
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft
File: tkKboemiWuSuEg8IEuf8LjYjLS8.mft (raw, json)
Hash identifier: 1dbssEftx7LyAd0JMZh9xNjEozHdqeQt0TCdWXVvjMk=
Subject key identifier: 06:35:37:C2:E7:2A:A9:99:EC:F7:91:1E:C0:A3:70:F9:91:1B:A6:BD
Authority key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F
Certificate issuer: /CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F
Certificate serial: 0AF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft
Manifest number: 0AE8
Signing time: Wed 22 Jul 2026 19:45:13 +0000
Manifest this update: Wed 22 Jul 2026 19:45:12 +0000
Manifest next update: Wed 29 Jul 2026 19:45:12 +0000
Files and hashes: 1: tkKboemiWuSuEg8IEuf8LjYjLS8.crl (hash: 3q8O39qJceqYFkvTLRPkzKDpT2lZoS+W5CW6CY1wUrg=)
2: F6179D9E736011EA9EDED344C4F9AE02.roa (hash: he3UjPhAzljyPyijMVHrJVOO3ZJsIkaVva/wVZG1Ao0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl
rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:45:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2803 (0xaf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194156, serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F
Validity
Not Before: Jul 22 19:45:12 2026 GMT
Not After : Jul 29 19:45:12 2026 GMT
Subject: CN=6a611dc9-48f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:fd:70:bd:1c:d1:0c:ee:46:3f:f2:13:a7:
c0:5e:2b:9e:3e:2b:1d:fe:b0:06:a0:19:1f:99:39:
41:12:62:e7:4c:89:f0:50:19:b5:47:09:22:6f:80:
33:82:23:63:7d:ef:d1:b9:d5:c0:56:f8:be:04:57:
90:26:a0:59:69:ac:d5:42:ac:67:96:64:16:cf:7e:
16:6c:7a:7a:f8:6d:08:d5:26:ca:ff:4f:8b:95:52:
4d:86:8c:9a:69:21:9d:16:cc:df:21:80:ed:46:7c:
b9:f0:da:eb:f7:f6:6d:11:e4:28:b8:2e:a4:7a:6a:
67:55:cd:0e:06:c0:dc:10:fb:ea:62:27:9f:c8:ac:
1d:fd:78:8a:80:ec:fe:86:a0:91:e7:f2:d7:34:fa:
77:44:b4:65:5f:42:fa:67:ba:4d:63:3c:99:aa:1e:
18:f7:3e:0c:34:93:3d:37:94:5c:14:a8:23:64:6a:
72:e5:64:a5:86:aa:65:8f:22:ec:03:13:42:1b:60:
dc:a1:54:76:25:4e:79:58:9a:82:4c:6d:73:9e:a6:
2d:6c:4c:c5:2b:c0:40:a4:40:ef:e1:36:f9:81:bd:
1d:ef:b1:12:48:d5:ed:b0:ba:5c:d2:da:d5:e1:f5:
09:63:37:e5:aa:a8:89:0f:63:8f:9e:1d:92:dd:f9:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:35:37:C2:E7:2A:A9:99:EC:F7:91:1E:C0:A3:70:F9:91:1B:A6:BD
X509v3 Authority Key Identifier:
keyid:B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f3:42:da:3b:8a:aa:37:4e:83:24:19:80:46:2d:66:58:46:
be:a3:09:c9:07:2f:df:b9:a5:0d:36:77:9d:e9:8a:19:28:d4:
1d:9e:6e:19:46:15:9e:d9:74:53:c3:3b:a7:8d:b8:7e:4a:dd:
71:d7:a7:42:76:17:b6:88:4a:e5:a3:bb:cc:78:49:8f:32:00:
55:44:ee:5d:dc:be:aa:1d:09:58:1a:7b:1f:f9:8f:57:16:f8:
d6:da:cc:12:d4:e3:26:8d:c7:2d:5f:24:e2:d7:ca:7b:d2:b7:
3d:15:b7:5c:06:12:78:2e:15:be:64:c5:1f:da:80:13:7a:f4:
cc:61:75:dd:ed:2d:c9:3a:67:02:5e:12:19:20:c8:49:8e:bd:
dd:c1:45:76:e7:e1:44:ed:39:e4:3b:04:d2:58:57:2a:5a:d7:
a3:0f:36:9e:42:5e:4b:69:c9:62:fc:8c:2f:c2:ee:70:14:7b:
66:7d:9b:11:34:46:0a:e3:82:e0:92:16:3c:23:ba:a2:84:4d:
16:17:d5:25:09:58:a1:08:e4:89:54:1a:dd:71:42:8f:bb:6a:
c1:46:28:ea:cb:76:6f:04:af:1b:7f:3e:35:5c:d5:ea:e0:a3:
0f:13:51:81:ad:67:1c:cc:31:21:91:b1:06:af:dd:54:40:a5:
b4:c4:67:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:18:49 2026 by rpki-client