
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
File: TG0zuIPIM699cikDd67c0LWjzdA.mft (raw, json)
Hash identifier: 2vtcz8hQgwV/E10hWckzkxXbvVDTAEcf+2LBL1g64Lw=
Subject key identifier: 5C:E3:37:D4:C7:4D:E5:BE:9B:E7:C5:B0:6A:2A:D6:18:5F:6A:B8:0A
Authority key identifier: 4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0
Certificate issuer: /CN=A9132C14/serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0
Certificate serial: 0629
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
Manifest number: 061C
Signing time: Sun 26 Jul 2026 23:39:21 +0000
Manifest this update: Sun 26 Jul 2026 23:39:21 +0000
Manifest next update: Sun 02 Aug 2026 23:39:21 +0000
Files and hashes: 1: TG0zuIPIM699cikDd67c0LWjzdA.crl (hash: 9smAEn7IgElA+2dGwuaHCyOKOcAKY1i3RkV34SQtMrA=)
2: 46AF15AA9F6D11F09AF30234C4F9AE02.roa (hash: uOsTr6xLzZigtsgRTxsxpHDvdiof2oAZhPNX4njsoJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl
rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1577 (0x629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132C14, serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0
Validity
Not Before: Jul 26 23:39:21 2026 GMT
Not After : Aug 2 23:39:21 2026 GMT
Subject: CN=6a669aa9-bc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:ee:c8:17:62:7d:7f:11:80:2f:4e:e2:37:
dc:69:c6:31:cf:a6:47:bc:7c:8c:c4:97:79:bc:1f:
09:04:a4:06:e7:17:8a:32:4b:1b:16:07:12:fa:04:
2a:c3:1e:94:db:3c:0b:4f:9b:3d:82:fc:cd:fa:75:
94:ae:56:25:b0:03:74:d7:00:3c:c9:c8:90:db:cf:
32:aa:d6:8d:a3:1f:a7:7e:d7:2a:5d:93:05:0f:02:
56:3e:6d:08:47:4a:8d:de:0b:20:fa:eb:c8:9d:90:
7a:73:a5:e9:f2:ba:aa:27:12:c8:6a:2c:51:a3:d2:
dd:15:2a:49:11:97:82:e5:0a:2f:98:01:92:7b:e1:
59:0d:4e:f1:14:eb:cb:e0:e3:ad:7d:c2:b4:c0:48:
6b:0b:7d:b9:08:15:01:8f:54:0e:80:76:fe:15:d2:
5c:40:a6:57:51:2d:10:b1:84:30:51:e1:4f:34:3b:
bc:8f:6d:05:51:3f:76:6b:b6:9e:85:c3:9c:98:85:
63:9e:5f:88:26:1a:26:ef:3d:bf:ef:35:e7:d3:07:
ce:1a:91:7e:c2:bc:2e:ad:90:6d:09:c5:4f:bb:fe:
72:91:78:85:2f:45:9a:a6:3f:fe:df:d3:10:f5:65:
df:4f:c5:48:cd:5e:83:57:1e:6e:ff:49:8c:d2:7c:
55:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E3:37:D4:C7:4D:E5:BE:9B:E7:C5:B0:6A:2A:D6:18:5F:6A:B8:0A
X509v3 Authority Key Identifier:
keyid:4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e8:b9:18:e4:5e:e1:f8:e2:13:0d:c1:9b:40:52:e8:09:79:
32:71:26:a6:b0:35:94:d6:41:34:41:a4:68:d2:16:2c:16:5f:
b0:77:8d:47:de:50:73:74:6f:c3:19:2f:75:de:d9:47:58:f2:
5a:40:32:32:3d:24:50:46:22:29:c6:e1:d7:7e:0b:f4:2d:bd:
af:96:6b:e9:27:2f:8a:92:4e:4e:d6:8c:7e:03:2f:58:16:67:
e8:79:46:8f:09:23:a0:a7:ad:88:31:7e:4c:93:b4:a9:cf:3c:
a0:51:09:51:5e:89:6e:7d:b9:98:74:cb:7c:e2:2b:76:6e:55:
79:6d:21:bd:1f:24:9f:42:5f:92:c4:b9:e8:36:4e:f0:24:3b:
d6:23:0e:6e:ff:45:b2:84:20:66:35:cd:a8:2c:9e:b8:d4:3a:
6a:8b:d7:67:69:6d:51:f4:79:ba:f5:b8:aa:75:e1:c7:cd:6b:
db:0c:6e:93:0a:6c:bf:38:19:8c:3f:7a:53:b3:de:db:9d:5b:
5a:40:da:40:15:07:28:21:7d:d4:d7:54:43:ad:0e:36:74:ec:
a5:95:f7:54:07:42:ae:3f:b4:a5:7f:58:0a:30:fb:c3:e1:30:
dd:92:2d:ac:0e:a4:bd:d0:eb:36:c9:1a:7c:db:ba:31:39:af:
74:f0:93:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJDMTQxMTAvBgNVBAUTKDRDNkQzM0I4ODNDODMzQUY3RDcyMjkwMzc3QUVEQ0Qw
QjVBM0NERDAwHhcNMjYwNzI2MjMzOTIxWhcNMjYwODAyMjMzOTIxWjAYMRYwFAYD
VQQDEw02YTY2OWFhOS1iYzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt/ruyBdifX8RgC9O4jfcacYxz6ZHvHyMxJd5vB8JBKQG5xeKMksbFgcS+gQq
wx6U2zwLT5s9gvzN+nWUrlYlsAN01wA8yciQ288yqtaNox+nftcqXZMFDwJWPm0I
R0qN3gsg+uvInZB6c6Xp8rqqJxLIaixRo9LdFSpJEZeC5QovmAGSe+FZDU7xFOvL
4OOtfcK0wEhrC325CBUBj1QOgHb+FdJcQKZXUS0QsYQwUeFPNDu8j20FUT92a7ae
hcOcmIVjnl+IJhom7z2/7zXn0wfOGpF+wrwurZBtCcVPu/5ykXiFL0Wapj/+39MQ
9WXfT8VIzV6DVx5u/0mM0nxVkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFzjN9TH
TeW+m+fFsGoq1hhfargKMB8GA1UdIwQYMBaAFExtM7iDyDOvfXIpA3eu3NC1o83Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMxNC8yMkRBRUNDOEY0
N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02OTljaWtEZDY3YzBMV2p6
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RHMHp1SVBJTTY5OWNpa0RkNjdjMExXanpkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkMxNC8yMkRBRUNDOEY0N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02
OTljaWtEZDY3YzBMV2p6ZEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsOi5GORe4fjiEw3Bm0BS6Al5MnEmprA1lNZBNEGkaNIWLBZfsHeNR95Qc3Rv
wxkvdd7ZR1jyWkAyMj0kUEYiKcbh134L9C29r5Zr6ScvipJOTtaMfgMvWBZn6HlG
jwkjoKetiDF+TJO0qc88oFEJUV6Jbn25mHTLfOIrdm5VeW0hvR8kn0JfksS56DZO
8CQ71iMObv9FsoQgZjXNqCyeuNQ6aovXZ2ltUfR5uvW4qnXhx81r2wxukwpsvzgZ
jD96U7Pe251bWkDaQBUHKCF91NdUQ60ONnTspZX3VAdCrj+0pX9YCjD7w+Ew3ZIt
rA6kvdDrNskafNu6MTmvdPCTfQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:49:15 2026 by rpki-client