
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
File: tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft (raw, json)
Hash identifier: yHrFwN6bHn7D+0Wb3BxXasQ3hxWy8pUObXAU7AdZt4w=
Subject key identifier: 5E:53:67:A8:55:62:F0:0F:96:1F:01:29:F9:01:03:84:28:08:69:15
Authority key identifier: B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F
Certificate issuer: /CN=A9131181/serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
Manifest number: F7
Signing time: Fri 17 Jul 2026 07:31:17 +0000
Manifest this update: Fri 17 Jul 2026 07:31:17 +0000
Manifest next update: Fri 24 Jul 2026 07:31:17 +0000
Files and hashes: 1: tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl (hash: isjR9x8x0GSqoJUPKkj83bX5O+1C24Q55+wbnKm2q3U=)
2: AD57493E0B7B11F09EB3322EC4F9AE02.roa (hash: kJueAKUE3Sd3o6wDYoPNiGbGdW9zWY3YeQpVU6pBXdw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl
rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131181, serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F
Validity
Not Before: Jul 17 07:31:17 2026 GMT
Not After : Jul 24 07:31:17 2026 GMT
Subject: CN=6a59da45-5d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:31:eb:d4:99:2a:03:31:fd:06:2b:6e:0e:
a7:82:08:4d:55:e5:41:c1:7c:4d:5d:73:87:ce:87:
02:3f:32:79:80:43:45:07:dd:c1:39:49:2b:4a:e0:
c7:23:7a:f6:ef:60:8b:b8:d9:c6:47:00:4f:c1:ba:
b8:92:6f:0d:1b:1f:27:56:af:6a:a3:a8:51:79:77:
8c:67:db:f1:6e:22:b3:1f:f6:7a:5b:18:84:3c:17:
bd:d3:c3:ef:ab:33:bf:fa:3f:92:e1:f1:54:7e:c2:
34:d8:8a:4a:79:e4:83:c8:f4:0c:bc:dc:87:45:c9:
5f:c6:80:75:fe:82:cf:44:fd:2c:7d:97:be:7c:fe:
31:94:b4:52:0f:11:3d:af:37:e6:29:89:0e:43:6f:
d9:a2:1c:ee:85:d1:30:39:c6:30:47:cf:13:08:ed:
d2:0e:67:08:b5:30:48:bc:06:83:6f:dc:05:f9:29:
b7:23:00:a3:5d:4b:b3:94:17:01:e2:6b:38:a6:8c:
11:89:36:b8:ef:74:61:50:84:b2:46:c4:99:de:92:
73:13:cb:98:da:31:18:20:b3:a2:84:c7:34:69:3b:
44:af:27:db:65:68:67:46:38:3a:37:33:7b:f1:db:
fc:48:5b:47:8a:ae:9b:d9:37:62:f8:5f:6b:04:87:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:53:67:A8:55:62:F0:0F:96:1F:01:29:F9:01:03:84:28:08:69:15
X509v3 Authority Key Identifier:
keyid:B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:9c:59:26:af:0d:b9:46:bd:79:d5:e8:b0:de:ce:00:fb:1a:
d6:5e:62:fb:a2:33:a0:b9:a3:0e:d3:be:b5:88:15:33:44:61:
91:d9:11:d0:f1:a2:4c:37:d5:13:bb:b8:3b:bc:62:8e:8c:61:
d2:b9:fe:2a:1c:1d:50:85:99:45:7f:86:b9:a1:6f:2c:06:73:
d0:0e:48:47:5e:17:43:72:34:86:75:0c:0a:dd:51:cd:89:27:
6c:eb:86:c9:49:1f:bd:e5:39:b4:b8:0f:ca:bf:ff:ab:80:2d:
26:81:de:6e:d1:f3:f8:7c:04:0a:72:24:c9:42:e2:bf:aa:31:
0b:a4:a8:d2:b0:b9:0e:df:4b:48:d1:20:25:34:72:3e:c5:2e:
5f:a8:99:89:93:bc:9a:6c:f1:d1:03:53:29:c1:eb:70:c1:3d:
67:8a:63:92:49:32:8d:98:5e:13:2f:b8:ce:3d:60:0b:02:96:
84:07:f6:4e:f6:d7:9e:dd:aa:ca:ec:b7:18:78:9c:b2:a8:bb:
26:f8:03:e5:c3:50:89:66:6c:26:9a:99:2b:53:0c:8d:4a:a2:
e8:ca:da:92:03:75:07:6d:88:d7:86:9b:61:32:74:31:f2:6a:
bd:e6:14:2f:e3:f2:76:d3:03:48:6c:0a:ad:b5:2c:ff:4e:53:
c8:26:49:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:58 2026 by rpki-client