
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
File: TSkgNoEWBfjziJgBUhslcnoc12U.mft (raw, json)
Hash identifier: j+RF3LznvRf/QxzKd7tWJywJwGrPh4E8b3fumrj9Cwc=
Subject key identifier: 81:94:65:AA:6D:D2:81:51:22:0D:4E:40:9E:26:13:70:21:ED:33:26
Authority key identifier: 4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65
Certificate issuer: /CN=A9154DE2/serialNumber=4D292036811605F8F3889801521B25727A1CD765
Certificate serial: 03E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
Manifest number: 03DF
Signing time: Mon 27 Jul 2026 01:36:32 +0000
Manifest this update: Mon 27 Jul 2026 01:36:31 +0000
Manifest next update: Mon 03 Aug 2026 01:36:31 +0000
Files and hashes: 1: TSkgNoEWBfjziJgBUhslcnoc12U.crl (hash: HSXj+BNHVhcmYEjFUJdBgPQObVqQpBd9RrBtAlYISU8=)
2: EB4F77B8D5E411ECB31AC843C4F9AE02.roa (hash: osHneI9FvoCZRKQxl7txl+jB8Ly+Es1NyoWP2eT8CMg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl
rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:36:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 998 (0x3e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154DE2, serialNumber=4D292036811605F8F3889801521B25727A1CD765
Validity
Not Before: Jul 27 01:36:31 2026 GMT
Not After : Aug 3 01:36:31 2026 GMT
Subject: CN=6a66b61f-a3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:9e:88:d2:84:f0:fb:a0:5b:ce:67:b4:ec:
d5:ab:1c:a4:e6:a5:99:49:d3:f3:97:f7:d0:f6:05:
1c:c6:c5:b3:a2:19:ca:7d:d2:b2:12:67:1e:40:2c:
1c:2c:42:8a:cf:56:0f:20:c7:22:b6:16:17:46:e9:
db:5e:88:a9:6f:39:d5:55:aa:8c:2b:76:d2:b7:53:
e6:8f:43:04:31:14:dc:f1:18:66:c0:32:b5:e3:ac:
86:92:44:c3:9f:16:5c:1c:f1:5f:84:55:06:71:f8:
02:fe:91:de:55:25:c5:7a:4f:ae:39:d3:c0:07:fe:
74:f0:76:e3:33:53:85:43:74:7c:9a:7b:32:75:34:
bb:20:d9:71:ef:5b:b6:a3:5b:06:43:3e:85:f5:a7:
0f:e4:a5:5f:1d:8b:a8:30:ce:1d:e4:06:c1:1d:ec:
ab:9c:f3:46:f9:81:47:e2:9a:9b:47:82:a7:c3:22:
17:8f:e9:1d:10:b4:2d:14:81:de:93:8e:36:ed:f6:
a8:80:34:9a:43:da:88:3d:a5:e7:09:43:72:a0:88:
e3:cf:45:bb:1f:10:1c:83:f7:4b:63:05:00:7c:4e:
35:59:fe:76:c1:10:e4:93:6c:01:58:27:0d:8c:37:
94:65:33:d1:15:3b:48:41:78:a2:5f:56:3d:50:c3:
57:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:94:65:AA:6D:D2:81:51:22:0D:4E:40:9E:26:13:70:21:ED:33:26
X509v3 Authority Key Identifier:
keyid:4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d5:4d:60:a9:5c:30:d2:f6:83:a9:9d:6b:6d:76:68:4f:d3:
28:9d:96:dd:b2:cb:89:b1:9a:7e:bb:9d:23:5e:9f:b2:a7:3d:
6a:a3:c2:97:07:07:98:1c:a8:1c:dc:da:bc:20:b1:ae:43:4d:
67:5b:2d:7d:8b:50:65:63:71:fd:2a:81:ee:38:13:e1:5a:b3:
4a:ff:0f:e4:75:2a:84:de:cc:94:d9:9a:16:21:67:8f:2d:da:
bd:89:78:f8:c8:94:6e:51:7a:fa:1d:b4:b6:61:d9:62:c3:90:
d8:14:41:ea:53:80:4e:00:57:d8:9a:71:31:e0:25:16:b4:67:
8d:ac:85:92:fd:00:f4:80:57:81:a6:eb:33:65:a2:08:6d:81:
0a:1d:8c:cb:2c:fc:6a:b2:43:3d:c8:63:bb:25:ec:79:44:26:
d3:19:ce:ce:4b:0f:31:e8:a7:67:8a:ac:f7:b7:a5:8a:0a:69:
22:c3:ce:2d:0f:5f:f1:4a:d4:c8:27:bc:d2:f5:b1:c0:2b:32:
a0:ce:45:01:69:ef:8a:9e:66:be:f9:c3:ec:da:5f:4f:cd:97:
5f:cc:96:25:1c:a0:11:c4:7e:98:5f:ff:e9:e0:c8:2d:d1:0e:
fd:e1:77:d5:a4:fb:54:36:63:43:4e:fe:8c:40:7f:f3:67:ec:
0b:19:b8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:44 2026 by rpki-client