
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
File: tGadMNIQ5JB80oiL50uJpt08tsg.mft (raw, json)
Hash identifier: mY83hI/vyOdPWnztdpEAT0znYXadUk4Kto4q4c4mx30=
Subject key identifier: C1:6D:78:40:68:A9:FF:60:1F:E7:20:03:73:13:1A:01:E0:68:8A:23
Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8
Certificate issuer: /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
Certificate serial: 0A37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
Manifest number: 0A1A
Signing time: Wed 14 Oct 2026 19:58:30 +0000
Manifest this update: Wed 14 Oct 2026 19:58:30 +0000
Manifest next update: Wed 21 Oct 2026 19:58:30 +0000
Files and hashes: 1: tGadMNIQ5JB80oiL50uJpt08tsg.crl (hash: Nuxijd1X+8af49deA4YzJ49wkVYG6LXWbW8yHLO9bJs=)
2: 4AA9F8CC75B511F18A3D446262A30FBC.roa (hash: a8REmHCWm+jSLUiYkfwW5npJYFrJiobn6pD3SgbZbKk=)
3: 6E6FFF6A92F911ED8A66E70CC4F9AE02.roa (hash: wBIj83x+5tbUquS7FIlQQAMIzPRLzq+ZJDvfE+mcXhY=)
4: B350B67E964611EDA10D8777C4F9AE02.roa (hash: aMRVpWtmZnwUR1mTSqb8jU7v8RNHSZIpMkATgGb8rEM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl
rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 19:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2615 (0xa37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161A58, serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
Validity
Not Before: Oct 14 19:58:30 2026 GMT
Not After : Oct 21 19:58:30 2026 GMT
Subject: CN=6acfdee6-e366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0b:02:b4:2f:66:2c:9b:98:42:a8:e0:10:be:
23:a3:c3:61:58:50:87:21:ff:b5:72:dd:63:90:0c:
09:97:c8:2c:a0:6b:62:30:27:e9:5d:63:e0:f4:44:
e1:d2:3b:b3:ac:15:93:b7:9d:ba:6a:4e:9f:39:25:
3e:8b:a1:f8:c9:43:a1:be:4c:35:47:1b:28:3e:2b:
a6:80:ea:62:e2:df:d5:79:25:c3:9c:63:c8:3b:a2:
91:52:a4:aa:45:08:c9:62:01:37:0a:7b:6b:5a:aa:
c3:5a:2a:9f:01:c7:31:bc:bb:f8:98:be:da:7e:ee:
c1:5c:94:a9:89:4f:3a:44:e8:54:4f:e6:64:e0:e0:
e1:98:e5:3b:05:0d:76:93:ac:9d:8f:93:7d:a9:25:
7f:3b:43:ee:e8:b2:dc:e3:f8:3e:44:2d:38:ed:8b:
b2:79:b4:68:fd:3d:5f:44:18:06:b8:cf:95:d3:bb:
f8:2d:e8:0c:83:d9:ca:b3:d7:f1:bc:96:79:b1:da:
60:e4:38:70:27:4a:9b:f6:fb:d7:27:ee:27:ac:a0:
02:20:60:52:9c:5a:04:f4:5c:45:4f:ad:fb:e7:09:
f0:e5:97:68:c4:e1:23:13:bc:45:ab:5d:bc:b8:7c:
ff:f9:55:4f:d1:f9:67:eb:7b:dc:98:f4:eb:ef:34:
0f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6D:78:40:68:A9:FF:60:1F:E7:20:03:73:13:1A:01:E0:68:8A:23
X509v3 Authority Key Identifier:
keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:e2:d5:29:b0:7a:0e:b9:c6:3e:9b:8b:b7:10:3e:db:7d:44:
b8:65:f9:8e:c7:bd:29:8d:68:b2:64:5c:cb:6f:3a:89:27:3f:
9f:be:27:ce:32:bf:83:9e:8e:82:1d:ed:ca:2e:60:4c:d3:ee:
30:65:34:2f:06:58:bc:b2:36:dc:f5:5e:1e:17:2c:fe:d0:1d:
a5:86:aa:46:14:33:48:3e:3d:88:15:fd:d0:5c:75:a8:a9:e5:
54:cf:5c:11:d4:34:4b:f8:fe:7a:13:ab:44:7c:f8:16:4e:7b:
af:c1:3f:6d:54:81:f7:28:6d:b8:66:f7:ad:31:7c:80:92:6e:
2c:72:02:b3:3f:9d:67:9a:a7:67:6c:2a:bb:cf:81:a4:99:bc:
01:c3:aa:b7:95:21:1a:38:85:b7:0b:5e:e5:1e:bc:88:a1:f4:
b5:28:b1:ba:0d:01:8f:de:63:61:38:38:10:33:9f:3c:be:f1:
e0:1e:93:f7:f7:46:bc:02:0f:a1:44:8b:90:c9:37:26:9a:d8:
fd:69:ab:4f:68:ae:70:82:b5:3a:b5:87:2e:59:3c:7b:31:8d:
62:0a:4e:76:38:04:30:12:7a:ee:43:f3:58:92:0c:8d:e7:5d:
5b:9d:d6:28:3f:ec:df:46:a4:a4:f4:94:7e:bc:cc:2c:41:6a:
8a:7b:52:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:13:47 2026 by rpki-client