
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
File: tkVWXJMbKETS92DqqrDirkvjFBQ.mft (raw, json)
Hash identifier: Fi4fiNDQQouWxDoC53MdS67HZ5Ox5FlDDZpg46593UM=
Subject key identifier: 47:D8:03:D1:34:39:71:E0:5C:13:63:CD:A4:89:88:FC:49:D7:D6:4B
Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14
Certificate issuer: /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414
Certificate serial: 054D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
Manifest number: 0544
Signing time: Sun 20 Sep 2026 23:18:07 +0000
Manifest this update: Sun 20 Sep 2026 23:18:07 +0000
Manifest next update: Sun 27 Sep 2026 23:18:07 +0000
Files and hashes: 1: tkVWXJMbKETS92DqqrDirkvjFBQ.crl (hash: pkThRZoyrZ3Ww5zeh02SCM+cjb67RMbScYTVY7WGbWs=)
2: 838DF1B0572011EC905C770CC4F9AE02.roa (hash: IckI08GnWY7VkqyIQpUbqPFyMQQDG/IZLaBCKjOdxWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl
rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1357 (0x54d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170187, serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414
Validity
Not Before: Sep 20 23:18:07 2026 GMT
Not After : Sep 27 23:18:07 2026 GMT
Subject: CN=6ab069af-5fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:d0:0f:0b:14:53:55:b3:fe:ca:e1:0b:7e:
b0:b7:7b:65:5d:d4:4b:e5:3b:de:1e:ed:07:61:f7:
4b:3b:04:87:35:17:f5:d1:6a:c9:61:30:08:08:b8:
96:18:ad:c1:52:1b:3a:c1:c1:1d:c4:07:01:8c:45:
4b:eb:66:80:df:0d:7d:c3:68:79:eb:4a:70:11:25:
a1:de:6c:9b:98:d5:c0:1a:10:79:d0:16:22:41:2d:
73:3a:a5:32:a3:a9:1d:30:3b:e4:0d:d2:74:4c:e9:
61:b2:1d:fb:2c:e0:c0:2b:ee:9e:09:71:76:4a:71:
ba:ba:2a:e0:ab:2e:7e:00:e8:40:7a:e9:27:24:9f:
ba:3f:e3:5e:53:f3:95:43:f8:6b:da:f2:60:1f:0d:
a9:49:a8:83:e1:53:aa:4d:44:4d:c6:09:bd:3e:f8:
38:8c:bd:d5:68:01:c5:e6:3b:a9:88:2d:e9:37:e9:
cb:86:1a:45:7b:27:f5:e4:a2:88:9b:4b:5f:0f:39:
94:2f:38:e3:e1:b0:95:9f:07:97:a6:17:5b:38:a4:
bd:a5:cf:91:cb:e9:c1:c9:ab:a9:d9:4d:bd:6b:46:
42:92:61:7b:16:3e:23:58:a4:eb:ba:e3:0a:8d:59:
db:34:00:81:03:92:5b:c1:f4:60:14:b2:14:f3:06:
7e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D8:03:D1:34:39:71:E0:5C:13:63:CD:A4:89:88:FC:49:D7:D6:4B
X509v3 Authority Key Identifier:
keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:6e:c1:3c:f0:54:1d:14:18:db:1c:8d:36:ed:0c:bd:77:da:
03:59:e9:b2:1e:e5:c5:f6:46:8f:7a:3a:fd:35:ea:87:45:95:
0f:44:cb:f8:34:d0:2e:93:7b:76:49:9d:fb:88:19:04:8d:4f:
c3:b2:52:b6:8c:ee:1c:c9:dc:ce:66:2f:dc:e6:53:c3:dc:67:
e0:6d:87:d7:5e:94:a0:7d:f2:e9:de:f1:d7:e7:01:1b:d0:36:
9c:c1:eb:82:9e:07:f7:ee:74:2e:56:0c:64:f5:a9:c1:b1:5b:
9f:d5:b1:09:f5:90:5c:b7:49:ac:3e:81:cc:33:84:b6:49:ba:
f1:f3:fe:05:b4:70:10:47:ae:00:90:63:18:40:2b:3e:38:8a:
d1:0c:1c:b7:71:a8:4d:b3:0f:8e:b5:f0:5d:7a:27:7e:9e:64:
24:c5:e8:21:f4:ca:82:52:f2:1a:c3:a8:b8:98:db:9c:de:48:
94:80:56:01:dd:d8:d2:39:37:52:ef:ad:ff:ac:c0:11:35:04:
98:1e:e7:07:71:25:d8:51:47:f9:9e:e0:7c:48:e2:bb:19:14:
db:f7:bb:91:0d:ef:d7:8e:6e:d3:bb:59:13:d3:3d:ff:ae:b3:
43:af:1d:a3:33:3f:fe:4b:e2:6b:f5:85:dc:81:40:4b:b3:01:
dd:43:ae:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:58:46 2026 by rpki-client