
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
File: tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft (raw, json)
Hash identifier: wqhzRFSERD3dIs3fthLWyOHkgUO7BNpL+vpyoyzGnH0=
Subject key identifier: 7D:C8:B2:5B:5C:BB:82:AC:C6:21:0A:72:91:3D:27:EA:81:38:C5:1E
Authority key identifier: B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C
Certificate issuer: /CN=A9160C95/serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
Certificate serial: 06D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
Manifest number: 06C6
Signing time: Fri 04 Sep 2026 22:08:17 +0000
Manifest this update: Fri 04 Sep 2026 22:08:16 +0000
Manifest next update: Fri 11 Sep 2026 22:08:16 +0000
Files and hashes: 1: tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl (hash: IjE1LZPquTnV9L0DpEHnRUVcsbGZVc7ZgARj41fMh2Q=)
2: 3C2408105CBF11ECACDFE47BC4F9AE02.roa (hash: TMOTzC8LyMJLZtdqx4wEZX0fEZReW/QgdhjNImxkGuk=)
3: B3DED5C6BAC911EB8533B615C4F9AE02.roa (hash: +nAEEuzzAHJ64g2Y+I53w9dhyFuYT2+b3syIj71QLeM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl
rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 22:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1749 (0x6d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160C95, serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
Validity
Not Before: Sep 4 22:08:16 2026 GMT
Not After : Sep 11 22:08:16 2026 GMT
Subject: CN=6a9b4150-d679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2e:f4:4e:e1:85:bd:10:af:52:f4:9b:0c:4b:
0b:ef:0c:0b:97:fe:88:2d:e8:1c:b5:b4:98:95:c0:
fe:03:e7:99:0f:2b:02:21:b8:5c:7f:16:bf:c2:1d:
ac:0c:41:39:00:a6:10:99:3e:fa:a7:ae:98:0a:1a:
68:7a:b7:b5:04:58:9a:36:2d:be:89:2c:e9:17:c5:
25:fd:7c:28:0f:73:0c:a7:11:45:ce:cf:31:7e:d8:
0e:3a:b8:78:fe:24:3d:fa:5d:20:9a:0f:56:80:5e:
76:b7:42:37:b3:d4:04:ea:5a:a7:74:3b:d4:d8:0d:
f3:bb:31:1d:a0:4b:ef:7a:dc:93:c4:45:d4:32:12:
c8:7a:37:04:d6:dd:a6:d8:ee:c9:96:0d:55:40:79:
5f:ea:2b:26:76:be:12:60:d9:0a:6c:3f:10:f3:04:
b6:06:a6:79:59:30:f4:f3:5c:c2:50:58:3a:53:e1:
02:64:8a:bc:7f:22:94:48:7e:96:6f:3b:9a:40:f3:
5a:0f:e9:01:37:17:c2:23:9f:d7:60:1c:68:04:09:
21:17:8d:84:b6:ec:88:66:a3:92:6d:0e:9c:ec:af:
44:5c:d6:99:d4:40:cf:11:08:03:2e:47:ec:a0:1e:
c3:38:28:f7:53:a6:a6:48:95:81:a6:ba:72:9b:01:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C8:B2:5B:5C:BB:82:AC:C6:21:0A:72:91:3D:27:EA:81:38:C5:1E
X509v3 Authority Key Identifier:
keyid:B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:43:c1:75:1d:37:99:b3:3c:07:36:60:05:b4:80:3d:6e:47:
6f:24:f8:e5:ec:eb:d7:41:56:7d:c2:f3:c6:b7:52:25:88:75:
b0:fc:7a:13:4f:65:bf:ca:13:db:47:02:24:59:61:0e:f5:a0:
fc:e9:73:51:37:f2:f5:67:df:bf:29:6b:50:cb:29:f0:0a:e2:
a5:07:6f:2b:47:95:6c:ac:b9:fb:48:98:df:c3:e7:93:27:89:
1b:fd:5a:e6:73:50:53:db:a0:ad:df:f8:1d:c3:4d:23:09:db:
b4:b1:a8:4f:35:da:88:ee:4a:f9:66:7f:a4:f1:2a:ee:6f:15:
e7:da:42:07:71:0a:c5:ec:3f:05:23:e7:f8:6a:ab:2f:58:cb:
e1:2b:ed:27:e9:4b:de:c7:19:a6:55:58:5d:02:41:48:45:7c:
bc:b7:e4:23:8f:eb:97:3d:d8:fa:1c:8d:f6:3f:35:32:da:25:
38:d7:ed:bb:7d:6e:f2:da:bc:24:df:6e:d9:13:f1:06:8f:a2:
ea:fe:1a:9b:12:67:f7:5f:0d:89:6c:01:0a:33:04:d8:47:62:
5f:82:ec:01:f8:c4:16:64:66:8c:f3:5e:b8:ef:54:16:ec:7c:
23:75:31:70:f0:38:8c:d5:bb:5a:09:82:15:65:b4:2e:49:d9:
6e:27:20:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:53:50 2026 by rpki-client