
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
File: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft (raw, json)
Hash identifier: AdZ4qT33xFm+GXQU5LULD0/kV8a60BdLZO3xwUAoJaE=
Subject key identifier: D7:5B:B7:BC:DE:D7:41:F3:18:3C:FE:E2:C6:85:70:DE:23:94:EB:04
Authority key identifier: 4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E
Certificate issuer: /CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E
Certificate serial: 1A0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
Manifest number: 19FB
Signing time: Tue 22 Sep 2026 16:18:39 +0000
Manifest this update: Tue 22 Sep 2026 16:18:38 +0000
Manifest next update: Tue 29 Sep 2026 16:18:38 +0000
Files and hashes: 1: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl (hash: RiyLDnN3nC4Gu7Sv9rwnPFKKlK9FSG5pS9B32FpEqBE=)
2: 9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa (hash: R7lR2WcGvuNrxwIvmAcXlnO8bRBc1zrOE25McAan8c8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl
rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:18:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6670 (0x1a0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173C8A, serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E
Validity
Not Before: Sep 22 16:18:38 2026 GMT
Not After : Sep 29 16:18:38 2026 GMT
Subject: CN=6ab2aa5f-7c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5e:59:60:b7:ec:9c:d2:34:3a:c6:8d:1b:8b:
b1:8d:90:72:97:ff:86:15:59:09:06:2f:01:7a:4e:
59:5b:1a:08:03:89:bf:c9:9c:bc:d2:ff:2d:27:2e:
18:c4:1a:5e:1c:dd:27:49:e3:6f:b4:d1:57:7f:d4:
10:b7:10:44:62:ec:88:5a:1d:17:9d:fc:2e:41:26:
4c:d2:3a:ac:28:68:8f:3e:05:8d:dd:25:c6:25:c5:
08:35:45:88:d1:76:cb:bd:48:d3:1e:7b:0c:b7:80:
91:4e:23:af:ce:22:04:82:b7:bb:16:53:76:32:7d:
2c:72:72:e9:af:88:ac:4f:51:de:b1:b3:29:59:a5:
ed:7c:be:25:a1:64:77:db:d8:bc:a1:eb:2a:a7:6b:
02:2a:f4:8d:22:34:ca:e0:48:12:53:2d:c2:d6:25:
a6:1a:91:4b:cc:70:b8:f6:41:29:2b:45:ed:a9:07:
d8:60:71:01:40:79:41:3e:67:e1:e5:c4:45:5f:6e:
d6:3c:88:07:d3:35:66:49:61:07:f7:02:3d:3d:75:
f0:40:60:04:20:c3:12:6f:42:8b:b3:ac:09:31:f5:
24:9b:00:5c:9a:8e:04:08:c0:8a:e9:15:55:7a:f7:
48:64:25:86:fa:ec:a9:c5:b7:cd:2c:35:f1:4b:44:
3e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5B:B7:BC:DE:D7:41:F3:18:3C:FE:E2:C6:85:70:DE:23:94:EB:04
X509v3 Authority Key Identifier:
keyid:4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:9d:ee:61:ba:9f:43:68:62:ce:6f:cb:78:51:68:34:7e:15:
01:76:ed:08:9e:11:c2:af:06:2c:b6:87:82:3c:58:28:84:0d:
0e:fb:e9:87:a4:a4:37:b7:75:5f:22:12:23:cc:2b:a0:d7:3a:
fa:d6:e7:e2:2c:fd:52:e9:42:c9:c1:d0:c8:83:b3:9f:55:f4:
92:d3:50:02:34:d8:01:b3:76:71:57:57:bc:52:b6:df:d6:6f:
65:f5:b0:71:83:40:d1:f7:25:b4:b9:2a:a4:c4:ca:53:28:00:
ec:d8:71:e1:f8:8c:e9:2d:d0:2a:9f:df:c8:ad:3f:d4:27:ad:
b7:fa:eb:e0:f4:67:98:b8:e8:73:ca:37:72:20:62:44:a6:2c:
c8:ae:6f:c1:02:60:cb:b7:0a:43:aa:33:6a:20:43:dd:6f:78:
e4:4f:11:68:9a:00:38:a5:25:43:51:20:90:87:ec:b3:02:bd:
29:9f:3d:0a:42:cd:bf:e3:da:5e:16:64:be:7c:2b:34:aa:e0:
35:a3:2b:6a:b3:a1:15:4b:29:98:45:7b:e9:a8:a5:07:b6:8d:
a2:c5:94:db:ae:64:18:a2:75:71:fe:dc:2d:92:a3:b4:9a:c3:
74:68:e1:b9:a9:a0:5f:b3:1a:27:7d:18:e8:22:ca:8e:e6:21:
f8:b8:f6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:25:22 2026 by rpki-client