
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
File: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft (raw, json)
Hash identifier: mrrpCdABtzTrCJq2iCMlpxKJilfH8JiRJu/bi4p5Hpg=
Subject key identifier: 74:EE:D3:11:20:EB:6C:0F:95:8E:D0:FF:0A:4C:87:4A:F4:31:3F:5E
Authority key identifier: 4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
Certificate issuer: /CN=A9176C8F/serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
Certificate serial: 0192
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
Manifest number: 0189
Signing time: Mon 21 Sep 2026 04:37:35 +0000
Manifest this update: Mon 21 Sep 2026 04:37:35 +0000
Manifest next update: Mon 28 Sep 2026 04:37:35 +0000
Files and hashes: 1: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl (hash: h2pKvuln3mditpuJilZ4okBek+vc2lUjGxbXfUf6pJw=)
2: 4E9597086B5C11EFABB11F60C4F9AE02.roa (hash: KmFo8WXoDjWbWyLh/FF39LTCZs17MIBxb0+OrFi78Hs=)
3: 43749A72824E11F0A1C4B018C4F9AE02.roa (hash: KSDxonhKP2R/jFXcwFf/p6d4f1Qwk//gYks77lT8Zqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl
rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176C8F, serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
Validity
Not Before: Sep 21 04:37:35 2026 GMT
Not After : Sep 28 04:37:35 2026 GMT
Subject: CN=6ab0b48f-4cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:82:0e:36:97:2e:b0:1d:79:b5:ef:7a:9e:
8d:bf:62:27:f8:87:26:80:b1:3d:f0:75:a5:0a:69:
69:41:ec:9f:68:e1:d5:48:65:38:5d:09:f0:2e:52:
7a:c3:68:b0:3a:47:1e:fc:c7:4f:b8:a3:9a:a1:cb:
15:17:4b:47:35:92:09:80:5b:ae:be:fd:26:64:77:
2e:fb:44:58:5a:0a:1e:26:70:4e:96:80:9b:4b:de:
14:f9:61:ef:0c:44:26:6c:6e:6a:55:f7:f4:86:d3:
41:89:1d:7a:08:dc:f8:0f:85:a0:74:e3:81:62:ad:
b0:0c:c3:5d:74:64:f9:92:d3:c5:b1:04:62:0b:d9:
3b:5c:88:b5:ab:b4:1c:37:34:61:87:ec:21:de:a4:
dc:af:fc:09:7a:5b:aa:9b:59:da:bf:9f:ba:a1:fb:
4b:d2:4d:03:b8:f5:57:05:29:36:16:65:2b:d9:a1:
17:34:cc:06:4d:0e:ee:8c:54:1b:66:a7:ca:0f:77:
45:0a:a0:74:58:b0:0a:bf:ec:27:f6:05:c4:c7:18:
12:c1:a4:6f:08:b8:18:ff:2a:3c:b2:4b:46:71:fd:
f0:b3:47:88:99:fb:21:b6:7a:2b:49:55:4d:8c:be:
89:d2:ec:53:e5:ca:07:49:a0:6d:ca:ba:55:4e:51:
09:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EE:D3:11:20:EB:6C:0F:95:8E:D0:FF:0A:4C:87:4A:F4:31:3F:5E
X509v3 Authority Key Identifier:
keyid:4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:98:fe:e3:d2:b7:5b:8b:e9:b4:cc:8b:ab:3f:51:70:f0:27:
8d:13:c4:62:63:79:0c:f1:fc:76:e8:78:0f:32:3c:55:a7:1c:
df:92:e3:fc:0f:71:f7:41:61:c1:93:4c:10:a2:57:8e:3c:b4:
20:36:02:01:8a:b0:7e:60:04:f7:14:1d:fb:8e:e0:3a:b4:96:
c4:5e:67:8f:05:9a:cd:96:3a:4e:a4:a0:f3:70:65:10:e2:b4:
04:05:00:0d:56:63:03:69:9b:70:7d:40:96:0f:87:85:ef:33:
da:fc:0c:16:0a:38:ad:2e:0a:c1:90:9c:1f:ba:eb:aa:ac:db:
df:f9:03:ae:f5:1e:cb:15:51:df:2d:35:1f:ef:c5:96:18:8d:
4c:dd:91:89:75:cd:26:90:56:0a:1c:e1:fb:23:ca:00:27:09:
c0:f6:5e:99:62:e1:3e:1d:74:1c:5d:ec:58:bf:97:3a:f4:8d:
ac:3c:21:ae:50:fd:7e:8a:0b:0a:18:98:d0:47:fa:5d:48:ff:
df:86:86:77:df:e9:02:34:62:a5:4d:d7:2c:83:61:5f:d3:8a:
b5:50:1b:90:bc:d0:0f:12:75:71:61:3d:9f:80:53:fa:ed:45:
c6:3b:4b:7a:5e:6f:ed:36:5d:f2:cc:f0:2e:d8:31:b4:a2:41:
71:fa:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:25:13 2026 by rpki-client