
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
File: TfrxJZm8ip9x2mCrOSDgofQBWOU.mft (raw, json)
Hash identifier: ZcK8mVwdST8ArRgX1XNccVSeUP4UEV+SeQsdvLMj3Dg=
Subject key identifier: 51:AC:DC:BA:91:ED:06:28:D2:FB:39:C2:C1:45:2D:62:21:E5:0C:B5
Authority key identifier: 4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5
Certificate issuer: /CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5
Certificate serial: 01BE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
Manifest number: 01B6
Signing time: Sat 13 Jun 2026 04:03:07 +0000
Manifest this update: Sat 13 Jun 2026 04:03:06 +0000
Manifest next update: Sat 20 Jun 2026 04:03:06 +0000
Files and hashes: 1: TfrxJZm8ip9x2mCrOSDgofQBWOU.crl (hash: P8ux8VtlSOGK82VKYZCWGO+bEHJ0DEDx6M3iMeFpVTM=)
2: E7780BD6D17411EE87F7325DC4F9AE02.roa (hash: t9meS5jTgEh1LObut4xRNwxjugAoz6PyYRM3KILH8EU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl
rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186249, serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5
Validity
Not Before: Jun 13 04:03:06 2026 GMT
Not After : Jun 20 04:03:06 2026 GMT
Subject: CN=6a2cd67b-d50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a4:e7:f5:d8:ac:d4:e8:b3:30:9c:7a:37:e5:
e6:1d:7a:08:a4:d0:eb:91:cd:55:8d:14:90:42:26:
8f:40:7e:23:7a:ed:88:56:98:d6:02:fc:f0:11:11:
4f:03:a7:01:69:b3:50:6c:ba:a5:b8:2c:48:08:22:
93:95:25:e7:11:83:ef:04:51:40:a1:26:66:51:d2:
70:3b:ce:5e:35:a1:4e:cb:47:db:2c:79:76:1c:e4:
86:6e:99:3a:67:04:cd:77:77:91:4f:6b:77:bd:e7:
7a:92:1f:24:78:23:a8:e4:c3:97:a6:a7:25:53:1e:
cf:61:6f:12:9c:bb:85:0c:01:3b:01:8b:0b:35:4f:
c3:72:35:53:a7:e0:b3:97:43:09:c6:3a:78:25:24:
ed:48:62:76:49:cb:61:5f:fd:35:e7:f1:12:80:c8:
3d:7f:53:76:2f:e5:08:77:4f:59:35:4a:91:8e:4c:
8d:01:8b:75:36:37:13:fe:1e:f7:b1:5f:1b:96:fb:
bd:86:6c:0d:6e:6c:6e:f7:b8:5e:62:35:b3:a9:33:
5e:1b:0a:09:74:1c:1a:e3:a0:0d:c1:e7:a6:be:61:
b8:46:57:44:9c:34:26:25:3d:eb:64:54:fa:82:2f:
e7:a5:c2:88:63:4d:d5:2e:b0:c8:75:05:5c:20:18:
fc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AC:DC:BA:91:ED:06:28:D2:FB:39:C2:C1:45:2D:62:21:E5:0C:B5
X509v3 Authority Key Identifier:
keyid:4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0f:ec:f1:90:f8:99:54:2b:a6:4a:22:6c:72:64:e7:48:eb:
7a:22:43:2c:47:e5:f6:84:fe:ad:9b:62:d1:f7:d8:90:fd:93:
64:8d:56:67:54:cc:e5:60:30:10:04:a1:4c:dd:cf:dc:62:97:
9f:3b:5c:ac:5d:8c:de:e5:a3:12:d2:12:6c:6f:f6:bc:f6:76:
54:42:65:55:52:32:4b:45:3c:89:a6:a5:42:b6:7e:63:8c:05:
db:9d:f2:c0:f7:da:9e:a4:3b:9e:56:70:8f:7a:fe:44:7f:32:
ac:a4:31:22:95:2f:bf:ba:a8:96:06:8d:aa:d7:05:a4:d9:9a:
0d:78:7d:49:bc:b9:0a:36:aa:3c:5e:0b:12:ae:53:59:51:df:
5e:0d:47:16:ac:5f:7e:82:32:bb:1a:bd:77:b1:2a:de:8b:c2:
0a:b5:6d:a8:ba:ab:9f:e5:39:2d:82:6b:b5:41:11:16:7d:15:
5d:d1:ff:72:54:29:8b:e5:be:07:cc:0d:9c:6c:e3:6a:5b:08:
c6:d8:66:db:13:3e:c8:f2:73:3a:63:dc:8f:5c:d7:40:23:ff:
80:35:f3:2a:d0:70:7b:a4:3a:26:36:aa:37:58:e1:4f:6a:e4:
53:fc:08:6c:bf:c5:76:b0:9f:5d:3f:48:53:e5:23:fa:37:88:
01:81:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:29:56 2026 by rpki-client