
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
File: TiH1qoySjAtnV8A-VbClkjxOSKs.mft (raw, json)
Hash identifier: U5MZWn3e+VUnk3+bG/rCS7aVfwy3IeeB2NCz9/9qvVM=
Subject key identifier: 1D:D8:E3:90:0E:AE:E3:EA:90:A8:65:29:5F:9E:60:91:12:F7:78:E3
Authority key identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB
Certificate issuer: /CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB
Certificate serial: 021B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
Manifest number: 020F
Signing time: Wed 29 Jul 2026 04:10:06 +0000
Manifest this update: Wed 29 Jul 2026 04:10:05 +0000
Manifest next update: Wed 05 Aug 2026 04:10:05 +0000
Files and hashes: 1: TiH1qoySjAtnV8A-VbClkjxOSKs.crl (hash: MJYHKQAyLxK7FoxetvPt3KelBZf99v1rNpB5UepFHC0=)
2: E586278C29A111F0BA1F4E63C4F9AE02.roa (hash: 7O2mtkzrE7WGBGsCng9QGlpq45C/QzmD5NcTuRUtGbQ=)
3: F97DB5F229A111F090BC8163C4F9AE02.roa (hash: 1EHDhgVqidDrXRWgA6OsvGx4WrHFvoHxphKqIoJn6qI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl
rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 04:10:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180D79, serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB
Validity
Not Before: Jul 29 04:10:05 2026 GMT
Not After : Aug 5 04:10:05 2026 GMT
Subject: CN=6a697d1e-b042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:89:1b:4b:fd:46:66:25:51:fe:39:44:63:
a6:cf:69:4a:54:09:8e:05:68:d8:b9:b0:9c:be:8c:
c5:e9:0a:ab:ba:12:d8:b4:c7:6b:83:80:68:c2:c3:
55:4e:76:6e:9b:58:b9:e4:a3:7b:d4:f4:f1:3b:0b:
81:0e:0b:fe:0d:7e:28:4c:34:8d:83:cc:31:20:c4:
c2:98:44:8a:dc:fd:53:9e:30:26:84:e6:87:7b:13:
c7:fc:ee:97:63:61:8e:d1:a3:ee:f5:dd:c0:2f:27:
48:99:bf:9c:b5:e8:b9:c0:0b:f6:38:1b:9e:7b:3b:
97:7f:f7:02:db:5c:4d:58:c9:11:41:24:92:ba:5a:
cc:ec:4d:7d:11:da:de:0c:33:c3:d5:1c:8b:d0:e8:
57:24:db:85:3b:8b:ae:3f:42:e7:65:c8:37:18:a9:
b0:72:6a:19:23:cc:c2:3b:3b:07:75:bb:2a:74:9f:
2a:1c:98:dc:d8:96:a2:74:b3:5a:bb:af:68:e0:a6:
3a:18:f6:7d:ea:ad:f0:a1:79:12:2e:4a:a5:4d:85:
4a:a8:21:f8:6b:62:23:35:45:e7:42:d9:93:87:ba:
8c:88:96:ea:1b:90:fd:90:15:6a:14:61:e5:5b:54:
04:cf:5d:c6:ce:b6:b6:5d:0c:b7:e9:2b:5c:a0:b7:
7c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D8:E3:90:0E:AE:E3:EA:90:A8:65:29:5F:9E:60:91:12:F7:78:E3
X509v3 Authority Key Identifier:
keyid:4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:c8:6b:6b:63:70:c6:ec:10:03:52:a7:00:88:a1:fd:11:1e:
02:14:a4:6e:3b:a2:aa:ed:b0:75:3b:04:1f:5f:72:14:e4:84:
4d:7d:0a:18:71:2d:d2:85:69:5e:57:2b:c0:ea:7a:c2:ae:56:
d0:f9:19:8c:78:3b:79:0e:d7:b0:e4:1e:b4:43:dc:26:af:87:
3c:fa:43:e0:ba:66:18:97:7f:1b:77:f2:cd:07:f5:85:76:10:
8f:bf:11:d1:77:f6:8e:40:88:68:41:6a:4d:dc:01:cc:4b:64:
e0:b3:cf:fe:fc:9e:74:5f:2d:75:43:94:aa:bd:49:77:76:1d:
8b:4f:04:9b:30:30:21:35:4e:ee:e2:52:69:be:9a:f7:93:9b:
b5:95:94:13:8c:66:be:7e:fd:85:cb:ea:32:2e:dd:c1:49:5b:
95:35:ec:b6:da:9d:a0:55:e3:96:26:93:88:ab:15:18:dc:8b:
1b:6e:e2:7b:3f:51:ff:0e:98:99:97:64:67:1b:af:bd:91:dc:
4f:98:9a:c6:b4:ac:f4:3f:47:4f:31:c5:cd:de:ce:c1:dd:8b:
53:39:11:4a:bf:b2:46:04:51:b8:8d:b6:ae:42:6f:64:8d:dc:
a2:31:1f:21:2e:5a:f2:fa:4e:0b:91:f9:e3:5b:5e:bb:47:a0:
29:1d:4e:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODBENzkxMTAvBgNVBAUTKDRFMjFGNUFBOEM5MjhDMEI2NzU3QzAzRTU1QjBBNTky
M0M0RTQ4QUIwHhcNMjYwNzI5MDQxMDA1WhcNMjYwODA1MDQxMDA1WjAYMRYwFAYD
VQQDEw02YTY5N2QxZS1iMDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoGqJG0v9RmYlUf45RGOmz2lKVAmOBWjYubCcvozF6QqruhLYtMdrg4BowsNV
TnZum1i55KN71PTxOwuBDgv+DX4oTDSNg8wxIMTCmESK3P1TnjAmhOaHexPH/O6X
Y2GO0aPu9d3ALydImb+ctei5wAv2OBueezuXf/cC21xNWMkRQSSSulrM7E19Edre
DDPD1RyL0OhXJNuFO4uuP0LnZcg3GKmwcmoZI8zCOzsHdbsqdJ8qHJjc2JaidLNa
u69o4KY6GPZ96q3woXkSLkqlTYVKqCH4a2IjNUXnQtmTh7qMiJbqG5D9kBVqFGHl
W1QEz13Gzra2XQy36StcoLd8bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3Y45AO
ruPqkKhlKV+eYJES93jjMB8GA1UdIwQYMBaAFE4h9aqMkowLZ1fAPlWwpZI8Tkir
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEQ3OS9FMTgyMDhCQzZE
OUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pBdG5WOEEtVmJDbGtqeE9T
S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RpSDFxb3lTakF0blY4QS1WYkNsa2p4T1NLcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MEQ3OS9FMTgyMDhCQzZEOUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pB
dG5WOEEtVmJDbGtqeE9TS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABchra2NwxuwQA1KnAIih/REeAhSkbjuiqu2wdTsEH19yFOSETX0KGHEt0oVp
XlcrwOp6wq5W0PkZjHg7eQ7XsOQetEPcJq+HPPpD4LpmGJd/G3fyzQf1hXYQj78R
0Xf2jkCIaEFqTdwBzEtk4LPP/vyedF8tdUOUqr1Jd3Ydi08EmzAwITVO7uJSab6a
95ObtZWUE4xmvn79hcvqMi7dwUlblTXsttqdoFXjliaTiKsVGNyLG27iez9R/w6Y
mZdkZxuvvZHcT5iaxrSs9D9HTzHFzd7Owd2LUzkRSr+yRgRRuI22rkJvZI3cojEf
IS5a8vpOC5H541teu0egKR1Opw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:43:05 2026 by rpki-client