
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
File: _tgXL4qVo1IC1RxvdfqUfehE9M0.mft (raw, json)
Hash identifier: axUVIqwmSWrIRsjZo7JDSNUetrqqMIvmgJ8yS1eV7Eg=
Subject key identifier: DA:B6:D1:80:E5:67:FF:87:62:2F:3B:EC:B7:B7:BE:11:83:D3:7B:76
Authority key identifier: FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD
Certificate issuer: /CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
Certificate serial: 01E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
Manifest number: 01DC
Signing time: Wed 23 Sep 2026 03:25:20 +0000
Manifest this update: Wed 23 Sep 2026 03:25:20 +0000
Manifest next update: Wed 30 Sep 2026 03:25:20 +0000
Files and hashes: 1: _tgXL4qVo1IC1RxvdfqUfehE9M0.crl (hash: RSTnHDzzbnvbKb4k94MYZz72lAjFlZGCZvpnXtmvCyw=)
2: 994A883AE06511EEA8CEC61EC4F9AE02.roa (hash: bNGffj8ZbrDxM99jMp0vtDGv1ysJThWBPa37lbK47XA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl
rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486 (0x1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198D95, serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
Validity
Not Before: Sep 23 03:25:20 2026 GMT
Not After : Sep 30 03:25:20 2026 GMT
Subject: CN=6ab346a0-e6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ae:f0:43:8e:ed:f2:20:ba:5a:61:cb:fd:e5:
f3:ac:ce:55:39:b9:24:30:6a:6a:4b:44:d7:d6:75:
32:c9:be:bd:08:6a:7c:1f:59:33:9b:27:4c:79:9e:
f4:25:3c:49:98:cf:80:67:e7:cc:b6:f3:12:88:fb:
ce:ac:78:ee:67:99:ee:7e:11:bd:fe:2a:47:93:22:
ee:40:15:69:86:81:98:3f:e3:3f:03:ab:1f:62:46:
17:da:c8:f1:57:ea:3d:3b:33:81:bd:05:95:90:76:
e9:d4:69:4b:a3:0a:e3:29:92:1e:ac:83:c5:34:1e:
f6:ae:65:60:b7:1c:32:3d:04:c4:70:8f:5b:99:89:
40:63:d1:39:79:5f:6b:73:2a:7c:cd:44:f0:45:78:
15:a8:01:a2:3b:57:c1:e3:47:fa:0d:ac:ea:16:ae:
93:04:14:ea:4a:43:f4:a7:9c:b1:2f:c2:0d:93:11:
70:3a:38:29:62:99:16:08:ef:ae:fe:b4:2d:50:c1:
6d:88:28:09:3f:8f:77:89:8b:9c:cb:70:f7:d1:2a:
45:08:94:7a:01:fe:66:38:9d:d9:ca:fe:5a:70:af:
a7:c5:60:fc:2b:f8:a0:59:85:c6:3c:1f:2b:42:7a:
c6:4d:07:48:c2:51:a1:88:b1:a2:d3:68:28:9d:bf:
b0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B6:D1:80:E5:67:FF:87:62:2F:3B:EC:B7:B7:BE:11:83:D3:7B:76
X509v3 Authority Key Identifier:
keyid:FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9c:94:2b:77:e7:71:32:3a:a6:3a:9f:94:37:bb:76:ea:9e:
9e:39:c2:a0:74:f4:0e:99:09:de:52:e2:cd:cf:3a:9b:d8:ea:
14:00:f2:44:55:e8:89:55:c0:f5:45:20:97:23:0f:46:43:58:
ed:3c:0c:43:e7:5e:41:1d:76:65:fb:9b:ba:93:4e:7f:5b:2d:
bf:6e:cb:4c:0d:b6:68:41:5d:21:74:d9:7c:c6:1e:3c:e5:51:
78:7a:38:26:be:a0:7a:23:60:7f:0b:9f:c7:e4:05:6a:66:a1:
09:1d:b0:34:a0:e1:9a:6b:2e:ee:c2:28:59:fd:8f:d1:1a:60:
77:a8:37:45:8c:e0:e3:a2:95:18:b1:0d:9a:06:6c:6f:b6:7b:
69:02:3f:cb:80:9a:9f:7a:b4:05:16:f3:ea:19:19:e3:79:ce:
5b:21:e1:6e:ed:82:49:19:54:c7:f0:bd:3a:90:4f:2e:b2:0a:
99:3f:98:7a:ef:b8:27:6f:f8:1d:0f:14:4c:33:04:74:c2:c6:
9a:6b:3c:8c:3a:86:ed:ea:a5:71:90:02:8b:61:06:99:9d:71:
f5:29:7c:b4:7a:72:55:04:07:02:53:8f:a4:f0:da:c5:b3:46:
cd:69:2e:ae:bd:c7:84:e3:c4:fe:69:3e:f6:44:c6:34:c5:a0:
94:5e:98:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:59:17 2026 by rpki-client