
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
File: tUdigfNZTThknMz_UvWLtJtHXwk.mft (raw, json)
Hash identifier: Irjkd0obudq47NlinIPmpAn1F6+h7e7Ji4lYDCglILE=
Subject key identifier: C3:02:88:F2:92:FE:7D:FE:5F:E9:04:D2:56:3E:67:8C:65:26:B2:3F
Authority key identifier: B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09
Certificate issuer: /CN=A9169351/serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09
Certificate serial: 0228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
Manifest number: 021F
Signing time: Tue 13 Oct 2026 03:30:00 +0000
Manifest this update: Tue 13 Oct 2026 03:29:59 +0000
Manifest next update: Tue 20 Oct 2026 03:29:59 +0000
Files and hashes: 1: tUdigfNZTThknMz_UvWLtJtHXwk.crl (hash: g8CA5pADCARWaH3SIbdI7ILYOkMDGdALoVlNdiPOv3E=)
2: 86080D8A940511EE8A83F00DC4F9AE02.roa (hash: Vbr5tSAUt1o9rWvWC45nwleB9ODJmGpA18ZNisnMw58=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl
rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 03:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169351, serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09
Validity
Not Before: Oct 13 03:29:59 2026 GMT
Not After : Oct 20 03:29:59 2026 GMT
Subject: CN=6acda5b7-c5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:bb:91:dd:04:83:2a:99:2f:af:64:56:ba:
ae:cd:6e:cd:b6:5a:8e:dc:4f:89:f2:8c:d9:54:be:
71:26:71:df:75:b2:a1:d7:29:3a:bb:89:4c:c8:1e:
2c:b6:13:e9:ac:da:db:02:9f:b0:4e:ef:56:ee:c4:
7d:1a:0d:ca:70:48:88:ef:7e:20:f7:af:b2:f7:f4:
6a:8e:09:c0:2c:1d:59:bc:6a:b8:e7:80:e3:87:7e:
50:56:5e:fc:0c:12:6d:19:60:6a:45:7a:8a:c3:fa:
c4:6e:b7:37:fe:ac:76:45:65:d5:75:4a:18:0f:82:
22:46:f4:6d:26:cd:2b:99:fd:70:69:14:87:44:0d:
cb:57:76:c0:72:74:9c:de:e3:0d:2b:ce:46:69:a4:
4d:10:3a:f9:4e:9c:76:8c:95:ba:5c:7f:c2:48:8c:
66:cb:4a:3f:8c:d7:e1:ee:f5:c4:57:aa:51:f8:4d:
c8:d0:f6:5f:29:50:33:02:25:0c:3d:54:4c:d8:b8:
d1:c9:1a:62:1f:54:1d:65:5d:d8:d9:0b:02:59:ce:
9a:2f:df:0d:a5:20:33:6a:f2:47:3f:13:6d:33:b0:
8e:04:3e:ec:74:e1:7f:f1:7e:74:ed:b1:b0:84:ce:
2b:ee:c2:ab:ad:6f:33:d5:86:d4:08:fa:8f:8a:26:
d4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:02:88:F2:92:FE:7D:FE:5F:E9:04:D2:56:3E:67:8C:65:26:B2:3F
X509v3 Authority Key Identifier:
keyid:B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:55:c8:fb:e6:e6:02:e5:04:63:6a:58:ca:98:e2:11:e7:be:
a2:35:2f:46:64:e4:b0:ea:11:a4:df:e1:28:b3:6b:d0:9e:a8:
4b:a1:c9:4e:64:4d:da:b9:1f:95:ee:fd:29:59:6a:e5:cc:3d:
58:cc:bb:ff:93:0b:d3:73:65:63:4b:cb:64:37:85:f6:78:b3:
0e:cc:ec:ea:d3:cf:9a:0c:c3:3f:a9:1b:e4:25:02:76:3d:0a:
ec:cf:0d:1f:e5:5a:b3:06:a0:4f:48:89:9c:bc:e6:d2:e0:9e:
1c:34:61:05:90:d8:4f:d0:97:07:cb:00:9b:52:5c:8e:64:57:
30:54:75:c2:79:0d:a5:11:b5:5d:4f:8d:40:df:2c:c6:02:9c:
f6:9b:c8:13:03:6f:67:71:d8:df:c4:f8:b4:48:6b:bf:ad:61:
55:ef:52:13:98:52:8d:c4:28:39:34:0a:c1:6d:10:8b:39:d3:
6d:1c:cb:28:52:ad:14:b6:cb:9e:58:08:9b:33:c0:af:fe:42:
5d:1c:f3:51:99:2a:5d:d4:ff:09:5d:bd:f6:01:f5:7b:66:93:
56:f3:1a:00:0a:26:bd:81:36:ed:25:e7:0b:b3:7f:f5:af:76:
2b:4e:b2:d1:ca:93:04:c8:3d:db:c8:61:c1:34:bb:cc:6c:73:
da:0e:47:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:39:10 2026 by rpki-client