
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
File: tOfjRK3ONthPHzq8zRSyTBUSu6o.mft (raw, json)
Hash identifier: mqSDQMKi/Qo6ABsv6BDGcqTYVwm+/yfloayJ7Zi4TBE=
Subject key identifier: 94:A4:8B:01:F9:6B:29:3E:E8:F4:8C:93:23:CF:98:E4:E9:C0:49:BB
Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Certificate serial: 016E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
Manifest number: 0168
Signing time: Sat 13 Jun 2026 04:51:08 +0000
Manifest this update: Sat 13 Jun 2026 04:51:08 +0000
Manifest next update: Sat 20 Jun 2026 04:51:08 +0000
Files and hashes: 1: tOfjRK3ONthPHzq8zRSyTBUSu6o.crl (hash: xYOBmzrq7/AOnCpullg+JsfAkvPrym8lYvE3O5UHpRw=)
2: 6A5F29CED8A511F0B3F453F094D3641D.roa (hash: x8Gadu5mzZc6qu26lRbm5uUV5MWN8eTQq1KShULlErA=)
3: 723720464ABE11EFA87EE85BC4F9AE02.roa (hash: /neZtyP8CB+i0xa/1UQQQx4y8u+LD3tIdTWWjj7eFPE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl
rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366 (0x16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Validity
Not Before: Jun 13 04:51:08 2026 GMT
Not After : Jun 20 04:51:08 2026 GMT
Subject: CN=6a2ce1bc-009f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:93:e1:b7:41:f6:e8:55:78:5e:c5:c8:59:
22:e1:fa:65:1a:9b:be:5a:93:c7:42:e8:dd:74:f8:
9d:4d:84:3d:b6:79:d7:94:c7:20:c5:b0:0f:46:dc:
ea:36:9e:5f:59:f1:98:fc:ac:ea:0b:99:95:b4:ec:
a9:6f:9f:3f:16:a2:37:7d:4f:ce:4f:80:a3:93:70:
95:69:22:fb:d5:d4:8a:f3:e3:b2:c9:e9:b8:7e:37:
92:1b:d8:53:24:9a:28:ba:7b:a9:43:76:5d:c8:82:
d5:88:50:74:46:e9:e6:c2:6a:41:24:e1:48:37:4a:
68:57:8e:51:47:30:76:64:24:3b:41:0a:0f:a1:37:
ef:90:89:c3:f2:3e:3e:e8:a6:60:ed:4c:da:46:42:
8f:70:0a:7c:e2:09:ac:bf:5a:49:5c:c9:34:d6:04:
a7:26:b8:65:22:07:38:d0:a2:c0:ec:f0:2b:6e:c0:
48:55:2e:4c:1b:77:26:88:be:26:55:b2:92:5d:02:
4c:00:46:cc:f7:e8:86:46:88:cd:2e:11:07:d2:79:
80:18:b4:dc:59:33:02:bf:2f:a9:a9:56:a4:bc:27:
f9:ef:66:09:04:d6:88:46:b8:65:9b:ca:92:74:28:
01:0b:2f:85:b0:a1:7b:e6:60:2f:89:4e:fd:c1:37:
db:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A4:8B:01:F9:6B:29:3E:E8:F4:8C:93:23:CF:98:E4:E9:C0:49:BB
X509v3 Authority Key Identifier:
keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5b:af:e4:24:37:2f:36:a8:17:15:cb:1c:2c:e3:14:cc:32:
45:41:b5:31:d0:25:84:70:26:28:79:bb:09:01:8d:b1:1a:b1:
2e:ac:6f:a6:46:a3:cb:b5:dd:61:f1:91:37:70:81:be:45:1c:
93:7c:a9:88:66:f6:cd:b6:05:b3:a1:56:e4:44:a3:04:e7:c7:
55:dc:d4:14:48:45:9e:8d:9d:b9:c8:e7:5d:87:7a:c4:65:50:
e3:6c:a9:94:46:b0:84:69:5a:3a:b1:1e:06:d3:ca:f2:e2:49:
2c:2b:b1:e1:f8:02:58:b5:b6:7a:4e:3c:1f:aa:90:2b:3b:a5:
fe:be:af:6c:cc:79:45:08:3f:25:b4:84:61:b8:d3:e4:75:c4:
ab:84:f8:06:7c:fd:63:31:3f:f5:97:ce:af:c9:09:7a:10:9b:
30:2e:17:ef:d1:6f:3e:18:45:c2:83:a5:a7:08:97:8d:d8:b8:
98:87:5b:87:2f:83:18:67:76:4a:eb:d8:46:37:4f:e9:75:71:
e3:6c:a6:f0:3c:d2:85:2e:f7:59:3a:1b:0e:97:56:6c:5b:08:
3d:14:c9:20:75:2a:30:4f:78:a4:d7:bc:e7:a4:17:da:90:c3:
ae:02:78:5a:69:b2:94:52:13:75:74:2c:77:2b:56:d0:5c:36:
32:2e:60:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJEQTkxMTAvBgNVBAUTKEI0RTdFMzQ0QURDRTM2RDg0RjFGM0FCQ0NEMTRCMjRD
MTUxMkJCQUEwHhcNMjYwNjEzMDQ1MTA4WhcNMjYwNjIwMDQ1MTA4WjAYMRYwFAYD
VQQDEw02YTJjZTFiYy0wMDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuDGT4bdB9uhVeF7FyFki4fplGpu+WpPHQujddPidTYQ9tnnXlMcgxbAPRtzq
Np5fWfGY/KzqC5mVtOypb58/FqI3fU/OT4Cjk3CVaSL71dSK8+Oyyem4fjeSG9hT
JJoounupQ3ZdyILViFB0RunmwmpBJOFIN0poV45RRzB2ZCQ7QQoPoTfvkInD8j4+
6KZg7UzaRkKPcAp84gmsv1pJXMk01gSnJrhlIgc40KLA7PArbsBIVS5MG3cmiL4m
VbKSXQJMAEbM9+iGRojNLhEH0nmAGLTcWTMCvy+pqVakvCf572YJBNaIRrhlm8qS
dCgBCy+FsKF75mAviU79wTfbTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJSkiwH5
ayk+6PSMkyPPmOTpwEm7MB8GA1UdIwQYMBaAFLTn40StzjbYTx86vM0UskwVEruq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8zNkE1MzBGNjQ0
QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050aFBIenE4elJTeVRCVVN1
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RPZmpSSzNPTnRoUEh6cTh6UlN5VEJVU3U2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkRBOS8zNkE1MzBGNjQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050
aFBIenE4elJTeVRCVVN1Nm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp1uv5CQ3LzaoFxXLHCzjFMwyRUG1MdAlhHAmKHm7CQGNsRqxLqxvpkajy7Xd
YfGRN3CBvkUck3ypiGb2zbYFs6FW5ESjBOfHVdzUFEhFno2ducjnXYd6xGVQ42yp
lEawhGlaOrEeBtPK8uJJLCux4fgCWLW2ek48H6qQKzul/r6vbMx5RQg/JbSEYbjT
5HXEq4T4Bnz9YzE/9ZfOr8kJehCbMC4X79FvPhhFwoOlpwiXjdi4mIdbhy+DGGd2
SuvYRjdP6XVx42ym8DzShS73WTobDpdWbFsIPRTJIHUqME94pNe856QX2pDDrgJ4
WmmylFITdXQsdytW0Fw2Mi5gPA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:33:03 2026 by rpki-client