
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
File: T2c1YxYAI2yAWYoeMyE7vWgezlc.mft (raw, json)
Hash identifier: RIUYwA/JeDR7QYDznL757MiOfRDVViwn8SLri+fOPr0=
Subject key identifier: 62:09:66:A2:47:C2:4A:F2:A6:0A:EF:58:20:7F:4A:5C:A2:97:A4:5B
Authority key identifier: 4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57
Certificate issuer: /CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57
Certificate serial: 020A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
Manifest number: 0205
Signing time: Thu 23 Jul 2026 04:21:50 +0000
Manifest this update: Thu 23 Jul 2026 04:21:50 +0000
Manifest next update: Thu 30 Jul 2026 04:21:50 +0000
Files and hashes: 1: T2c1YxYAI2yAWYoeMyE7vWgezlc.crl (hash: oeC7++J9ubkk35M5S0xAwWwDUxTIWrbeZfYy2HZvh8o=)
2: 32357EA676C611EEA45B7909C4F9AE02.roa (hash: uq1kihQpsHqPtfnJKhqjRrtt4j4NKFgy3qB8nhVLYas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl
rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194CBD, serialNumber=4F6735631600236C80598A1E33213BBD681ECE57
Validity
Not Before: Jul 23 04:21:50 2026 GMT
Not After : Jul 30 04:21:50 2026 GMT
Subject: CN=6a6196de-d38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:16:68:4b:fb:31:42:98:cf:c3:84:8e:93:
99:10:e9:9a:c5:cb:72:05:55:a0:2d:70:a1:92:2b:
63:ff:a9:e7:bf:91:e5:b6:98:97:bf:fc:c1:64:7c:
90:13:cc:bd:21:ca:5a:63:f2:fc:e5:b6:cb:2b:3e:
8c:04:1d:5a:41:4a:fd:27:f3:d5:64:a8:77:e1:f3:
21:c0:66:36:aa:9d:73:80:ea:a3:4d:d1:13:b5:97:
37:0b:c0:d0:5b:df:b5:92:8b:d4:93:4b:af:e6:ba:
91:cd:ce:0d:fb:0b:84:64:f2:c1:a9:0d:55:12:53:
e0:01:24:d1:24:80:63:52:83:6b:02:bb:ae:25:ee:
50:77:ff:7e:de:ef:58:ef:4d:06:0b:35:80:7f:b0:
48:12:ad:4d:30:9e:48:07:1e:94:fc:d5:c4:55:a4:
e5:dd:7c:c3:86:bd:2d:1c:39:c0:9f:9b:4d:de:86:
28:34:21:f0:c2:bf:4d:b4:1c:12:8b:0d:34:2f:ed:
bd:b5:df:81:f7:98:91:b6:30:d7:d8:3c:da:f5:65:
a0:8c:14:d2:f2:00:ec:b4:6b:c1:af:a3:54:c6:54:
60:98:2c:f7:4d:c5:4b:e8:8f:87:e7:f8:28:0a:66:
95:05:26:bc:d0:12:7e:7c:9f:99:aa:91:80:19:67:
a7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:09:66:A2:47:C2:4A:F2:A6:0A:EF:58:20:7F:4A:5C:A2:97:A4:5B
X509v3 Authority Key Identifier:
keyid:4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:a6:d6:d4:f2:26:cd:0e:f6:fc:1b:b4:0d:24:d7:db:a9:69:
85:c9:5b:5e:42:bb:e5:03:2e:44:93:95:93:2c:82:ad:ff:69:
4a:7d:90:3d:2f:17:c2:5f:86:ec:a7:4c:0a:af:1d:cd:ff:53:
1c:fb:5a:6b:fd:21:4d:11:10:fa:92:10:75:3b:9a:45:ce:d7:
90:81:0a:b0:ae:17:62:c6:79:bd:b8:83:18:48:23:b4:a7:75:
85:0a:58:73:02:a5:82:40:3e:dc:45:ec:33:b0:eb:d4:df:1f:
f2:20:61:31:4e:05:7f:f0:06:33:ea:f8:17:54:98:63:ea:93:
8e:bd:cc:0a:b4:3a:07:37:96:fd:4d:6c:d1:c0:57:91:85:4d:
4a:34:5f:fd:fb:9d:4c:15:da:6c:8f:84:0e:29:77:d8:c3:9a:
77:55:e8:06:1f:6d:52:3a:03:00:81:8d:be:ae:a2:d6:24:3a:
7d:87:32:ed:a4:df:c3:4f:8f:11:06:b6:fa:07:2b:03:33:f7:
31:c8:5a:c7:07:66:42:2f:91:55:9d:a4:0e:b5:af:3e:8b:a6:
ea:bc:5e:39:05:9c:a2:cf:ad:9b:ce:57:c2:4e:f0:b0:66:f7:
a0:ff:6f:19:65:ba:f8:cb:fc:46:e5:37:3f:f6:d5:61:04:26:
d6:25:f5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:09:02 2026 by rpki-client