
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
File: T2scW0K2HdXigZOWenDRiiKP73Y.mft (raw, json)
Hash identifier: QwqOPGSxGPgoOdBrESx5U6D6kVpQfe2znSidMaDrZ6I=
Subject key identifier: C3:D3:61:30:B0:B1:37:FA:CA:03:34:F4:4F:38:91:60:8A:78:89:27
Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76
Certificate issuer: /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
Certificate serial: 0D82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
Manifest number: 0D78
Signing time: Fri 18 Sep 2026 17:58:46 +0000
Manifest this update: Fri 18 Sep 2026 17:58:45 +0000
Manifest next update: Fri 25 Sep 2026 17:58:45 +0000
Files and hashes: 1: T2scW0K2HdXigZOWenDRiiKP73Y.crl (hash: gjn9BCVM+fkwSrunJ1q+oALQ+KrDdo2CfX+N4IH1VBY=)
2: 7DF47F46F95611E996377877C4F9AE02.roa (hash: WNUk8jDYPlrb/rdVyo4XTCfnmiGld7eyz2MY75cZ7HI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl
rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3458 (0xd82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174DAD, serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
Validity
Not Before: Sep 18 17:58:45 2026 GMT
Not After : Sep 25 17:58:45 2026 GMT
Subject: CN=6aad7bd6-539f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:39:57:04:e4:9c:ce:f6:e2:88:a3:d2:30:ac:
d1:83:1d:4a:8e:aa:66:80:52:47:4f:a2:2f:3d:3b:
37:19:0d:ef:7a:e2:36:5c:3b:7f:57:f5:1d:7f:f3:
5e:f3:82:f5:2b:47:bc:21:e5:a9:0b:99:ea:6e:21:
b9:57:14:2f:be:4e:6a:8d:0a:a8:c1:8d:6d:3c:58:
45:a8:4e:a1:a5:14:1a:e4:e6:6c:91:ae:b6:03:37:
d0:a9:6c:81:6b:66:80:4e:c7:19:26:9d:69:fb:b6:
ff:0a:16:3e:48:94:c8:37:34:c5:06:45:8b:07:36:
c9:1a:7b:fd:53:d7:ce:9a:d0:59:22:3c:f2:f4:8b:
0f:d6:0e:4c:2e:a9:c1:ff:85:b4:cd:bb:cf:19:9b:
f6:ab:4c:5c:9e:c0:a8:07:06:c3:58:0a:84:77:17:
2c:f9:12:a5:0b:31:97:80:28:bc:8f:5d:ca:8f:55:
f5:d7:1d:99:c8:5d:29:d9:25:95:5a:ff:14:6d:e6:
a3:2e:6f:1f:7c:19:ca:aa:e9:c3:ec:f7:8e:2f:b2:
f4:57:96:60:ef:c0:0b:ec:df:18:84:d9:c0:7f:b6:
c5:d4:ba:80:07:fe:3e:27:4b:81:c6:b4:df:c7:d8:
07:2d:ca:50:ca:20:a8:a2:a1:10:36:7b:f4:53:03:
c1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D3:61:30:B0:B1:37:FA:CA:03:34:F4:4F:38:91:60:8A:78:89:27
X509v3 Authority Key Identifier:
keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e0:d1:08:2c:6b:fa:21:53:4a:f5:3b:ab:e1:eb:b5:e4:20:4d:
61:5d:9b:8b:88:5a:0a:1d:3d:25:74:0e:20:47:bb:7e:e0:2e:
c8:9a:11:91:73:c7:f0:2a:63:9c:e3:76:5e:f7:71:e5:63:5a:
ae:b6:5c:7d:fb:a5:31:ff:4f:aa:db:6d:7a:e2:b5:c8:2e:72:
20:ea:a9:28:72:80:ed:b4:99:83:af:61:8a:85:b5:5f:ee:64:
e0:1b:22:52:66:e4:6b:18:46:41:cf:c5:a6:25:db:21:02:a3:
09:b1:6a:d2:69:a4:8b:8a:7a:a6:02:dc:97:39:06:7e:6a:db:
ea:d7:fe:ad:1f:45:a3:18:3e:80:a1:6e:11:39:b6:17:73:f1:
66:9b:17:76:b6:53:58:21:99:24:db:bd:87:4f:a2:1c:73:89:
b0:2f:ca:c8:79:76:7b:46:fc:3c:f0:fa:7d:9d:44:d1:d0:c5:
95:fe:75:c3:2b:62:44:51:f7:87:b5:e4:00:74:85:22:c5:ce:
c8:bd:1a:b1:9c:bf:7a:9f:6e:ab:fe:6f:d3:df:7a:0a:c3:6a:
10:f3:f4:20:3f:b1:ad:9a:bc:bc:bf:4f:29:fa:00:2d:14:27:
14:82:f8:1b:e5:68:60:6e:f2:23:7f:59:7b:ed:14:24:cc:02:
20:f8:43:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:14:14 2026 by rpki-client