
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
File: TfrxJZm8ip9x2mCrOSDgofQBWOU.mft (raw, json)
Hash identifier: i63YyWjWpEaIQk7CEQ1MqH/cCtQCeIjDrF+DGAAkJeE=
Subject key identifier: A1:8D:1F:38:97:AB:F4:4A:F4:66:26:55:74:99:BC:98:96:F5:06:86
Authority key identifier: 4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5
Certificate issuer: /CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5
Certificate serial: 01D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
Manifest number: 01CC
Signing time: Mon 27 Jul 2026 05:29:52 +0000
Manifest this update: Mon 27 Jul 2026 05:29:51 +0000
Manifest next update: Mon 03 Aug 2026 05:29:51 +0000
Files and hashes: 1: TfrxJZm8ip9x2mCrOSDgofQBWOU.crl (hash: j+DNpzqDDl8o0gMUXJ2IzdKwD5gdwMSsxbbyoMRk2AM=)
2: E7780BD6D17411EE87F7325DC4F9AE02.roa (hash: t9meS5jTgEh1LObut4xRNwxjugAoz6PyYRM3KILH8EU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl
rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186249, serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5
Validity
Not Before: Jul 27 05:29:51 2026 GMT
Not After : Aug 3 05:29:51 2026 GMT
Subject: CN=6a66ecd0-8fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:7b:5e:8e:da:76:58:85:6b:ef:5e:27:e8:
ca:61:93:16:1e:82:4b:62:82:cd:02:f4:72:9e:93:
64:a7:49:ca:39:64:4e:e2:b7:1a:1f:16:ea:74:ca:
17:75:ab:d0:40:4c:53:6d:b4:c4:e8:42:67:2b:7d:
e1:c1:61:04:d1:06:03:ef:7f:1d:c7:3b:42:53:68:
2d:83:76:45:27:49:a0:7d:20:63:72:e6:a0:7e:27:
f9:ad:37:c1:76:55:5c:73:c0:2c:72:3c:71:30:42:
6a:04:e4:db:91:87:05:df:56:8b:5c:15:bf:34:85:
39:7c:ef:b1:dd:39:87:80:c7:c2:83:e8:99:2e:95:
3f:56:e6:95:b0:b4:94:0d:17:49:9d:89:65:4d:86:
b3:f2:fe:51:c5:6c:ff:7c:50:78:6c:14:88:c1:bd:
94:43:79:8d:d0:64:f3:07:46:15:2c:db:4c:18:86:
8f:b7:05:b1:72:08:6a:7c:c9:11:c2:ce:df:04:5e:
07:26:72:0e:0d:ed:a9:2a:4a:46:84:81:4f:3c:d5:
4a:0c:56:04:87:42:d9:6b:d1:de:22:c9:88:36:c1:
c2:79:b6:33:e2:9e:17:8d:e9:01:2b:bd:df:9c:05:
7f:15:aa:43:10:ae:0d:70:d5:86:a6:73:1b:dc:c7:
4b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8D:1F:38:97:AB:F4:4A:F4:66:26:55:74:99:BC:98:96:F5:06:86
X509v3 Authority Key Identifier:
keyid:4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b8:1b:c4:6a:d9:76:b0:d1:a9:9e:83:ef:7a:99:80:63:a2:
ed:6c:6e:cb:05:85:20:4b:cf:b8:83:b5:dc:7e:23:36:e7:90:
96:41:f9:21:5e:90:97:49:28:5e:3e:66:96:91:f4:9b:70:b4:
9f:02:c3:ec:fc:75:71:61:8d:ec:41:4d:1e:4c:2b:bc:89:05:
95:b1:0c:44:2f:d3:7f:b8:0e:6d:a3:ff:53:1e:b9:6b:ca:6b:
19:bc:f0:fb:52:d5:29:91:7b:f5:1f:fc:8f:b4:bf:d5:a2:b6:
c4:a8:60:43:29:58:72:b5:83:b0:3e:ee:e9:6f:26:f0:e1:b6:
e8:7e:64:32:43:db:af:ba:07:e3:57:00:51:e3:5c:4c:aa:63:
a9:72:91:a7:84:a2:a9:d4:61:a0:d8:fd:15:67:62:08:b2:fe:
e1:33:03:63:f0:8f:96:63:63:c1:ca:d3:41:52:ba:cb:a5:38:
d2:5c:78:b2:1b:3e:1a:71:32:03:22:d1:ed:cc:25:28:61:28:
5a:8b:cd:21:08:1f:1c:f6:8f:d2:71:99:4f:75:51:94:b8:43:
23:3c:51:c8:52:9e:69:2e:cb:75:5a:66:61:b9:27:c2:e0:5b:
db:4e:19:5a:43:73:9f:9b:27:92:7a:41:79:58:6d:aa:15:b4:
64:22:45:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyNDkxMTAvBgNVBAUTKDRERkFGMTI1OTlCQzhBOUY3MURBNjBBQjM5MjBFMEEx
RjQwMTU4RTUwHhcNMjYwNzI3MDUyOTUxWhcNMjYwODAzMDUyOTUxWjAYMRYwFAYD
VQQDEw02YTY2ZWNkMC04ZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt5t7Xo7adliFa+9eJ+jKYZMWHoJLYoLNAvRynpNkp0nKOWRO4rcaHxbqdMoX
davQQExTbbTE6EJnK33hwWEE0QYD738dxztCU2gtg3ZFJ0mgfSBjcuagfif5rTfB
dlVcc8AscjxxMEJqBOTbkYcF31aLXBW/NIU5fO+x3TmHgMfCg+iZLpU/VuaVsLSU
DRdJnYllTYaz8v5RxWz/fFB4bBSIwb2UQ3mN0GTzB0YVLNtMGIaPtwWxcghqfMkR
ws7fBF4HJnIODe2pKkpGhIFPPNVKDFYEh0LZa9HeIsmINsHCebYz4p4XjekBK73f
nAV/FapDEK4NcNWGpnMb3MdL9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKGNHziX
q/RK9GYmVXSZvJiW9QaGMB8GA1UdIwQYMBaAFE368SWZvIqfcdpgqzkg4KH0AVjl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjI0OS85ODcyNkQ2RUQx
NzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlwOXgybUNyT1NEZ29mUUJX
T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RmcnhKWm04aXA5eDJtQ3JPU0Rnb2ZRQldPVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjI0OS85ODcyNkQ2RUQxNzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlw
OXgybUNyT1NEZ29mUUJXT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnLgbxGrZdrDRqZ6D73qZgGOi7WxuywWFIEvPuIO13H4jNueQlkH5IV6Ql0ko
Xj5mlpH0m3C0nwLD7Px1cWGN7EFNHkwrvIkFlbEMRC/Tf7gObaP/Ux65a8prGbzw
+1LVKZF79R/8j7S/1aK2xKhgQylYcrWDsD7u6W8m8OG26H5kMkPbr7oH41cAUeNc
TKpjqXKRp4SiqdRhoNj9FWdiCLL+4TMDY/CPlmNjwcrTQVK6y6U40lx4shs+GnEy
AyLR7cwlKGEoWovNIQgfHPaP0nGZT3VRlLhDIzxRyFKeaS7LdVpmYbknwuBb204Z
WkNzn5snknpBeVhtqhW0ZCJF6g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:41:06 2026 by rpki-client