
$ rpki-client -vvf rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
File: 0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft (raw, json)
Hash identifier: zsTmYvzpgSZpHb/vo5HmtDrPGQsXeuc4ZIIGCUY12VM=
Subject key identifier: FC:B4:97:0B:C3:3C:64:25:CC:EA:7F:70:11:42:9A:E6:C0:7B:7C:F4
Authority key identifier: D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9
Certificate issuer: /CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9
Certificate serial: 1195
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
Manifest number: 1174
Signing time: Fri 12 Jun 2026 17:10:35 +0000
Manifest this update: Fri 12 Jun 2026 17:10:34 +0000
Manifest next update: Fri 19 Jun 2026 17:10:34 +0000
Files and hashes: 1: 0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl (hash: ws5CjTsTD/GwdhVZqLEmdvnh134jCBx591RLZOXsgCY=)
2: 1ED5B13E30C111ECBB5A4116C4F9AE02.roa (hash: FMzrYGVGOtWt5cmIpjK8kf84YehxjN48qZYSg0E+H9o=)
3: 0E17B1AE78F511EC83E56014C4F9AE02.roa (hash: W4h7IWYUmM/hyejWwAL7UxMd6DDsYA0doq+8X7am/ms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl
rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4501 (0x1195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919608D, serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9
Validity
Not Before: Jun 12 17:10:34 2026 GMT
Not After : Jun 19 17:10:34 2026 GMT
Subject: CN=6a2c3d8b-a7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:2a:88:23:f1:8b:ef:2e:2d:94:ac:88:3c:
c9:d0:9e:df:e4:60:05:e2:7c:d4:05:41:c2:71:56:
41:71:99:1c:bf:91:52:8d:ae:5b:81:ff:46:aa:1c:
23:cd:e8:9a:75:3e:39:68:c7:3f:11:00:1f:2a:9f:
e6:20:1e:75:91:74:19:9d:e8:b0:4b:fa:d7:2a:67:
5a:fd:dc:e0:0e:ac:37:5b:2d:d1:53:31:e5:cf:a4:
89:96:40:7e:cf:88:88:37:55:d3:6b:ce:ae:d9:bf:
ec:6e:f9:14:de:ca:e9:f0:61:30:fe:d7:75:ba:db:
bb:45:d8:e0:79:74:1f:97:43:45:62:d0:7d:29:a7:
a8:6e:71:49:b5:a7:2a:0e:f9:7c:6a:f3:e9:25:17:
ce:3d:0b:f5:99:4b:4a:a2:59:c1:40:94:b8:d4:bf:
83:e0:a8:db:39:7e:2d:d6:36:b6:80:66:1a:69:fb:
33:96:dc:8b:dd:54:c6:f6:21:65:6a:04:4c:74:7a:
db:59:ff:24:6c:4b:83:ad:d0:f9:a2:c7:0a:3a:9b:
ee:f3:94:84:82:95:fe:bf:f4:47:0a:fd:8f:59:d5:
ce:6a:27:7e:2b:2e:ae:a2:d2:ad:8d:26:c4:43:67:
26:67:d5:e1:de:6f:31:39:03:7b:67:01:dc:f8:45:
43:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B4:97:0B:C3:3C:64:25:CC:EA:7F:70:11:42:9A:E6:C0:7B:7C:F4
X509v3 Authority Key Identifier:
keyid:D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:df:8c:fc:16:59:20:bf:f8:fb:97:4a:28:ec:f3:70:94:4f:
af:dc:19:1a:4e:e0:9b:6e:5a:80:30:3b:5c:ef:fc:0d:d3:f8:
3b:66:89:28:0a:74:84:c0:d2:69:9b:41:87:a1:1f:40:44:99:
34:9c:32:60:9c:41:61:91:cc:68:53:0d:50:06:c8:66:d0:9e:
4c:7b:b3:69:ef:33:1b:26:bf:00:f1:51:a0:88:5d:9c:ee:a4:
16:f2:ea:d2:41:46:82:42:6e:c4:a0:f5:55:15:05:09:70:a4:
46:08:8d:5e:f6:32:42:a9:91:0f:4c:34:87:69:fe:46:c5:c9:
52:70:0e:e9:b8:fa:61:dc:98:7b:ea:66:0e:8c:4b:a2:5c:08:
8b:e8:df:e0:4b:e2:26:89:27:f8:af:ca:63:6c:2c:da:c2:11:
16:11:af:1d:32:46:07:c8:47:f8:87:6b:2b:6a:0e:fb:1f:6a:
a9:f4:3d:2d:a8:d4:bd:f5:7f:29:bc:b0:b5:bc:ac:a9:44:20:
4f:df:79:30:59:34:2a:97:1e:ad:a9:05:df:31:c8:8d:43:a0:
4b:d7:e4:e2:a3:f7:45:d7:25:81:9e:5e:b7:de:81:1f:a5:a8:
13:3e:29:37:05:87:ce:54:e0:38:0a:1f:1e:87:6b:08:07:ac:
80:5a:78:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:30:51 2026 by rpki-client