
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
File: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft (raw, json)
Hash identifier: B6BUHYBdPX3ojW8+gzp1nDmFB42yxQ97uL2n/R5BoBs=
Subject key identifier: 5D:A0:3D:F0:2F:5A:34:DC:4C:F7:A9:65:B1:97:2C:F0:D7:1C:6A:CD
Authority key identifier: 4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E
Certificate issuer: /CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E
Certificate serial: 19F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
Manifest number: 19DE
Signing time: Tue 28 Jul 2026 16:28:24 +0000
Manifest this update: Tue 28 Jul 2026 16:28:23 +0000
Manifest next update: Tue 04 Aug 2026 16:28:23 +0000
Files and hashes: 1: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl (hash: i2HHkMom0ghJG3H4cLoN/ci4W+2/NDl3mKBFHFDcj3Y=)
2: 9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa (hash: R7lR2WcGvuNrxwIvmAcXlnO8bRBc1zrOE25McAan8c8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl
rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6641 (0x19f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173C8A, serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E
Validity
Not Before: Jul 28 16:28:23 2026 GMT
Not After : Aug 4 16:28:23 2026 GMT
Subject: CN=6a68d8a7-ee8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:76:3a:df:33:1e:1e:96:a7:6b:96:37:53:
df:0c:15:16:c0:18:ea:d1:94:6c:da:2b:5f:ab:5f:
b7:7f:aa:02:b8:ca:35:de:06:00:a9:4c:ca:f4:e8:
27:7d:d8:3c:5d:2b:82:f8:73:c4:0f:75:62:78:93:
0c:13:05:2d:5e:41:3c:8a:8e:53:e2:49:2c:38:92:
62:e3:d6:30:7a:05:83:6c:e0:ee:1b:32:30:89:d1:
42:b4:de:de:a1:68:77:07:5c:82:fd:13:4d:34:f3:
3c:d3:59:6e:72:20:13:17:ca:59:a8:59:ec:ed:c7:
3e:23:e2:ff:37:f1:68:e3:01:7d:b2:11:bd:62:f4:
9f:2d:e7:b9:4a:80:77:01:92:13:66:c5:45:3d:13:
01:46:a5:a0:e6:2f:a4:47:90:fc:d4:4a:4c:6a:13:
b4:51:5a:29:d5:17:ae:2b:27:ad:8e:35:df:51:c6:
c7:fa:ac:78:11:3f:0d:90:3b:a5:7e:ec:de:be:af:
45:97:0f:a4:3b:56:18:df:12:91:9f:70:98:86:91:
7e:72:e5:2b:8c:0f:ee:56:d5:ca:46:2f:80:a7:9b:
c4:f2:03:ce:51:e5:ab:23:75:01:b2:ef:72:26:91:
fb:57:66:82:cc:14:4f:08:00:b2:a3:cd:f2:3d:40:
71:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A0:3D:F0:2F:5A:34:DC:4C:F7:A9:65:B1:97:2C:F0:D7:1C:6A:CD
X509v3 Authority Key Identifier:
keyid:4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:17:40:e1:59:94:83:98:fc:ad:9d:39:2b:be:06:3c:37:07:
52:32:5c:0d:23:f6:6b:7d:13:63:f8:03:31:a2:31:80:d4:28:
f3:a3:bf:e1:40:c5:47:69:b0:ff:cb:85:77:e4:50:b8:54:36:
1c:3e:cb:56:cd:5d:48:03:36:41:30:7c:df:fd:80:d7:7c:07:
bd:f1:f7:e1:f2:2e:a1:0b:7e:89:a5:55:d5:c1:37:04:f0:7d:
3d:4e:5f:d8:a9:e6:21:cf:45:2f:4e:21:f2:02:a6:60:02:07:
66:71:6c:83:d3:d6:29:c8:7e:0f:91:83:46:f8:a8:50:a6:54:
97:24:32:48:55:10:50:88:b0:36:dd:f8:54:a3:64:2c:e4:9d:
58:da:00:69:77:a6:d8:81:7b:40:36:54:3b:cd:e3:02:9f:40:
dd:ef:05:a3:2a:53:2d:29:99:d7:1b:82:7f:93:a8:e2:78:d3:
cb:6e:35:1f:fc:7e:49:e9:5d:bc:cd:ef:33:b7:d6:a8:72:a7:
54:35:98:80:a1:ec:2b:e3:8e:1c:7b:d4:d7:b5:f8:9a:f6:3d:
77:b3:f4:e8:ca:0b:2d:78:7d:39:af:73:a6:f8:a3:4b:6a:4f:
e2:1e:3a:ef:0a:e3:79:4b:b1:42:8e:0f:0b:e7:52:3b:77:08:
42:6e:47:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:54:50 2026 by rpki-client