
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
File: _tgXL4qVo1IC1RxvdfqUfehE9M0.mft (raw, json)
Hash identifier: SbQTl6jR1JZE4zeMoSWwAqHXK1siPN4uuacgJH46OR8=
Subject key identifier: 80:65:F6:D7:5D:E4:0A:DE:4F:5B:A6:15:40:98:47:FE:1F:ED:B4:A4
Authority key identifier: FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD
Certificate issuer: /CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
Certificate serial: 019F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
Manifest number: 0196
Signing time: Mon 11 May 2026 04:21:36 +0000
Manifest this update: Mon 11 May 2026 04:21:35 +0000
Manifest next update: Mon 18 May 2026 04:21:35 +0000
Files and hashes: 1: _tgXL4qVo1IC1RxvdfqUfehE9M0.crl (hash: G2z0ngTym2mfpnAeMGevjZzjpNHWwG9PlReeBL6Mj/A=)
2: 994A883AE06511EEA8CEC61EC4F9AE02.roa (hash: iAJ7bJgPc3fvc0VT2Ih64KNDwG9PjNk9khGO+aQcVnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl
rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198D95, serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
Validity
Not Before: May 11 04:21:35 2026 GMT
Not After : May 18 04:21:35 2026 GMT
Subject: CN=6a01594f-93ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b9:4c:fc:e2:d7:bd:57:e8:b5:ed:3c:16:9b:
19:aa:80:10:5c:8d:e3:45:42:68:05:3b:bc:ba:ca:
90:51:a3:8e:51:11:af:43:ae:0e:8b:67:b2:45:e6:
a7:8e:ff:e1:b1:ed:1a:0e:00:6a:3c:dc:45:f1:68:
fa:2e:bc:90:2a:16:30:86:33:9e:d7:11:ce:ff:c2:
7f:e2:1a:9f:18:c9:71:e8:65:0b:67:2d:4f:e4:f8:
df:7f:0e:aa:fa:1e:c6:20:57:de:cc:2b:95:c2:dd:
2a:e9:38:69:2a:dc:3e:e3:00:ab:9d:c2:65:bb:ec:
97:4a:f4:75:3a:c9:a3:fb:3b:a0:44:8c:63:1e:98:
cc:9e:f7:66:65:e1:49:18:22:63:6b:49:b0:72:93:
d8:86:0b:9a:a4:82:0a:0d:e0:8a:f8:94:2a:66:9d:
0c:a1:06:11:0a:79:d8:29:9a:e4:8a:e5:bf:d0:22:
ea:ff:81:b0:84:31:1f:a0:ea:c6:f7:3a:cf:a0:fc:
47:fe:0a:88:e8:e1:f1:28:77:d9:57:bf:75:76:2f:
52:be:17:76:d8:0a:d0:03:8b:de:4b:07:d9:cd:2e:
12:ec:6e:e3:4e:70:ce:ae:dd:da:f9:60:82:6a:fe:
fc:cb:f5:0d:36:84:d9:f5:c3:ee:88:de:c3:32:70:
13:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:65:F6:D7:5D:E4:0A:DE:4F:5B:A6:15:40:98:47:FE:1F:ED:B4:A4
X509v3 Authority Key Identifier:
keyid:FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:98:a1:81:37:a5:8b:b1:ce:c2:12:a0:ff:34:12:5b:f2:75:
7a:54:22:1c:9d:d5:f4:4e:a7:ea:75:c7:26:fa:0b:f8:57:0d:
fb:3e:a7:5c:75:cb:ac:e7:76:5d:b0:46:64:f0:62:1d:0b:3c:
74:dc:fd:84:59:a7:69:20:c7:68:85:39:e7:ac:6d:74:e9:a0:
db:ea:51:74:4e:ed:07:69:62:6b:9b:f2:74:f0:48:15:17:9d:
3b:33:be:2c:a7:1c:6b:e9:b3:9e:e3:07:9e:62:52:20:65:9a:
20:27:ea:e2:fa:43:29:7c:5b:9b:d5:aa:f0:77:17:55:3a:14:
aa:8e:02:74:35:5b:c4:8a:83:7f:6a:99:a0:a4:3b:c4:8a:95:
36:2c:42:93:09:06:39:4c:37:00:ff:d4:72:01:1e:23:a1:6b:
82:2e:05:42:8e:de:35:43:d7:fd:71:c0:fe:ac:c7:be:07:39:
f1:4f:44:1c:1a:2d:3c:08:64:17:49:c9:0c:80:ab:8b:65:17:
af:a3:ab:2c:fd:d0:9d:84:77:aa:cc:eb:b2:c3:6c:e1:25:0d:
3c:6a:06:ed:70:00:07:d2:cb:6d:b2:d8:2b:7b:9f:66:b2:46:
17:f4:69:74:e8:1f:66:dc:7d:72:08:62:f4:3a:c7:8b:3f:4e:
19:3b:3f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:23:34 2026 by rpki-client