
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
File: tkVWXJMbKETS92DqqrDirkvjFBQ.mft (raw, json)
Hash identifier: dsMDuCS6h7xjkRJoGr87EwgHe2NPtIQy18OQ75kVUIo=
Subject key identifier: BE:F6:CB:59:65:07:0A:08:CA:6C:C4:9E:23:1A:36:2F:77:45:7F:A9
Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14
Certificate issuer: /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414
Certificate serial: 052D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
Manifest number: 0525
Signing time: Mon 27 Jul 2026 00:32:27 +0000
Manifest this update: Mon 27 Jul 2026 00:32:27 +0000
Manifest next update: Mon 03 Aug 2026 00:32:27 +0000
Files and hashes: 1: tkVWXJMbKETS92DqqrDirkvjFBQ.crl (hash: X4N7Z9z0ZrQqfd72VX5LRUoU6NUkHXxumV6VsxcYQ/E=)
2: 838DF1B0572011EC905C770CC4F9AE02.roa (hash: lZ1bwrjyN0UbXwL+oCg+Wnabt6ugA+6V0SyJb/rt1uI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl
rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1325 (0x52d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170187, serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414
Validity
Not Before: Jul 27 00:32:27 2026 GMT
Not After : Aug 3 00:32:27 2026 GMT
Subject: CN=6a66a71b-cd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:e3:fa:f7:40:00:39:f8:fb:a6:80:be:d4:
58:2f:a5:f8:df:8f:ba:22:10:de:91:66:76:cc:cd:
f1:97:b9:f8:5c:f5:29:10:db:59:dd:fc:b3:f3:a1:
e5:71:26:57:be:80:e9:4a:ce:94:a8:c0:70:3a:fa:
a5:c5:c6:39:19:34:61:e3:3f:94:84:14:0a:b8:9d:
52:03:5c:6e:79:b2:9b:c2:d1:a2:8e:2a:d4:00:a1:
a7:3e:8c:9a:5a:a9:11:48:c3:80:6b:11:6d:ea:83:
6a:1a:00:d4:f1:c8:74:28:60:de:3f:2d:3d:f4:3e:
ea:f6:dd:0d:75:a2:bf:05:16:88:87:0d:32:4f:7f:
64:61:0b:d7:10:6d:e6:ac:d8:82:9c:d6:78:be:c0:
45:b3:1d:7e:02:d9:d2:86:c7:ca:f8:66:3c:f8:57:
7c:7e:7a:86:1e:95:43:a1:e5:bb:d5:a0:9b:41:de:
66:ff:fd:01:67:d4:6a:1a:b4:29:9d:77:c7:51:3d:
80:d9:e3:17:d2:20:28:41:1c:21:d1:7f:2b:cf:82:
a5:21:72:9a:8b:ec:61:7a:19:89:4f:5f:e7:c3:1b:
b4:a0:ed:10:b9:b1:2b:fe:85:65:94:7a:56:89:1f:
49:9a:1e:d7:fb:88:2c:79:83:46:cf:83:aa:41:2a:
81:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F6:CB:59:65:07:0A:08:CA:6C:C4:9E:23:1A:36:2F:77:45:7F:A9
X509v3 Authority Key Identifier:
keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:96:c3:cd:61:aa:5a:a7:84:d6:d1:da:30:4a:aa:a9:04:10:
60:bf:a5:ce:ef:70:8c:41:5f:11:7b:c4:bc:88:4c:e4:ec:48:
a3:09:65:08:af:b6:78:1e:98:e4:80:83:79:91:ad:6b:df:2a:
aa:66:30:f1:5f:91:d0:11:e3:56:0b:d8:7a:8f:a6:bb:2e:8f:
9d:57:56:b2:b1:a3:15:12:c9:10:4c:9c:5f:3b:ef:58:df:d9:
cc:c2:b0:4d:27:88:9b:06:38:a6:6d:c3:16:68:a4:bb:cd:93:
24:05:67:da:79:40:bc:35:a0:bb:a7:ec:b2:3d:0a:0a:0c:64:
31:e3:cf:74:91:b6:f6:16:33:46:6f:f0:1a:7d:60:92:dc:44:
66:6a:3a:e0:15:92:43:3b:c5:f7:ab:a1:c7:35:1d:5f:cd:c7:
36:8a:de:74:d0:fb:99:aa:40:c1:45:9f:96:41:ce:4d:b3:27:
cc:8a:8d:f4:c7:6a:af:9a:f2:49:c8:77:7c:81:4b:45:25:c3:
09:24:07:41:7b:02:fe:bb:d8:6a:f4:d5:a1:f3:11:f2:ac:15:
ea:49:a3:f3:1c:08:b2:ea:36:ee:d0:58:9a:42:3d:7c:dd:eb:
a0:4a:7c:4f:87:b1:eb:b1:cb:f3:37:9e:7c:3d:cd:55:e2:0b:
6f:b1:40:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:10 2026 by rpki-client