
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json)
Hash identifier: vBuSPLdhCgoxTgmr2CuU8jisLGkmzSUS8f+Uw89s40M=
Subject key identifier: F8:65:FD:26:CC:4D:FA:79:D9:22:2C:F7:F1:3E:73:3C:55:2A:DD:D1
Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65
Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565
Certificate serial: 0AEC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
Manifest number: 1AE7
Signing time: Tue 28 Jul 2026 17:33:57 +0000
Manifest this update: Tue 28 Jul 2026 17:33:57 +0000
Manifest next update: Tue 04 Aug 2026 17:33:57 +0000
Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: MFGuF2lxRSX+tpmnU1sgK6eARbzexFkMnPE+BPpQdF0=)
2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: WglSFimwBIxRaonVvtON24BGZwGg55rZ2VzaZUYH4UA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl
rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2796 (0xaec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565
Validity
Not Before: Jul 28 17:33:57 2026 GMT
Not After : Aug 4 17:33:57 2026 GMT
Subject: CN=6a68e805-4565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:f9:c4:5b:f8:74:2b:c1:f7:da:0c:2c:b5:
46:b3:03:0e:6d:39:32:3c:a4:a0:a5:b3:1c:03:87:
eb:5a:fb:3c:4c:f3:81:1c:b9:fc:23:a4:a2:cb:c9:
38:82:37:e9:34:b0:84:68:59:c5:f6:35:17:59:c8:
8e:e3:3c:f2:27:aa:02:54:55:6e:f6:11:e1:37:24:
42:76:3c:ee:b6:a4:95:90:38:a1:e9:24:ce:48:13:
4b:04:82:45:dd:e9:7f:da:41:5d:38:51:66:d5:b0:
bf:0b:28:ba:ca:4b:9e:f2:e2:a8:a5:d1:f4:38:8e:
1c:9c:9b:16:76:14:0e:54:b7:74:3a:88:5d:b9:ae:
57:1d:c6:25:cf:bb:f6:93:3e:6e:d1:80:d0:e1:d2:
00:ee:d9:fe:ce:25:47:4b:8d:2a:d3:3a:18:0a:a2:
d1:6f:5f:58:8b:69:aa:e6:5b:ec:cd:f2:e5:9c:8f:
7d:5c:d1:4b:29:f7:b1:49:82:35:14:29:c2:9a:e5:
cf:dc:9f:7f:00:d5:a9:68:95:54:c4:4b:f0:26:17:
70:9c:d1:3f:c5:57:d0:53:00:aa:44:8e:b3:90:af:
41:f1:44:93:28:64:27:16:f7:f2:2e:6d:56:b8:cc:
cd:21:ae:3c:04:e3:a0:24:f2:2e:c5:58:11:a8:f3:
84:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:65:FD:26:CC:4D:FA:79:D9:22:2C:F7:F1:3E:73:3C:55:2A:DD:D1
X509v3 Authority Key Identifier:
keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:cf:45:89:57:13:7a:a4:a3:94:c3:f7:a2:aa:b3:21:42:0d:
88:8f:e0:5b:02:7b:1f:4a:65:51:f4:0e:d5:7f:6d:7d:72:7f:
78:a4:60:9d:d4:84:5b:3d:18:53:32:01:58:b7:ff:37:4f:42:
d4:76:42:77:8d:85:be:f7:7a:08:e6:ca:04:c0:7d:32:c1:17:
0a:11:6f:a0:d9:fd:77:9d:22:ec:ce:4a:f1:1e:d4:df:e3:e4:
4a:7c:d2:47:ab:19:4b:89:e8:7c:0c:b9:19:85:00:61:50:a1:
11:5a:39:a3:0c:13:27:58:9d:92:b4:7a:d2:2c:d2:8e:ee:63:
70:7b:4d:12:9f:d5:65:ec:2b:07:57:7a:f7:12:d5:17:69:11:
b6:8a:04:49:3d:31:4d:b6:1b:dc:f7:0d:da:1c:4a:3b:78:ef:
40:e0:35:b8:67:db:ef:66:76:02:a3:a8:ab:ae:6b:56:00:2e:
8b:8e:8c:8f:15:79:29:38:9e:aa:c3:b2:74:ab:08:8e:d2:24:
08:1b:27:e5:3c:4d:86:ed:15:d0:0e:e2:75:26:66:3a:2c:33:
45:9a:4e:ff:b7:c0:12:0d:06:a8:2d:11:a3:60:f1:5e:92:92:
4d:87:8a:a5:ec:e0:d3:3b:b2:33:6d:1d:e0:13:57:60:ae:7e:
79:c1:e1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:23:33 2026 by rpki-client