
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft
File: TonyDOHR4q7I1gVlBTEwvWB9W_0.mft (raw, json)
Hash identifier: mS020gd1nVIx3AYjy8O3u4nfFdwDEYsSBIRxPshb3R0=
Subject key identifier: BB:D9:B3:81:A6:B4:4D:5C:F1:BE:AC:CA:79:32:C5:EA:09:22:75:AB
Authority key identifier: 4E:89:F2:0C:E1:D1:E2:AE:C8:D6:05:65:05:31:30:BD:60:7D:5B:FD
Certificate issuer: /CN=A912465F/serialNumber=4E89F20CE1D1E2AEC8D60565053130BD607D5BFD
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft
Manifest number: 6F
Signing time: Thu 03 Sep 2026 08:12:24 +0000
Manifest this update: Thu 03 Sep 2026 08:12:23 +0000
Manifest next update: Thu 10 Sep 2026 08:12:23 +0000
Files and hashes: 1: TonyDOHR4q7I1gVlBTEwvWB9W_0.crl (hash: +feaDA2SiUT/xWFCC1eVT5AtzUcx2qjWqt1WgLps8x8=)
2: 78CCC796100411F190DA552F0F3D8C67.roa (hash: 9ijSIQLwt2Gy2XEyUcUffnJwapZcaQTrQntZZWP4Uss=)
3: A885DC48100411F1A3563A300F3D8C67.roa (hash: tF3ywN7eYQwZg7AMUnYYT38GsrrKw6HcmRM3Hqi+nbg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.crl
rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912465F, serialNumber=4E89F20CE1D1E2AEC8D60565053130BD607D5BFD
Validity
Not Before: Sep 3 08:12:23 2026 GMT
Not After : Sep 10 08:12:23 2026 GMT
Subject: CN=6a992be8-70b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:dc:4c:7e:57:3f:f2:d8:ce:31:b4:59:1f:
3d:64:9f:ab:0a:ba:32:50:a9:49:21:b6:64:f8:b2:
ff:b7:d5:bc:db:7f:91:ad:1d:79:33:88:73:32:3b:
21:00:13:e8:42:e2:be:3b:b6:08:70:dd:67:e1:9b:
f7:69:33:d9:0b:46:10:95:3e:ea:4e:d7:35:6e:ee:
49:65:c2:fc:a7:16:24:0a:b3:c7:4a:c0:33:cf:d8:
83:a9:f7:ee:d8:74:96:0a:bd:c9:87:16:ab:d4:1d:
53:8d:ff:36:67:db:bb:cb:c6:c2:56:9a:d0:78:d6:
36:7a:b0:99:29:18:0e:3e:9c:91:ad:ed:33:32:bf:
32:4d:13:54:70:7b:58:58:92:06:5a:33:8f:93:e8:
7c:5c:d4:24:bc:fd:e9:0a:31:1a:f1:33:8b:ef:d0:
c9:84:03:e5:01:b8:5e:24:24:5b:30:74:58:4c:93:
37:de:3b:95:39:ef:87:b5:a4:f4:c4:23:83:01:cb:
2b:e5:c9:1e:16:78:6e:72:13:e8:9f:7c:e8:70:39:
f0:8d:48:58:cb:2b:c8:cb:a1:5d:0a:e5:20:3b:92:
dc:b7:5e:24:dc:cd:07:df:6d:32:cb:00:c5:c3:71:
db:61:68:fc:0e:f3:1d:43:c9:8d:19:39:17:f2:23:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D9:B3:81:A6:B4:4D:5C:F1:BE:AC:CA:79:32:C5:EA:09:22:75:AB
X509v3 Authority Key Identifier:
keyid:4E:89:F2:0C:E1:D1:E2:AE:C8:D6:05:65:05:31:30:BD:60:7D:5B:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0a:ac:42:80:88:79:61:f3:89:38:05:47:52:41:ff:01:b0:
fd:d3:20:89:45:3e:47:2e:b5:a0:54:92:f1:73:39:bd:87:b5:
e8:5d:6d:a3:65:7d:49:11:89:ae:ea:72:08:c6:f9:16:56:f1:
ed:34:b1:8f:77:7b:20:11:9a:b1:25:71:58:85:6e:e6:3c:7e:
b0:97:12:38:80:9d:22:1d:43:96:c1:08:1b:06:84:7b:0f:86:
dc:17:84:ad:15:bf:6f:40:ce:eb:46:9c:a0:89:58:0e:ff:5f:
69:71:79:85:08:51:db:20:22:10:c6:7f:95:e1:da:93:ed:19:
ac:cc:4b:1f:3e:55:cd:c3:07:7f:a2:f8:8d:d0:e8:49:2d:ca:
60:9b:bb:d5:98:8c:f5:a2:9d:2f:49:0c:f7:84:5c:65:41:37:
24:e3:b3:58:b4:00:fa:53:e0:b1:37:10:e1:53:e1:a3:ea:24:
36:fa:5c:7c:3b:05:73:02:d6:ae:1b:c4:a0:98:74:01:a3:01:
3b:45:2b:61:81:9d:30:08:33:de:2d:b4:62:d5:b0:37:a0:d9:
11:60:4c:16:61:7f:29:8d:9e:be:19:37:e8:be:a1:1e:da:85:
3b:ef:b6:2f:80:f5:25:0f:92:3d:3a:ad:42:a6:81:45:f7:19:
10:2d:a2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:46:26 2026 by rpki-client