
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft
File: tg1afDY_D02TL-MXuQzmz4DSg8k.mft (raw, json)
Hash identifier: gGe76y+5yIqdrrj9QheowdHmJ5ZMaILGQEP0apG2U7Y=
Subject key identifier: 1A:AC:6E:9E:9C:BD:A7:57:3C:1B:EB:DB:F8:22:98:D3:98:AB:C4:A9
Authority key identifier: B6:0D:5A:7C:36:3F:0F:4D:93:2F:E3:17:B9:0C:E6:CF:80:D2:83:C9
Certificate issuer: /CN=A9118309/serialNumber=B60D5A7C363F0F4D932FE317B90CE6CF80D283C9
Certificate serial: 0AFB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft
Manifest number: 0AEE
Signing time: Fri 12 Jun 2026 19:25:49 +0000
Manifest this update: Fri 12 Jun 2026 19:25:49 +0000
Manifest next update: Fri 19 Jun 2026 19:25:49 +0000
Files and hashes: 1: tg1afDY_D02TL-MXuQzmz4DSg8k.crl (hash: OIc91DAMryaSqS4JyR/GFLlBzYsEYhR5FI8njUv7s9Y=)
2: 59AA22D06FFD11EA9160902DC4F9AE02.roa (hash: wf2N7y2gm+HMhGLmDepSkmqtdRiwq+CjqsQ72qN8FGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.crl
rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2811 (0xafb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118309, serialNumber=B60D5A7C363F0F4D932FE317B90CE6CF80D283C9
Validity
Not Before: Jun 12 19:25:49 2026 GMT
Not After : Jun 19 19:25:49 2026 GMT
Subject: CN=6a2c5d3d-9fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b1:d8:94:cf:72:77:6a:f4:70:e8:00:5e:26:
31:05:b3:a1:37:84:c3:7a:d6:f1:56:bf:47:90:a1:
05:7f:af:e2:59:f6:0b:f6:ea:38:40:bf:bf:8a:84:
5a:72:d3:f4:1f:4f:83:7b:f3:45:a9:de:e8:3c:21:
3e:65:32:8b:c3:bb:e4:c2:39:31:3e:a2:6d:a2:76:
86:df:2f:d9:2c:db:f1:99:2c:0d:de:59:76:e7:37:
ac:be:d2:0b:8e:1e:7c:08:ec:e7:e5:45:6c:95:2e:
d0:6f:4f:84:9f:e7:4c:90:73:7c:dc:5a:b8:27:cb:
25:55:76:ad:d0:59:b2:5f:99:39:b8:aa:3e:a0:f7:
40:d8:e6:34:9c:bf:9d:4c:44:0e:c8:c8:1d:f8:46:
59:d8:23:e8:71:d9:25:b4:a9:6c:00:ce:82:78:c8:
81:da:9b:42:7d:dc:e3:01:ab:7e:22:31:2a:e1:98:
97:1f:e9:1f:70:a2:b1:9c:df:f9:6a:35:f1:13:ec:
85:9e:c0:20:1b:72:61:cf:7d:4a:35:37:3e:09:1c:
a8:ad:27:ee:fe:a0:c6:9d:f4:b2:ce:74:c0:7f:3a:
ee:ce:cd:18:9a:87:68:cf:e8:02:2e:91:c0:4b:48:
e8:d6:59:08:2f:f7:57:72:85:b8:5a:12:22:47:6a:
8c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AC:6E:9E:9C:BD:A7:57:3C:1B:EB:DB:F8:22:98:D3:98:AB:C4:A9
X509v3 Authority Key Identifier:
keyid:B6:0D:5A:7C:36:3F:0F:4D:93:2F:E3:17:B9:0C:E6:CF:80:D2:83:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:9b:31:5a:e5:f2:d8:42:ff:ee:95:22:03:46:63:e0:f4:f2:
