
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
File: Te4INvoPfuksLmpsGYAW3oz4vxY.mft (raw, json)
Hash identifier: zLu0Mn8QfG6TwpVqvGzhvksdW8k0ltSUrvoKd5xq5mk=
Subject key identifier: 61:6F:06:2B:71:32:DB:81:01:18:81:7D:3E:E0:4D:E5:7C:99:06:42
Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16
Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16
Certificate serial: 028D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
Manifest number: 027B
Signing time: Mon 21 Sep 2026 02:06:28 +0000
Manifest this update: Mon 21 Sep 2026 02:06:27 +0000
Manifest next update: Mon 28 Sep 2026 02:06:27 +0000
Files and hashes: 1: Te4INvoPfuksLmpsGYAW3oz4vxY.crl (hash: NP3crZMz3L4PzHlGoqlRpOQLQNSyffbXAvXNn2vvYio=)
2: 9BC1D2907EDF11EE86C6A27BC4F9AE02.roa (hash: SmxK1GgjoBjC23E2cMN3xNRhJXyAe9oj/ORTb6kLl1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl
rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 653 (0x28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171D3C, serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16
Validity
Not Before: Sep 21 02:06:27 2026 GMT
Not After : Sep 28 02:06:27 2026 GMT
Subject: CN=6ab09124-86f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:a7:c0:e5:6a:71:66:38:f2:ab:95:ad:21:
58:7d:5f:9a:d3:18:f9:a3:7d:0d:6e:a5:85:df:57:
7a:89:4a:ad:63:13:f9:33:69:f9:f5:2d:66:f6:42:
1f:f2:61:54:54:d0:e1:cb:62:78:89:fa:ff:aa:22:
15:52:da:55:39:4e:c9:55:0e:66:99:08:65:6b:a1:
54:6a:33:09:94:56:ba:6c:46:49:d1:bf:72:10:a8:
04:89:f7:0c:2b:6f:b4:a5:5d:98:77:c5:44:f2:0d:
36:6e:d7:61:37:bc:ad:e1:09:27:4f:c4:e6:4a:5f:
06:61:66:d7:b8:03:ba:07:22:4b:d8:cf:bb:fd:1a:
91:af:d1:ce:b8:d8:81:4a:9c:c8:91:20:d8:17:2d:
fb:3c:92:83:01:5a:a6:63:46:74:6e:dc:de:3f:8f:
1d:95:d6:8c:ce:4b:ad:c6:b9:21:49:f3:72:1a:3d:
97:b6:33:9f:4d:04:82:4d:e5:6a:55:7e:ca:74:a3:
b0:dc:05:81:f3:c6:f6:c9:61:74:1e:a8:8a:15:6c:
02:ea:3d:df:e3:94:9d:91:d1:8b:ee:73:8e:e4:9e:
69:ca:6c:03:31:4e:62:15:04:bb:95:e4:74:ae:ea:
e3:76:3d:68:19:84:c6:9e:40:b6:54:21:b6:9e:47:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6F:06:2B:71:32:DB:81:01:18:81:7D:3E:E0:4D:E5:7C:99:06:42
X509v3 Authority Key Identifier:
keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:76:41:96:0d:66:27:40:2c:73:1f:ea:cf:44:08:11:db:c7:
46:6d:10:51:fe:61:30:c8:e9:2a:89:94:e9:72:03:65:1f:29:
6f:0e:4c:b1:af:1f:17:9c:0b:13:b1:6b:d5:c1:3a:11:b1:5d:
88:ce:5b:d4:76:73:07:1a:d0:a3:b6:e8:60:13:e7:16:01:93:
66:9b:b4:24:dc:7f:8d:ab:d2:37:02:63:c6:85:05:58:36:6f:
ab:66:86:e4:9d:73:86:d4:17:a3:f9:1f:17:f9:d6:eb:a0:eb:
b2:d9:4d:7d:07:bd:dc:b5:23:91:b0:3e:3c:dc:df:d0:a9:1a:
cf:44:58:26:4e:07:2b:8b:e9:4b:34:12:43:0b:a7:5e:d4:d8:
47:97:e3:46:2b:b4:21:0d:42:20:3b:aa:01:c3:c5:38:60:2a:
34:dd:55:3b:f5:bd:a5:0f:65:82:7d:1b:a6:91:0e:d9:b9:37:
31:f8:02:9f:0c:5e:7c:a1:b4:42:97:7e:a1:b1:d2:5b:91:44:
35:3d:b4:d4:6a:04:f7:f4:3b:ec:5c:f7:52:f0:a7:71:ab:b3:
17:d6:75:6f:05:90:e0:29:5a:06:4d:41:44:b0:63:34:7c:0e:
b2:e5:b5:60:ac:c8:b3:0c:5c:c3:65:c3:e0:17:a5:61:d2:df:
f1:4b:3d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:38:34 2026 by rpki-client