
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
File: tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft (raw, json)
Hash identifier: 02l6x6RRiEreD9cAEs8Q1MoTvyOqPf9vVpr2hXOk3PI=
Subject key identifier: 67:9A:17:B2:E8:A3:28:49:55:3D:77:D9:1B:55:AC:5D:10:60:C4:00
Authority key identifier: B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C
Certificate issuer: /CN=A9131711/serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C
Certificate serial: 01C4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
Manifest number: 01BB
Signing time: Sat 13 Jun 2026 03:58:22 +0000
Manifest this update: Sat 13 Jun 2026 03:58:21 +0000
Manifest next update: Sat 20 Jun 2026 03:58:21 +0000
Files and hashes: 1: tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl (hash: 93ZqdCwkX9hbRekaBdXLmva1JDboZYvEvTW+lNPf28E=)
2: B2B006BAE3E911EEB845B268C4F9AE02.roa (hash: xllDJ7wsryQrkSvX97smRm5LJiMbi7ECfICbiD0R3+M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl
rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:58:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452 (0x1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131711, serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C
Validity
Not Before: Jun 13 03:58:21 2026 GMT
Not After : Jun 20 03:58:21 2026 GMT
Subject: CN=6a2cd55e-c815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:5b:67:0e:30:94:52:d2:91:f8:af:13:d7:
0c:6b:62:e5:b7:18:3c:c0:ad:2c:bc:f9:1a:e1:c3:
e8:c0:59:b7:1c:c0:2c:b3:4e:f3:74:21:7b:59:16:
8c:fe:29:a2:55:12:53:79:e1:80:bc:50:48:ed:71:
9b:dd:83:ea:7e:94:75:7b:8c:04:f5:90:01:23:e0:
95:9d:51:b8:90:9c:bc:7e:c2:e5:b5:d3:46:ed:7a:
ec:95:78:b6:c3:4c:3d:37:ed:69:66:71:a2:2a:87:
62:85:19:50:e0:d7:b1:75:43:2c:d0:27:81:74:6b:
93:aa:5e:c1:b7:bb:e8:8e:1a:3f:94:8c:30:38:fd:
bf:44:dd:29:58:02:21:d3:f1:39:6d:50:93:31:d8:
b8:e5:a1:cf:60:e2:10:f0:31:80:c6:75:a8:76:d1:
e2:f8:c9:f0:f4:f1:0e:0c:92:15:1d:8c:36:b0:be:
c1:d7:af:d3:36:b6:39:54:37:03:e4:39:18:8b:b8:
01:4b:6e:a7:f1:3a:ab:79:85:4b:d5:bc:12:b8:8d:
ea:d5:a2:65:af:b4:83:6e:7f:5f:e8:ce:b8:a4:98:
e7:b1:b4:a7:cf:10:2e:80:6b:69:6c:ad:41:32:27:
bf:54:fd:51:3d:62:16:84:39:5c:f1:c3:3b:3b:98:
79:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9A:17:B2:E8:A3:28:49:55:3D:77:D9:1B:55:AC:5D:10:60:C4:00
X509v3 Authority Key Identifier:
keyid:B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:01:cb:6c:13:81:e2:8b:13:c9:ef:e8:ed:b8:a3:49:d0:db:
b0:e1:82:be:5b:10:ee:e5:60:f2:14:93:a0:6b:33:f1:fa:ea:
cd:8d:49:9e:04:59:a9:09:a3:d6:19:86:08:0e:d4:2a:9e:99:
57:8e:53:48:45:82:af:b3:55:dd:76:3f:95:23:47:66:b0:99:
f5:d5:76:0a:d3:5f:63:86:1e:66:36:20:85:ca:bd:d0:26:16:
7b:c1:f3:25:df:89:f5:96:25:8d:17:bc:70:80:fa:dc:c0:fd:
2a:42:46:a0:27:a8:d3:aa:7f:42:3a:a9:86:11:d7:cf:6a:80:
59:0a:a2:2f:7f:18:c1:de:bc:a3:15:fc:03:c2:72:bc:f0:47:
03:d2:8a:32:dc:22:bb:1c:26:d2:0a:91:64:0f:74:7a:8c:e3:
1b:b2:7e:8d:53:ad:41:d7:fa:16:bd:d9:dd:9c:30:eb:d7:72:
1a:86:b9:1d:21:24:28:9f:91:2c:8a:2f:ce:e8:13:c1:6f:41:
0e:16:9f:4d:b4:6d:a3:1c:c0:d0:a4:70:e3:a6:fb:00:d1:48:
b8:8a:80:3f:f7:ae:e5:c1:b4:a0:ad:14:02:8a:32:b3:75:f5:
9c:97:29:2f:66:a0:66:56:62:0d:ee:ae:04:d4:3b:6a:0e:40:
b3:e3:7a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:39:15 2026 by rpki-client