
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft
File: tHZ0MTuUPsbL73VivRlw1ccz6ls.mft (raw, json)
Hash identifier: CJCQHTxabR6Q81sk6OCni7Km0SyW6OlNBO9orgXMGoI=
Subject key identifier: 12:1D:56:21:E8:33:8B:E8:DF:DD:C4:40:01:19:BF:26:D1:95:4D:F8
Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B
Certificate issuer: /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B
Certificate serial: 06F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft
Manifest number: 06DE
Signing time: Thu 24 Sep 2026 22:09:34 +0000
Manifest this update: Thu 24 Sep 2026 22:09:34 +0000
Manifest next update: Thu 01 Oct 2026 22:09:34 +0000
Files and hashes: 1: tHZ0MTuUPsbL73VivRlw1ccz6ls.crl (hash: lu5dmCb11BENsgLPdt19QRo6R0XtDbdYl9XeEf2reZg=)
2: 76C5842CC3DD11EDAAED714EC4F9AE02.roa (hash: AksvgR3e+xXwbDovJAdap8RK4kJv79k9mUAmkMcDM9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl
rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1783 (0x6f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183898, serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B
Validity
Not Before: Sep 24 22:09:34 2026 GMT
Not After : Oct 1 22:09:34 2026 GMT
Subject: CN=6ab59f9e-7fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:13:59:8f:93:fd:77:01:36:4f:61:8e:63:
2b:59:cb:a3:db:91:e6:f2:21:fe:c8:de:8a:f1:b8:
88:60:34:04:f3:68:a1:75:c0:42:e4:be:d2:92:f7:
b9:f2:59:0c:04:52:21:20:b8:d1:a5:fd:1d:dd:dc:
0c:17:98:16:0e:11:c0:7e:f0:cd:38:6a:21:c8:82:
bb:b6:b0:a4:45:3d:30:eb:26:58:9c:be:33:b4:1b:
ff:75:30:3d:f8:38:11:c1:77:a4:ce:4b:03:60:0f:
f1:9f:53:39:df:0f:be:36:dd:11:7c:08:4c:90:69:
48:2f:10:68:06:c0:27:8e:ca:ea:7c:47:6b:f3:09:
92:c6:a5:99:01:73:f3:2c:fa:21:50:b2:52:57:5b:
ea:c5:23:40:de:8b:54:23:d3:12:85:6f:04:25:28:
51:d3:25:a8:b8:9d:a4:cd:96:1e:a1:9c:b8:d9:b3:
63:22:31:8d:e3:33:39:bb:4f:0b:ce:d0:13:ab:d1:
cf:7f:ce:5e:56:6d:f5:ad:a5:34:93:2c:96:4a:7f:
84:ae:c4:2c:11:f2:67:77:84:a1:98:8b:b8:e7:87:
9b:ae:08:64:6e:99:f3:a2:97:5f:68:cf:1a:ac:9e:
f6:c0:e3:cc:72:ec:7e:a0:8e:3a:c8:e7:23:ec:e1:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1D:56:21:E8:33:8B:E8:DF:DD:C4:40:01:19:BF:26:D1:95:4D:F8
X509v3 Authority Key Identifier:
keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2c:86:06:95:dd:ae:32:2f:25:87:40:b5:76:f4:8e:c5:01:
d6:34:47:66:c4:54:52:de:75:02:20:69:f3:bb:35:73:ca:55:
2f:71:9a:24:8e:9d:99:9a:83:df:ec:94:e1:bf:03:38:9d:0f:
90:83:1a:21:2d:84:b6:ec:8d:76:8f:b2:1b:ee:34:43:5d:23:
c2:d6:d7:14:08:48:2e:36:0c:23:cd:63:ff:81:2d:7d:03:5e:
57:b8:54:ad:62:47:92:c6:99:a4:f7:d5:3b:eb:75:70:fb:e0:
bf:ba:15:49:68:8c:cd:db:5d:d6:c5:88:b8:61:43:ab:af:44:
58:46:2b:7f:31:69:e9:c3:9e:c3:ba:db:15:c7:67:80:a9:dd:
6d:be:05:0f:0a:64:cb:5d:03:8f:31:79:72:37:de:9e:2b:18:
c9:18:85:8e:44:37:fd:81:15:01:a1:3e:d4:60:de:09:3a:1c:
27:90:9d:fa:e3:d6:b5:ee:4c:1e:32:7a:65:ea:76:d6:c2:65:
df:bd:fd:e5:bb:08:f5:eb:78:2f:cb:4f:36:43:bc:7e:6e:34:
2f:2d:9c:81:01:b3:db:0c:c1:cb:b0:26:12:1a:99:3f:2d:83:
54:53:38:e1:e0:2e:1f:12:c0:d9:fe:4b:35:95:77:21:1e:b3:
60:0b:01:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM4OTgxMTAvBgNVBAUTKEI0NzY3NDMxM0I5NDNFQzZDQkVGNzU2MkJEMTk3MEQ1
QzczM0VBNUIwHhcNMjYwOTI0MjIwOTM0WhcNMjYxMDAxMjIwOTM0WjAYMRYwFAYD
VQQDEw02YWI1OWY5ZS03ZmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzAcTWY+T/XcBNk9hjmMrWcuj25Hm8iH+yN6K8biIYDQE82ihdcBC5L7Skve5
8lkMBFIhILjRpf0d3dwMF5gWDhHAfvDNOGohyIK7trCkRT0w6yZYnL4ztBv/dTA9
+DgRwXekzksDYA/xn1M53w++Nt0RfAhMkGlILxBoBsAnjsrqfEdr8wmSxqWZAXPz
LPohULJSV1vqxSNA3otUI9MShW8EJShR0yWouJ2kzZYeoZy42bNjIjGN4zM5u08L
ztATq9HPf85eVm31raU0kyyWSn+ErsQsEfJnd4ShmIu454ebrghkbpnzopdfaM8a
rJ72wOPMcux+oI46yOcj7OGgwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBIdViHo
M4vo393EQAEZvybRlU34MB8GA1UdIwQYMBaAFLR2dDE7lD7Gy+91Yr0ZcNXHM+pb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg5OC8yMDkxQjAxQUI4
MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBzYkw3M1ZpdlJsdzFjY3o2
bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RIWjBNVHVVUHNiTDczVml2Umx3MWNjejZscy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Mzg5OC8yMDkxQjAxQUI4MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBz
Ykw3M1ZpdlJsdzFjY3o2bHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbCyGBpXdrjIvJYdAtXb0jsUB1jRHZsRUUt51AiBp87s1c8pVL3GaJI6dmZqD
3+yU4b8DOJ0PkIMaIS2EtuyNdo+yG+40Q10jwtbXFAhILjYMI81j/4EtfQNeV7hU
rWJHksaZpPfVO+t1cPvgv7oVSWiMzdtd1sWIuGFDq69EWEYrfzFp6cOew7rbFcdn
gKndbb4FDwpky10DjzF5cjfenisYyRiFjkQ3/YEVAaE+1GDeCTocJ5Cd+uPWte5M
HjJ6Zep21sJl37395bsI9et4L8tPNkO8fm40Ly2cgQGz2wzBy7AmEhqZPy2DVFM4
4eAuHxLA2f5LNZV3IR6zYAsBnw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:42:36 2026 by rpki-client