f3:d7:b6:00:c4:de:a4:f2:7c:9c:eb:e8:39:73:05:b0:7d:81:
80:24:d0:c3:0a:25:89:34:4e:5c:dc:9e:f0:aa:d1:be:6b:48:
4e:f0:8c:2d:69:44:a6:65:d2:57:21:b9:68:e7:bf:43:33:aa:
20:b3:94:7a:64:05:fe:60:d0:75:e1:e6:5f:01:f3:c0:75:ca:
39:84:a9:c9:ed:b1:5d:6d:67:68:67:68:5e:11:13:2e:a0:6d:
14:15:6b:9c:47:ab:26:de:f8:5a:18:e2:57:aa:41:0e:1b:b4:
e4:e5:7e:2b:e8:67:af:f1:ea:d2:c7:50:36:51:5c:f9:21:fe:
90:00:5c:17:56:18:08:2d:b1:39:1e:0a:f6:61:36:7a:98:e0:
c3:99:70:8f:7a:bf:55:59:1d:e9:47:04:6d:7e:82:a7:3f:44:
69:a9:ce:c2:0a:d8:d3:54:51:a9:8d:43:b3:93:68:cb:b5:40:
f3:92:5c:da:f9:04:f8:fa:6c:6c:4b:a9:9a:d2:55:7a:9a:87:
b1:7f:96:b0:79:ed:d9:26:a3:94:12:a1:50:1c:f4:58:b9:c3:
f0:40:72:4c:5b:e8:3d:53:9b:a6:e8:c0:a7:e5:53:12:48:a8:
0d:db:3a:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTgzMDkxMTAvBgNVBAUTKEI2MEQ1QTdDMzYzRjBGNEQ5MzJGRTMxN0I5MENFNkNG
ODBEMjgzQzkwHhcNMjYwNjEyMTkyNTQ5WhcNMjYwNjE5MTkyNTQ5WjAYMRYwFAYD
VQQDEw02YTJjNWQzZC05ZmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzrHYlM9yd2r0cOgAXiYxBbOhN4TDetbxVr9HkKEFf6/iWfYL9uo4QL+/ioRa
ctP0H0+De/NFqd7oPCE+ZTKLw7vkwjkxPqJtonaG3y/ZLNvxmSwN3ll25zesvtIL
jh58COzn5UVslS7Qb0+En+dMkHN83Fq4J8slVXat0FmyX5k5uKo+oPdA2OY0nL+d
TEQOyMgd+EZZ2CPocdkltKlsAM6CeMiB2ptCfdzjAat+IjEq4ZiXH+kfcKKxnN/5
ajXxE+yFnsAgG3Jhz31KNTc+CRyorSfu/qDGnfSyznTAfzruzs0Ymodoz+gCLpHA
S0jo1lkIL/dXcoW4WhIiR2qMswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBqsbp6c
vadXPBvr2/gimNOYq8SpMB8GA1UdIwQYMBaAFLYNWnw2Pw9Nky/jF7kM5s+A0oPJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODMwOS8xQTQ4REM4NjZG
RkMxMUVBODhGM0QyMkJDNEY5QUUwMi90ZzFhZkRZX0QwMlRMLU1YdVF6bXo0RFNn
OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RnMWFmRFlfRDAyVEwtTVh1UXptejREU2c4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODMwOS8xQTQ4REM4NjZGRkMxMUVBODhGM0QyMkJDNEY5QUUwMi90ZzFhZkRZX0Qw
MlRMLU1YdVF6bXo0RFNnOGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAupsxWuXy2EL/7pUiA0Zj4PTy89e2AMTepPJ8nOvoOXMFsH2BgCTQwwoliTRO
XNye8KrRvmtITvCMLWlEpmXSVyG5aOe/QzOqILOUemQF/mDQdeHmXwHzwHXKOYSp
ye2xXW1naGdoXhETLqBtFBVrnEerJt74WhjiV6pBDhu05OV+K+hnr/Hq0sdQNlFc
+SH+kABcF1YYCC2xOR4K9mE2epjgw5lwj3q/VVkd6UcEbX6Cpz9EaanOwgrY01RR
qY1Ds5Noy7VA85Jc2vkE+PpsbEupmtJVepqHsX+WsHnt2SajlBKhUBz0WLnD8EBy
TFvoPVObpujAp+VTEkioDds6FQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:31:03 2026 by rpki-client