
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
File: TiH1qoySjAtnV8A-VbClkjxOSKs.mft (raw, json)
Hash identifier: 4xEMiHvLRYQNersCgKELGS5/vbeyADkHMxB9WWk1Uzc=
Subject key identifier: 8B:05:A1:F9:92:DC:90:E8:39:C4:04:F3:9E:BB:C0:91:08:13:E1:5C
Authority key identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB
Certificate issuer: /CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB
Certificate serial: 01E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
Manifest number: 01DC
Signing time: Fri 17 Apr 2026 03:18:24 +0000
Manifest this update: Fri 17 Apr 2026 03:18:23 +0000
Manifest next update: Fri 24 Apr 2026 03:18:23 +0000
Files and hashes: 1: TiH1qoySjAtnV8A-VbClkjxOSKs.crl (hash: QmPjmAq9KNiogXDlv2yujDBp4WDzBHuiDIbY3b3loHI=)
2: F97DB5F229A111F090BC8163C4F9AE02.roa (hash: 1EHDhgVqidDrXRWgA6OsvGx4WrHFvoHxphKqIoJn6qI=)
3: E586278C29A111F0BA1F4E63C4F9AE02.roa (hash: 7O2mtkzrE7WGBGsCng9QGlpq45C/QzmD5NcTuRUtGbQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl
rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488 (0x1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180D79, serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB
Validity
Not Before: Apr 17 03:18:23 2026 GMT
Not After : Apr 24 03:18:23 2026 GMT
Subject: CN=69e1a67f-5a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:b6:07:81:41:38:3c:2d:d3:86:e0:96:7f:
35:4e:d3:0b:5a:33:18:b2:81:02:c8:23:a1:14:98:
d2:c7:78:00:5d:44:93:3d:47:08:f1:4f:42:b5:70:
07:f8:19:8c:b7:c5:b7:f0:7a:61:9f:b4:63:96:f3:
43:53:ed:66:77:33:ba:d2:d1:fb:44:15:66:c4:a8:
31:1b:93:60:70:53:f8:d0:d1:76:e9:48:b4:ce:48:
d2:27:38:79:bc:31:b9:cd:d9:c2:79:36:50:4c:42:
71:26:35:9a:19:a9:f3:7e:ac:b2:21:d4:11:59:22:
65:8b:8d:55:1c:9d:d3:63:e4:3b:74:f9:78:7a:4f:
13:9a:30:5e:ae:eb:26:4a:60:43:c4:87:f5:b5:1d:
b8:4d:e4:c4:de:b8:8a:05:cf:6a:6d:dc:08:14:ec:
9e:b0:a3:fd:b5:22:5c:32:19:da:19:24:03:69:e1:
9b:a6:79:34:3a:89:cc:ab:d9:62:8f:df:da:39:55:
a9:a6:6e:02:bb:75:66:a7:68:c7:28:28:a9:11:94:
e8:9e:e7:d3:1b:d1:63:a7:92:30:34:9e:30:6e:48:
91:fe:cd:40:f3:56:7a:9a:d6:af:79:b5:23:b4:40:
20:f1:40:4c:33:48:a3:c3:a1:56:f3:67:c4:58:a8:
5e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:05:A1:F9:92:DC:90:E8:39:C4:04:F3:9E:BB:C0:91:08:13:E1:5C
X509v3 Authority Key Identifier:
keyid:4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2e:58:34:de:17:bd:af:18:61:d8:cb:15:ad:87:a4:f8:b1:
4c:9c:71:fb:7a:af:8d:d6:4c:14:1b:c9:0c:c6:c7:c2:28:0a:
51:de:7c:26:35:8f:2a:cf:8d:8f:32:34:3a:0a:05:eb:b9:79:
fb:b5:0f:95:d6:22:73:ca:7e:15:fc:fd:d4:bd:9a:d0:db:d0:
ca:b5:f5:68:af:70:b2:db:c8:0c:dc:a1:fd:6f:60:9a:f4:1d:
d0:51:8d:c4:ac:01:ce:1a:fa:89:6e:bb:91:1e:ee:ba:76:b4:
ea:ad:57:4a:70:aa:e4:94:62:10:aa:b7:7e:f1:23:98:f9:a1:
28:33:16:29:58:ff:e3:19:77:6c:ea:0f:1b:de:b3:bc:e4:cb:
f8:19:f2:06:6c:f7:54:fa:1e:78:4c:9e:68:82:d7:bf:27:1c:
4d:b1:d0:9c:39:98:6f:00:7d:88:e2:71:bd:52:01:c9:40:06:
87:10:5a:cf:7e:e9:a3:1c:90:c0:d7:52:da:a2:0b:43:8f:79:
10:11:23:79:e1:44:09:9f:4c:ac:e9:de:5c:00:92:90:33:8b:
d8:0c:de:40:1b:28:12:d5:8c:17:40:81:69:b2:eb:18:12:8c:
72:45:4d:16:4e:e2:8f:02:fe:e6:fc:48:10:25:64:21:d4:6d:
34:55:b9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:07:24 2026 by rpki-client