
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
File: tIPaBfgQj61WuWetrdJRxslpwlI.mft (raw, json)
Hash identifier: +7chA2T+5fyKlD135iabsinEde/ss1z802xzsMuVJS8=
Subject key identifier: 7B:2E:3E:66:D5:D5:55:D5:A5:36:4B:BF:49:E1:6A:31:D3:F6:31:03
Authority key identifier: B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52
Certificate issuer: /CN=A91178F4/serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252
Certificate serial: 0277
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
Manifest number: 0276
Signing time: Fri 04 Sep 2026 18:31:24 +0000
Manifest this update: Fri 04 Sep 2026 18:31:24 +0000
Manifest next update: Fri 11 Sep 2026 18:31:24 +0000
Files and hashes: 1: tIPaBfgQj61WuWetrdJRxslpwlI.crl (hash: GUAgC9MJZ827hEV37A38amWkFcd4AfIsV+MaQXtxm1w=)
2: DD40AF5AA77E11F1AC50A9373F11F970.roa (hash: 6Uowsef2jJ1DQ1gBAp/T7MapE+BFd720LL4HH47jr0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl
rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 18:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 631 (0x277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91178F4, serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252
Validity
Not Before: Sep 4 18:31:24 2026 GMT
Not After : Sep 11 18:31:24 2026 GMT
Subject: CN=6a9b0e7c-5d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:23:e2:34:19:bf:f1:8f:87:8c:ed:be:ac:
d3:5b:9a:ac:bb:62:ee:c5:20:09:0d:f8:1a:b9:c3:
15:49:e1:a4:f8:35:a7:d1:65:8c:99:9e:01:c8:f4:
c0:a7:2c:6f:a5:ba:f9:4f:1c:78:04:27:18:15:99:
d4:d2:f6:cd:12:31:99:9a:2d:00:c3:a6:eb:8e:44:
37:d0:71:b8:a3:0b:95:de:fb:e0:ee:61:4c:2b:fe:
f5:ed:9a:dd:f7:b6:de:c1:ce:82:c9:01:53:a8:64:
73:6b:e3:93:30:14:1e:b2:7a:eb:61:a4:38:3b:af:
b0:8e:7d:0d:87:e5:69:59:d7:11:b6:f0:8a:44:87:
0a:c4:fd:1d:d8:2b:74:29:22:dc:ac:5a:cc:5b:9c:
d2:a3:5d:4d:ef:c1:36:6a:ac:b4:67:e2:72:7a:0d:
9c:02:cc:bb:ea:9c:00:77:4b:e1:aa:25:fd:fc:7e:
cf:96:ef:5a:4a:99:35:29:b6:1f:87:3e:3d:14:c8:
ea:62:32:06:fe:e5:8b:5b:03:07:04:58:43:bb:27:
dc:1b:4e:70:d8:88:3a:96:80:c0:13:4e:bc:de:6a:
de:4d:54:b3:d2:31:64:8c:b0:80:66:cd:1b:79:e2:
10:e0:df:18:7e:9a:0e:46:ab:62:51:d4:af:ee:1f:
95:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2E:3E:66:D5:D5:55:D5:A5:36:4B:BF:49:E1:6A:31:D3:F6:31:03
X509v3 Authority Key Identifier:
keyid:B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:80:aa:80:d3:26:30:b2:f0:5b:df:6c:a6:f2:be:78:86:c9:
cd:a0:ce:3b:9e:3b:60:8c:c4:fa:0b:b0:57:c3:5e:48:e6:b3:
20:a2:d5:36:f2:72:43:e9:68:ca:92:2f:db:88:a7:08:58:cd:
6c:10:ec:41:73:a0:2b:c6:2e:a3:38:df:2c:03:ce:70:6f:b2:
3d:f6:7e:c6:fa:d3:f2:81:d7:31:24:29:b2:1f:e6:6c:78:b0:
b9:ca:51:80:d5:10:07:88:51:d1:d0:8c:78:96:5f:50:c2:45:
55:61:cf:54:2e:10:ec:fd:a3:28:61:3c:e3:b4:3e:e4:7a:45:
62:eb:20:58:0d:8e:67:5b:b7:72:6d:c9:b9:98:23:c7:f9:ad:
46:3a:28:69:b2:6e:88:da:4a:bc:8e:48:64:33:e4:ee:c1:88:
9f:9d:32:ca:4c:7f:4c:67:20:c6:11:a0:8d:4b:2f:32:14:cc:
03:9a:46:06:ca:ef:3e:19:24:f2:43:26:0c:14:d6:7d:b5:e8:
3c:a0:7d:ee:a7:9a:78:7a:60:aa:a3:b1:3c:25:49:02:90:02:
32:9d:71:48:5a:ec:0b:3f:b0:4c:d8:56:f0:8d:9d:dc:ab:13:
10:f9:ef:19:b4:c7:49:02:68:ca:21:6a:f8:fc:41:55:bd:88:
17:c8:17:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 15:39:55 2026 by rpki-client