
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
File: TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft (raw, json)
Hash identifier: FuHl5QXMNaaGLgpmo0L8g7Px90cGFXMdwk19F68jmnQ=
Subject key identifier: 8E:42:BA:61:01:4C:EA:F4:EC:A6:1E:F3:0A:1D:28:24:F2:C2:B5:47
Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23
Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
Certificate serial: 19F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
Manifest number: 19AD
Signing time: Tue 22 Sep 2026 16:30:11 +0000
Manifest this update: Tue 22 Sep 2026 16:30:11 +0000
Manifest next update: Tue 29 Sep 2026 16:30:11 +0000
Files and hashes: 1: TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl (hash: 6L7vEw8sMQLoJuSluAjGUxnmAzCLoPLynpHJFLtmqrw=)
2: 8AE56254350111F1850F2A1285EE528E.roa (hash: lSJHUOWNGcq87TttElJV6mTH7BmRG6JKBpGtl3nrnyo=)
3: 8BE1358E350111F1850F2A1285EE528E.roa (hash: xUw9TBItYiTiBtQHeVXjJg9wiV/pse8P72zkxNYOM6Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl
rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6646 (0x19f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
Validity
Not Before: Sep 22 16:30:11 2026 GMT
Not After : Sep 29 16:30:11 2026 GMT
Subject: CN=6ab2ad13-7d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:ea:ca:f5:cb:7f:bf:4e:10:88:e5:e6:cb:
fe:c8:18:52:ad:a2:3c:c3:bf:33:78:31:c3:84:a2:
09:28:6e:eb:06:56:18:b8:92:a5:f1:1a:83:45:81:
3c:81:f5:25:22:f6:8d:1f:f1:1f:5d:fd:6f:d8:dc:
29:8c:f8:04:33:fd:10:44:a7:08:6c:3e:7d:fc:4e:
6b:16:e0:55:df:29:61:b9:af:0f:a2:25:86:1e:fa:
2d:8a:cc:89:0b:43:57:bc:70:23:8b:30:b1:6c:36:
ba:b4:63:3f:44:63:a8:40:4f:aa:9a:98:8a:40:91:
98:ae:ab:e3:fc:29:d0:5d:5e:8d:2c:0a:97:66:df:
64:c7:95:a2:f5:a0:7e:56:58:00:60:35:dc:bc:01:
69:24:bc:36:06:81:97:47:7e:23:0a:c4:54:77:f7:
94:d1:eb:a9:96:f0:d8:3f:14:03:7f:fc:88:c1:13:
91:f8:06:89:18:e4:49:ee:9e:3e:ce:3b:4b:91:26:
1a:0e:54:a6:7d:14:70:e2:86:3d:4d:ed:4b:a0:52:
b2:96:21:d7:fd:b4:6a:21:1a:82:9d:ae:cd:e5:7e:
45:29:97:2e:40:76:9a:0b:50:14:01:39:f1:ab:97:
32:f9:33:4e:59:c3:de:77:34:ac:50:29:72:ea:e9:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:42:BA:61:01:4C:EA:F4:EC:A6:1E:F3:0A:1D:28:24:F2:C2:B5:47
X509v3 Authority Key Identifier:
keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:d2:12:aa:e2:31:83:7a:51:a1:96:c8:10:23:36:be:ef:85:
39:7f:95:54:ac:cd:42:2e:31:29:8d:5d:78:db:3f:d2:6e:87:
5e:2a:58:26:0d:36:ad:30:ee:f0:98:89:bb:fc:7c:03:39:9b:
3c:7b:c9:de:07:ae:92:14:00:9e:5d:69:14:90:df:d2:3d:7e:
20:da:b7:97:13:88:9c:ac:e1:f7:a2:0a:3d:bf:11:d8:30:91:
f8:90:c7:a2:fa:27:ae:ed:9c:56:88:b5:19:5d:59:f2:27:49:
47:26:cc:9b:eb:ad:b5:0c:9b:d8:57:89:fb:a0:1c:98:f3:be:
9a:1f:4c:44:73:ab:29:be:f0:7e:2a:d4:af:7f:af:59:4d:ac:
f6:1f:b7:d7:fa:bc:19:be:47:71:96:d0:2d:6e:56:c7:46:13:
8e:57:4a:d8:23:81:6d:c8:18:8c:1e:ac:e9:17:8c:20:7b:bb:
7e:c0:eb:37:49:d2:f1:ae:2e:07:c2:81:09:a5:d2:81:97:f6:
e8:08:33:96:8b:cc:5e:2f:93:39:74:13:ea:93:c8:31:47:b3:
0a:ec:1d:87:49:43:df:24:60:9e:b2:d2:78:60:51:99:f0:98:
3d:8f:80:a9:e8:86:89:ed:30:64:84:8a:fa:94:90:4d:1d:e0:
12:28:37:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:37:26 2026 by rpki-client