
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
File: Te4INvoPfuksLmpsGYAW3oz4vxY.mft (raw, json)
Hash identifier: MfGIWUDxLXzEpkfmwvg5/81kv03tOynj/+zznau1dKQ=
Subject key identifier: 13:28:0B:00:26:49:1A:53:87:CF:82:57:A3:A3:24:98:91:BC:5A:90
Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16
Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16
Certificate serial: 0271
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
Manifest number: 025F
Signing time: Wed 29 Jul 2026 03:23:37 +0000
Manifest this update: Wed 29 Jul 2026 03:23:36 +0000
Manifest next update: Wed 05 Aug 2026 03:23:36 +0000
Files and hashes: 1: Te4INvoPfuksLmpsGYAW3oz4vxY.crl (hash: 0yeThT5Da2EUrlL4DVl1InMhFMQOYIow+wGThSzxhnM=)
2: 9BC1D2907EDF11EE86C6A27BC4F9AE02.roa (hash: SmxK1GgjoBjC23E2cMN3xNRhJXyAe9oj/ORTb6kLl1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl
rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 02:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171D3C, serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16
Validity
Not Before: Jul 29 03:23:36 2026 GMT
Not After : Aug 5 03:23:36 2026 GMT
Subject: CN=6a697239-ddb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f5:5b:ef:b9:bf:47:38:e1:23:62:d3:78:f9:
f5:ac:de:87:49:2b:b2:3f:34:69:bc:10:8d:56:9d:
4a:f7:42:53:6f:6d:b2:aa:53:38:f9:19:4e:e6:5c:
77:79:49:3e:f1:1b:26:a8:4b:a9:12:c0:64:e9:31:
46:5c:d3:7d:e1:b0:6e:5b:ee:a6:9e:7f:2e:96:9e:
b1:ba:1a:a9:6c:b3:4b:fd:16:c1:a5:26:f3:c7:06:
ba:cf:99:86:36:ca:5f:d5:a4:0d:f7:99:5a:d1:17:
6e:e8:98:37:56:7b:9e:83:59:68:95:8a:43:17:a9:
5d:97:d3:14:c5:06:3a:83:e4:6e:af:26:08:70:dc:
3e:61:df:e9:53:91:8d:2f:3e:c5:dd:62:af:70:d8:
ec:07:58:32:2a:26:52:56:64:24:04:97:a3:bf:ac:
b0:4e:a0:a4:05:c8:db:b2:6d:cc:82:06:85:b4:16:
5b:9a:9b:d7:b2:cc:0f:88:eb:1e:cb:46:70:5f:34:
fa:55:2f:48:e0:83:73:87:64:e7:fa:ee:15:81:26:
95:68:f9:6a:79:ed:be:cf:d8:f4:b7:d1:2c:f5:d6:
82:3d:8b:43:5b:23:7c:0b:40:81:13:4e:b2:ac:12:
42:d5:6a:f7:2a:64:bb:ef:b3:53:95:62:31:c7:20:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:28:0B:00:26:49:1A:53:87:CF:82:57:A3:A3:24:98:91:BC:5A:90
X509v3 Authority Key Identifier:
keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:3f:d1:27:cc:03:fe:63:89:15:95:9a:b6:43:f0:b1:db:6d:
bc:ff:dc:97:2f:b1:56:b1:de:5c:1f:1a:cb:81:38:9d:6f:93:
a3:2f:e4:1b:97:df:61:c7:1b:4d:ba:02:8b:7f:a1:6d:7e:9a:
ae:df:67:cf:75:00:ce:85:9e:d8:0d:51:cc:3d:fc:7b:f9:13:
a6:e8:8f:ef:2a:39:24:eb:06:e8:e7:26:11:5d:a9:88:b2:93:
00:f5:8e:d7:e2:4f:22:71:d1:2f:54:c9:5a:fc:be:38:73:70:
f5:df:75:00:c5:c4:ec:62:d7:38:50:cf:d2:76:12:8b:c8:b6:
db:90:3f:6d:a1:c8:2e:58:eb:47:92:d9:42:f1:be:3e:8f:b4:
10:3a:30:64:37:19:81:2b:61:b3:0f:28:37:12:61:b0:38:a0:
d7:3b:cc:ca:d9:e9:15:13:2f:c7:e2:de:85:5f:62:ae:59:cc:
da:00:25:94:a7:6c:6f:99:a1:1f:a4:75:03:80:b4:64:98:fc:
51:ea:47:a8:cd:25:3a:b2:07:f6:20:a0:2f:52:ce:ee:c0:f8:
be:39:44:c0:8b:c9:13:23:e6:92:85:05:08:70:ae:b4:ee:0e:
50:7d:db:0e:d7:1d:b9:f3:de:d8:14:eb:b7:7a:a9:a9:c7:4a:
c4:3b:17:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:36 2026 by rpki-client