
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft
File: tg1afDY_D02TL-MXuQzmz4DSg8k.mft (raw, json)
Hash identifier: TaOGryeykvb/sRsVAGkDdX92fvoU6peRvtDQrncAANQ=
Subject key identifier: 4F:ED:B4:91:BE:EC:15:67:E3:0D:3B:4A:89:DD:65:9F:D0:1F:54:B7
Authority key identifier: B6:0D:5A:7C:36:3F:0F:4D:93:2F:E3:17:B9:0C:E6:CF:80:D2:83:C9
Certificate issuer: /CN=A9118309/serialNumber=B60D5A7C363F0F4D932FE317B90CE6CF80D283C9
Certificate serial: 0B26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft
Manifest number: 0B19
Signing time: Fri 04 Sep 2026 19:13:46 +0000
Manifest this update: Fri 04 Sep 2026 19:13:45 +0000
Manifest next update: Fri 11 Sep 2026 19:13:45 +0000
Files and hashes: 1: tg1afDY_D02TL-MXuQzmz4DSg8k.crl (hash: vxiEvUUGFG6816q3mvYrQ9oG7roQ2jycOqvQY8Re5ro=)
2: 59AA22D06FFD11EA9160902DC4F9AE02.roa (hash: wf2N7y2gm+HMhGLmDepSkmqtdRiwq+CjqsQ72qN8FGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.crl
rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2854 (0xb26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118309, serialNumber=B60D5A7C363F0F4D932FE317B90CE6CF80D283C9
Validity
Not Before: Sep 4 19:13:45 2026 GMT
Not After : Sep 11 19:13:45 2026 GMT
Subject: CN=6a9b186a-7074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:3e:51:3c:ac:d3:4a:74:ab:92:21:e2:ba:
2a:ef:33:67:0c:ab:b7:69:d6:7c:70:84:ed:f4:0c:
68:f6:24:da:cd:52:81:98:97:91:b4:5e:2e:c4:af:
3b:8b:93:8a:45:ba:23:9a:78:e6:31:6f:82:18:17:
7c:75:81:f1:30:5f:6a:5e:5d:0d:74:13:af:d5:27:
d9:35:a0:fe:3f:f9:6a:8f:fc:29:bd:9f:e5:52:6a:
48:e1:05:7e:31:ff:24:f8:8c:08:04:14:c8:19:6c:
67:cf:8f:3f:95:31:1d:2f:82:94:f0:94:83:6e:85:
9b:8a:23:40:89:60:ea:28:d2:83:1b:a1:59:f3:e1:
87:39:7d:5f:bc:84:cd:96:95:b6:f4:0d:f8:44:c3:
37:cb:ae:af:c1:ba:a1:71:f5:ab:ab:c7:33:59:87:
44:31:e6:99:d3:81:b3:9c:3d:96:62:99:d1:c7:40:
06:ea:98:08:87:ae:ff:37:d8:6c:5f:79:3a:90:e1:
6a:08:66:28:8a:45:4b:63:73:29:d5:de:fb:45:b0:
72:af:5f:83:df:7b:c2:b5:2a:e2:9b:a4:da:02:bf:
d3:96:d6:a6:94:93:fd:f9:74:32:a3:a5:73:47:73:
0f:7d:9d:bc:a8:6d:d9:45:11:f8:86:9f:a9:a0:ee:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:ED:B4:91:BE:EC:15:67:E3:0D:3B:4A:89:DD:65:9F:D0:1F:54:B7
X509v3 Authority Key Identifier:
keyid:B6:0D:5A:7C:36:3F:0F:4D:93:2F:E3:17:B9:0C:E6:CF:80:D2:83:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:82:c2:a1:26:0b:e4:32:71:ed:68:0f:4b:7a:f6:dd:41:83:
3c:6c:08:81:6e:8f:65:cd:98:c1:ad:39:b8:3a:9a:eb:62:b9:
12:79:c0:87:0d:e7:fb:33:cd:c4:bb:1b:f0:78:b3:09:ac:bc:
a6:e3:95:ab:37:8e:62:68:fc:74:a5:06:9d:1a:78:84:0e:5d:
9a:b4:d7:21:e1:e1:8c:ec:58:a4:aa:7b:42:5e:8a:82:a3:9c:
fb:18:eb:62:9a:6f:ec:63:e3:7b:b5:34:a4:fc:e3:8e:d5:b6:
30:d8:fc:5c:57:02:3e:a2:c9:53:92:ef:dc:93:09:5d:89:49:
7c:1b:ba:43:4a:20:a4:a9:a2:4d:6c:ac:4f:38:c8:07:83:41:
2e:cb:c3:9f:44:42:1f:85:d5:03:aa:f5:73:d2:3b:7a:d5:6f:
37:93:25:17:e3:d7:39:75:84:b1:4e:1a:40:91:e3:bd:21:ef:
ac:ec:7e:df:eb:d5:b3:ef:e0:ca:82:79:d1:36:c5:41:77:11:
c7:56:fc:8e:b2:e5:52:45:b3:7a:77:cc:26:39:3e:ee:48:a2:
18:27:cc:1d:5d:a1:07:ba:35:75:8e:5c:87:a0:94:f1:8d:ba:
77:09:79:38:9d:47:0d:a9:e6:a9:77:dc:45:70:8c:77:64:2e:
72:82:c0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:22:46 2026 by rpki-client