
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
File: tNIXk5onUZOOB2WaeUiFqciEGRk.mft (raw, json)
Hash identifier: 7IxOrK20KRoZu9fx1rI6Q6YjIShGMhZYfNZiTBP8LKs=
Subject key identifier: B8:DC:5D:08:5A:E3:4C:33:2F:DC:63:F7:B5:51:04:E5:23:A4:B0:62
Authority key identifier: B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19
Certificate issuer: /CN=A9145B13/serialNumber=B4D217939A2751938E07659A794885A9C8841919
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
Manifest number: 0137
Signing time: Wed 29 Jul 2026 06:51:19 +0000
Manifest this update: Wed 29 Jul 2026 06:51:19 +0000
Manifest next update: Wed 05 Aug 2026 06:51:19 +0000
Files and hashes: 1: tNIXk5onUZOOB2WaeUiFqciEGRk.crl (hash: 1XQzZQFPnxBospg5AbtGvudqLLTKf8Qp3eA42K/lWE4=)
2: 793486E0C11A11EF99C19012C4F9AE02.roa (hash: v6BylN14fOxA4ftijT2xm8ugkwjC+LIOM8D065x7bmM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl
rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 06:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145B13, serialNumber=B4D217939A2751938E07659A794885A9C8841919
Validity
Not Before: Jul 29 06:51:19 2026 GMT
Not After : Aug 5 06:51:19 2026 GMT
Subject: CN=6a69a2e7-7c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:9c:24:9f:66:cb:de:55:46:2d:05:91:6d:
10:6b:2f:0c:5e:4b:8a:dc:07:2d:34:46:90:43:c5:
3a:33:61:bc:20:f6:28:f4:7a:75:9e:bd:11:e1:02:
d1:99:45:dd:4c:e6:23:07:f3:81:db:fa:60:eb:37:
9a:ce:06:d6:f9:ad:4b:37:00:a3:61:18:db:73:98:
6b:36:c2:5e:53:62:52:83:0d:9b:2e:8d:b3:bc:12:
cd:0e:10:45:c3:4e:ac:78:d9:97:6b:ed:3e:89:60:
8e:44:79:62:9a:4a:38:22:25:54:01:fb:3b:27:9a:
30:84:7e:98:5f:bc:c0:99:18:85:26:b5:62:23:02:
92:e4:8c:6e:55:21:63:90:83:24:96:80:03:d1:fc:
4a:fb:1a:eb:22:cc:5e:5b:d8:71:63:1e:d5:5f:4c:
f0:aa:2e:5e:cc:a6:5d:8e:8f:45:d0:25:b8:15:b9:
0b:3a:f5:50:05:54:79:9c:43:bc:af:ce:24:5e:36:
f1:d7:1e:f0:d4:58:c2:a3:e4:42:bb:89:59:7f:36:
b7:f7:10:77:f5:ee:81:84:b1:26:7c:41:16:bf:7e:
5e:b1:17:03:7f:cb:b1:3c:6b:3f:a0:1c:c6:1c:39:
e9:74:da:c8:0d:b2:76:8c:7d:63:7b:0a:b1:05:1b:
b5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DC:5D:08:5A:E3:4C:33:2F:DC:63:F7:B5:51:04:E5:23:A4:B0:62
X509v3 Authority Key Identifier:
keyid:B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:06:11:75:d7:33:6f:92:aa:8a:9f:b2:87:e7:60:72:8c:df:
e6:a4:b8:8f:eb:2f:56:df:7b:2e:c4:26:81:04:6d:ba:88:ae:
f8:1c:14:1f:80:28:d6:65:1b:28:9e:40:52:3d:bd:da:42:82:
9f:d9:97:94:80:7c:8e:0b:f7:ee:6d:05:2f:85:39:ac:b3:c3:
dc:c0:61:58:a1:2b:27:dc:ea:d5:e9:d6:93:be:42:7d:f7:4f:
4d:3e:77:85:dc:75:8a:7f:12:b2:dd:42:b8:1a:4a:f5:73:91:
94:23:2c:27:1e:9c:96:84:43:49:73:54:ba:92:34:44:e8:4f:
f5:7f:46:ef:7f:5a:4e:65:1f:01:5a:8a:bf:ff:8a:33:74:c8:
fe:42:91:20:01:27:75:9f:81:d5:92:b2:8f:b9:c5:bd:54:aa:
72:11:d0:91:ff:c7:49:61:cc:40:46:97:22:2b:33:d9:56:8a:
c2:e5:06:96:08:eb:0e:f8:6f:dd:15:63:dd:70:7c:d6:ba:8e:
17:1f:50:d6:37:c9:3b:5d:8b:bb:8e:79:47:20:3e:3e:f8:a4:
20:ef:8b:8a:17:6b:30:ac:6f:ca:0d:90:48:21:00:68:72:18:
39:b7:63:eb:3e:ae:cf:5d:57:d3:ac:ef:4a:c8:2b:ab:03:c8:
da:88:6f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:28:58 2026 by rpki-client