:ad:da:03:1b:6f:0f:52:87:ee:
40:b6:83:e4:2d:9e:10:1e:20:73:1d:d0:c7:6f:33:
d5:29:b4:43:4f:9f:94:08:c1:5b:0a:41:4e:bd:f3:
79:2c:2d:19:b1:1b:b3:94:62:cd:68:17:1c:7f:be:
ea:87:61:7f:4a:93:67:77:45:95:a1:5e:a6:84:03:
5f:57:eb:14:9e:a1:63:6a:2c:2c:09:6a:f4:27:99:
36:cf:13:e7:ad:88:3e:3a:7b:88:35:33:61:ec:32:
ac:da:e1:cc:9b:d6:4f:fe:f2:07:b3:f1:57:09:59:
56:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A9:32:04:BA:30:98:8D:E8:FA:6E:E6:AE:A1:2A:E9:E5:50:AE:3C
X509v3 Authority Key Identifier:
keyid:B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:de:7a:27:9b:8e:80:d6:e0:9d:de:b0:2b:6c:d1:db:93:22:
01:0c:99:ca:c3:fe:dc:4a:77:1e:ce:a4:59:7d:97:a9:eb:6f:
13:6e:db:18:c6:6f:4a:6b:8a:f6:0d:68:62:ad:ae:34:00:f9:
54:0b:e6:76:4d:4b:4b:63:ac:3c:38:02:4f:52:75:ff:a3:f0:
53:07:06:18:91:08:28:c1:ac:25:92:a3:12:c0:c5:bd:eb:a7:
e5:a0:9d:2a:bd:88:2d:73:65:f4:c2:d5:85:0a:f7:bf:10:8c:
c0:f8:80:97:77:68:ab:2c:36:f1:9b:6a:e2:f6:15:cb:0e:d0:
5f:e2:14:f0:97:b3:17:30:34:e5:ba:bc:2c:cf:c7:5e:07:cc:
9e:4c:0d:74:e4:8d:c6:bd:f2:4b:e9:09:d8:7c:cf:19:5d:bd:
b5:95:c7:35:7d:fc:8d:b9:8c:01:7b:d1:86:8c:da:11:57:93:
6a:8f:f0:c0:6a:6e:cc:55:e7:a8:d2:f5:a3:1d:87:6d:36:e5:
a6:e7:76:6c:ef:0b:cd:43:78:d2:c6:0a:b5:67:88:cc:5e:35:
66:69:18:7d:3c:04:9e:7b:8c:0c:ea:e9:af:cf:28:b6:47:cf:
40:40:3a:77:ce:04:74:1b:50:02:75:39:7b:9a:a7:b0:72:10:
bc:0e:29:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:35 2026 by rpki-client