
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
File: tOfjRK3ONthPHzq8zRSyTBUSu6o.mft (raw, json)
Hash identifier: DPl9IJLDSK59E4c9882PxrRaWseak+gaJnRKqybhAY0=
Subject key identifier: 0B:F6:18:53:85:7E:E2:E8:94:02:E9:C6:50:19:9D:7B:05:3E:BA:B5
Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
Manifest number: 017E
Signing time: Mon 27 Jul 2026 06:26:21 +0000
Manifest this update: Mon 27 Jul 2026 06:26:20 +0000
Manifest next update: Mon 03 Aug 2026 06:26:20 +0000
Files and hashes: 1: tOfjRK3ONthPHzq8zRSyTBUSu6o.crl (hash: 86pJna5jf3/T/Yz8YZYPe0nMjXZHZROQg+ddiyTmMHo=)
2: 6A5F29CED8A511F0B3F453F094D3641D.roa (hash: x8Gadu5mzZc6qu26lRbm5uUV5MWN8eTQq1KShULlErA=)
3: 723720464ABE11EFA87EE85BC4F9AE02.roa (hash: /neZtyP8CB+i0xa/1UQQQx4y8u+LD3tIdTWWjj7eFPE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl
rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:26:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Validity
Not Before: Jul 27 06:26:20 2026 GMT
Not After : Aug 3 06:26:20 2026 GMT
Subject: CN=6a66fa0d-7c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a3:88:8b:f5:e5:7b:1c:bf:15:41:c6:7f:b6:
e6:04:ee:64:1d:4d:2a:3f:0e:88:38:49:ad:38:d4:
74:71:3f:ff:e1:de:40:79:63:c4:c4:e7:61:24:db:
00:42:cd:f2:4e:ca:b1:49:ba:5f:fd:fb:5c:f5:81:
4e:fd:89:37:55:a2:6b:57:42:a5:1e:4c:b2:1c:78:
98:d7:fa:f8:8e:53:21:7f:8a:36:9a:76:18:5c:0b:
c9:89:5e:c4:34:bd:5b:2d:51:8f:fb:d8:43:82:c6:
7e:ca:5d:45:ec:c4:e3:3c:e0:50:be:e6:51:cb:b0:
98:97:54:c1:cd:db:af:b7:5a:d6:b5:bd:ba:e3:22:
4f:c9:1e:a1:05:d8:66:c4:18:95:fb:81:96:f3:1d:
b1:22:a2:fc:0b:9f:e7:ed:7f:63:b1:79:94:81:50:
43:a0:51:c9:3a:ee:3b:f0:3e:6d:70:c4:fb:98:5c:
92:5f:38:6b:58:19:6f:f4:1e:c6:f3:f1:d1:0a:b7:
b1:ef:4a:1e:0a:78:e2:b5:c6:a2:bd:f5:e5:02:dc:
44:0f:7f:6b:e2:6d:97:39:fc:e2:82:df:4f:14:b9:
5d:66:35:c6:8e:8c:1e:42:e7:76:f0:c8:ac:a0:15:
8d:1c:9d:f4:5e:7a:b4:bf:d1:9f:e6:2b:83:f6:40:
d5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F6:18:53:85:7E:E2:E8:94:02:E9:C6:50:19:9D:7B:05:3E:BA:B5
X509v3 Authority Key Identifier:
keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9b:d5:98:2b:7c:b0:36:71:9e:33:4e:62:43:76:de:03:87:
e8:55:15:cb:4e:6d:c2:07:90:7a:44:06:7e:88:3d:39:b0:96:
2b:bc:3d:c6:39:67:70:28:fb:10:38:b2:9d:bb:8f:a7:87:11:
91:81:dc:92:99:a5:17:78:2c:b4:bc:a1:ad:a3:8c:75:8e:cc:
be:5a:32:a4:72:4d:c2:c8:8e:82:47:c4:03:5a:2e:6d:50:9f:
73:14:d9:5f:df:09:56:14:c4:63:8f:c1:36:0f:59:8d:a9:68:
cd:07:a2:9a:de:1d:4b:13:b9:16:65:89:d8:2e:6a:f6:3a:48:
35:f5:a1:f4:6c:3a:ef:09:0b:da:bb:6d:75:64:25:b4:7e:2f:
91:a6:67:be:a7:b5:11:c2:db:34:0e:a7:48:e2:1d:1c:24:ad:
ca:d2:2a:85:f5:ec:18:12:4c:5f:99:aa:06:41:61:98:25:ff:
20:29:8c:2d:63:01:58:ab:8a:ab:a9:20:9c:20:65:17:92:73:
86:6b:d4:f7:96:f7:56:9d:a0:55:ce:71:c9:83:46:de:a5:2b:
86:fb:55:e7:50:f6:94:7b:ac:73:b6:36:5f:0a:b9:5a:dd:a4:
3e:18:8f:a1:a3:ae:57:61:03:fe:37:a9:d3:97:e4:aa:18:49:
46:e5:c7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:18:16 2026 by rpki-client