
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json)
Hash identifier: 6A/AA58Z7/vqJnIG01ycKVAT99QbtuXnXkA2Cuz3i3k=
Subject key identifier: A5:E5:BC:15:3D:6F:7B:F1:6C:39:37:21:75:0F:1D:E9:4F:03:FF:0B
Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65
Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565
Certificate serial: 0B16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
Manifest number: 1B32
Signing time: Tue 06 Oct 2026 17:30:08 +0000
Manifest this update: Tue 06 Oct 2026 17:30:07 +0000
Manifest next update: Tue 13 Oct 2026 17:30:07 +0000
Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: D5Pxb3NKtZcj0WfYv2bNOkexQN16UhYwFUrgKRsbuAk=)
2: AC262AE896E011F1AACCC6D55B11F970.roa (hash: VFreQWvwqoUHhufjMC+/zSTILelzYSaJo4dghHUSpM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl
rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 17:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2838 (0xb16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565
Validity
Not Before: Oct 6 17:30:07 2026 GMT
Not After : Oct 13 17:30:07 2026 GMT
Subject: CN=6ac5301f-a425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:8b:18:b6:93:93:af:a5:c5:33:c2:bc:a2:
eb:46:7c:f8:12:54:75:4a:ce:07:55:ff:a7:21:9a:
ed:3a:d3:a6:6e:de:b2:df:fb:c3:4a:31:50:c1:06:
7c:04:3e:70:58:42:1f:78:7a:27:dc:f5:19:55:2a:
69:ff:e4:4b:18:06:77:57:06:e3:ef:76:d2:6a:a5:
02:69:bc:96:9b:c7:ee:08:95:d2:09:af:6b:69:07:
b5:7c:02:40:3b:8e:b0:d9:73:15:e7:30:5d:6a:b6:
97:9f:c6:ce:9e:5d:58:d4:a0:0d:30:d3:d7:0f:a0:
5b:8c:43:50:83:4c:82:f6:df:29:d1:83:3a:6e:74:
94:6a:82:c1:82:8d:66:ac:0d:82:96:a3:99:55:1c:
60:70:62:5a:0a:e6:15:f1:39:4d:ea:34:d4:cb:ea:
49:cf:60:c4:9f:0e:9b:e0:82:e3:ea:e6:23:b1:10:
15:81:22:17:36:f3:7d:31:69:01:45:ef:0b:6f:99:
d8:57:1d:be:5a:55:15:54:d3:f7:42:40:de:da:c5:
18:f8:af:9b:c7:bf:09:9d:88:97:19:d6:ef:d3:ca:
b6:e0:ce:06:c7:bc:4f:88:90:f1:7f:ec:4b:22:ff:
da:eb:f3:83:f9:fb:a0:ae:8d:c0:72:6f:8b:7f:78:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E5:BC:15:3D:6F:7B:F1:6C:39:37:21:75:0F:1D:E9:4F:03:FF:0B
X509v3 Authority Key Identifier:
keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:f4:22:5e:80:4b:0e:7f:f7:80:b7:b6:50:ef:95:d4:96:ec:
e3:b0:3a:3d:30:91:f9:15:97:9a:cd:93:1d:5a:f6:a3:02:93:
5b:24:d8:45:d2:34:c2:41:b1:49:92:c7:90:02:3b:28:39:c8:
cb:5d:a7:de:21:76:e8:be:c1:3e:41:f8:36:33:20:3f:b1:4d:
6a:cb:5f:f0:ab:ae:b4:35:5e:ca:c6:33:49:c7:65:de:7d:6f:
42:c8:7f:1d:fb:e5:ee:7f:c5:65:60:70:e5:3c:56:d0:42:1c:
43:d3:00:c0:32:92:20:5e:34:76:5b:72:f7:d6:98:8f:1a:8e:
3e:d0:5a:ac:91:d5:3f:0b:88:ec:93:ea:7c:59:41:20:10:fa:
97:1c:f5:64:05:a5:06:66:fc:24:30:02:72:0e:0f:dc:24:07:
07:cb:f8:6a:ff:71:fc:f1:9a:46:75:3f:26:6a:e6:eb:f0:8f:
9e:3b:c4:b5:a1:9e:28:f3:87:d0:c3:23:c0:2a:5f:db:29:bd:
9e:7f:62:56:b0:75:bb:4e:96:dd:61:2c:2e:eb:7b:eb:95:c6:
57:aa:f7:b1:32:ea:47:61:ea:55:8b:a8:f5:20:bd:a8:ad:ce:
1a:7d:06:7b:1f:f4:ec:82:84:bc:4e:57:11:0b:c2:a9:0e:a7:
f1:17:b8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:29:36 2026 by rpki-client