
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
File: _tgXL4qVo1IC1RxvdfqUfehE9M0.mft (raw, json)
Hash identifier: bRWD01NYsGcswJY5H1lxwfvlSrQ6ZkMErRnZaAsd2hI=
Subject key identifier: A9:9D:43:5A:23:FB:C9:7E:E5:72:1E:08:76:F9:BE:60:26:20:7E:F5
Authority key identifier: FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD
Certificate issuer: /CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
Manifest number: 01BA
Signing time: Thu 23 Jul 2026 05:17:10 +0000
Manifest this update: Thu 23 Jul 2026 05:17:10 +0000
Manifest next update: Thu 30 Jul 2026 05:17:10 +0000
Files and hashes: 1: _tgXL4qVo1IC1RxvdfqUfehE9M0.crl (hash: dlKiRHqRMajBAkAdNIJFwTvRUUddYOYQyrqqzx7MpLc=)
2: 994A883AE06511EEA8CEC61EC4F9AE02.roa (hash: iAJ7bJgPc3fvc0VT2Ih64KNDwG9PjNk9khGO+aQcVnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl
rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198D95, serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
Validity
Not Before: Jul 23 05:17:10 2026 GMT
Not After : Jul 30 05:17:10 2026 GMT
Subject: CN=6a61a3d6-7718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:9f:70:22:f3:fa:a0:f0:15:b8:37:f0:23:
0d:cb:e5:04:59:e1:f6:e3:9b:c3:86:cc:38:d3:e9:
eb:62:67:22:49:44:d9:e4:a0:46:cf:d0:73:99:34:
d3:24:d5:18:91:fc:83:3d:ee:31:e3:43:b2:7c:4b:
b8:c0:13:f5:59:31:d4:75:29:37:41:ef:b4:f3:f6:
50:b2:63:38:98:b1:3a:0d:86:f8:ef:29:d1:24:e3:
04:d1:42:90:25:ff:30:72:20:0b:e3:99:f5:ce:04:
80:8f:a8:65:64:f9:d6:f1:eb:16:c1:a0:d1:2e:84:
c0:17:f3:0e:b5:a1:a3:a7:22:d7:93:f4:89:92:73:
24:3c:db:05:8a:5c:17:1b:bb:7b:ad:44:3d:1e:09:
ff:2e:ba:4c:54:ac:a1:a9:71:56:c8:2a:05:f4:a4:
1b:8d:46:5e:e5:6b:18:90:11:04:4d:47:62:bf:58:
05:c5:3a:85:dd:35:07:53:95:4e:8e:7a:7b:58:eb:
b0:df:d0:d2:bc:53:1e:a8:5d:e4:cf:33:76:da:6e:
f1:bd:3c:e9:13:16:d4:0e:3d:40:71:f0:19:f4:cb:
7b:34:53:21:3b:4f:07:20:ff:99:8b:68:b8:43:93:
d4:ba:e7:57:9e:1d:5d:a2:aa:a9:fa:46:28:14:80:
5a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9D:43:5A:23:FB:C9:7E:E5:72:1E:08:76:F9:BE:60:26:20:7E:F5
X509v3 Authority Key Identifier:
keyid:FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:07:3c:c4:ec:08:c2:79:27:e2:af:96:8f:2f:f5:9f:b2:c1:
13:74:3d:7d:79:ff:9f:25:4b:be:9c:69:2a:0e:3b:5d:a8:b6:
c5:35:31:bb:a9:8e:59:f7:47:1a:1c:56:b5:4d:65:fa:7a:14:
17:92:e3:d3:ec:82:eb:12:02:b4:aa:a3:14:dc:7d:db:fb:e4:
72:74:fa:5f:bf:34:ab:49:58:f9:22:09:11:20:89:1b:3d:f2:
de:af:6b:3c:40:c9:11:55:d9:29:04:8e:eb:4b:8e:32:ef:52:
42:a1:b2:8f:ff:07:f3:0a:f7:53:8a:a9:af:e4:24:93:ce:e7:
93:56:b2:80:6e:58:86:19:21:b0:a5:f7:e4:b8:18:7b:26:54:
58:fe:50:ac:6f:2f:ac:ab:81:7c:0e:a0:99:d2:83:9e:17:58:
55:d9:d8:f3:f8:2a:23:a5:d8:d7:cf:eb:f9:f2:fb:81:51:80:
df:0c:c4:b8:8d:57:86:64:c2:c4:1c:6d:05:c0:8d:ea:c5:73:
a9:82:5e:54:66:6e:fe:a2:6b:ae:ed:43:fa:e2:d3:5d:10:e8:
e8:8b:6c:26:08:21:d9:6b:bc:7a:f0:03:01:1c:42:94:d1:35:
dc:3e:92:78:6b:d1:0c:8d:de:80:96:b2:7f:29:5c:ff:e8:c6:
f8:e4:df:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:42 2026 by rpki-client