
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft
File: tGgNFzsLuF80uLi77cMmOXlY2O4.mft (raw, json)
Hash identifier: G2JV8RXBG/kvLOAYTlQP96yNA3UEfwFr6YuBteMZPyg=
Subject key identifier: FF:11:CA:19:D3:4A:46:8D:4C:DA:78:DE:E8:28:33:A0:0D:97:8C:B7
Authority key identifier: B4:68:0D:17:3B:0B:B8:5F:34:B8:B8:BB:ED:C3:26:39:79:58:D8:EE
Certificate issuer: /CN=A913F474/serialNumber=B4680D173B0BB85F34B8B8BBEDC326397958D8EE
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGgNFzsLuF80uLi77cMmOXlY2O4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft
Manifest number: A4
Signing time: Thu 03 Sep 2026 07:25:31 +0000
Manifest this update: Thu 03 Sep 2026 07:25:31 +0000
Manifest next update: Thu 10 Sep 2026 07:25:31 +0000
Files and hashes: 1: tGgNFzsLuF80uLi77cMmOXlY2O4.crl (hash: fiYQsGugq0CjHbPphnaTgKzxvdj2sKfGq78rprkjuhc=)
2: F265F888AE6C11F0B33E1454C4F9AE02.roa (hash: ivFBlHevdOFVbW9nrBvKz99BRl68lGOgg9a7LXkf38s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.crl
rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGgNFzsLuF80uLi77cMmOXlY2O4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 07:25:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F474, serialNumber=B4680D173B0BB85F34B8B8BBEDC326397958D8EE
Validity
Not Before: Sep 3 07:25:31 2026 GMT
Not After : Sep 10 07:25:31 2026 GMT
Subject: CN=6a9920eb-03d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:2a:28:33:dc:07:07:b3:4a:e5:4a:8a:9c:
96:4b:9f:3a:38:41:7c:ab:3d:99:9f:63:c4:67:74:
b9:a0:d6:e4:48:82:9c:20:d6:fa:cd:b7:35:fc:dc:
5d:96:a1:fe:f4:a5:31:94:20:27:0a:6f:57:1e:78:
9e:f2:a9:fd:b7:3c:69:2b:13:14:3c:36:0e:1e:2d:
55:b3:3e:c2:36:f7:5f:df:84:5b:10:62:e6:28:5c:
c7:00:a8:da:ee:6e:91:1a:67:a5:4f:02:f6:55:3a:
e4:d4:de:fc:dc:29:50:21:56:ef:ee:d1:67:b7:6d:
31:ab:5e:14:e8:eb:09:13:4c:1f:d2:04:f2:66:0c:
f6:51:19:cb:dc:64:df:6b:87:be:fc:6a:9b:d6:3f:
87:26:b7:ac:39:71:94:e1:4d:ea:0b:55:4f:c8:63:
ab:96:6f:10:06:83:30:78:84:3d:2c:58:a9:7d:17:
92:56:68:e2:a4:a2:47:31:67:d0:7d:e9:84:0f:93:
81:16:e1:a3:10:9d:1f:88:a6:1b:b0:38:e0:61:fc:
d4:b5:0c:b3:aa:08:78:9c:18:c0:26:d2:08:b3:8c:
4f:c6:0c:ce:10:db:bb:f8:aa:39:7a:36:6f:c9:e9:
02:c9:3f:91:b4:9c:7e:e4:7b:2d:88:8c:28:f2:8a:
8a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:11:CA:19:D3:4A:46:8D:4C:DA:78:DE:E8:28:33:A0:0D:97:8C:B7
X509v3 Authority Key Identifier:
keyid:B4:68:0D:17:3B:0B:B8:5F:34:B8:B8:BB:ED:C3:26:39:79:58:D8:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGgNFzsLuF80uLi77cMmOXlY2O4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:da:3a:7d:d2:9d:b0:22:75:17:3b:13:2c:22:fe:c7:76:47:
ce:73:9a:45:f3:7d:65:b2:3a:9c:de:1f:2e:2f:72:b8:87:11:
a8:95:30:27:18:1b:19:b2:4e:94:1e:5b:76:d2:c8:81:39:7f:
29:59:f3:59:a8:19:ce:b6:18:72:af:5b:e4:85:24:3e:2a:89:
c2:a0:4e:79:8c:37:2a:b6:b5:34:ea:68:cd:45:98:70:58:02:
83:35:96:a8:e3:75:13:82:63:e2:0d:48:af:28:97:ef:d7:23:
87:09:50:74:56:bb:b8:f5:05:f6:95:8b:d9:50:c4:3f:17:ea:
58:ce:83:6f:db:45:a9:50:18:9c:9c:32:82:30:a1:9c:1d:36:
83:cb:b6:56:7e:55:9e:b6:26:f9:b5:3d:9e:a9:88:14:1c:fb:
2c:17:f3:4f:e6:8b:cd:46:16:9c:56:ad:d8:1c:e2:89:30:6b:
37:b1:7a:10:ba:56:8c:63:da:f0:44:a1:bc:47:bf:81:46:78:
7f:68:1f:33:41:26:03:5a:53:5e:51:08:35:9c:ef:40:7f:90:
a0:f1:79:41:8f:eb:b0:4a:fa:a0:c8:f4:54:94:ce:ba:67:ca:
5d:8f:55:4f:15:17:4d:a9:13:9d:9e:0b:f7:89:95:cb:a7:72:
eb:20:a0:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Y0NzQxMTAvBgNVBAUTKEI0NjgwRDE3M0IwQkI4NUYzNEI4QjhCQkVEQzMyNjM5
Nzk1OEQ4RUUwHhcNMjYwOTAzMDcyNTMxWhcNMjYwOTEwMDcyNTMxWjAYMRYwFAYD
VQQDEw02YTk5MjBlYi0wM2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsfsqKDPcBwezSuVKipyWS586OEF8qz2Zn2PEZ3S5oNbkSIKcINb6zbc1/Nxd
lqH+9KUxlCAnCm9XHnie8qn9tzxpKxMUPDYOHi1Vsz7CNvdf34RbEGLmKFzHAKja
7m6RGmelTwL2VTrk1N783ClQIVbv7tFnt20xq14U6OsJE0wf0gTyZgz2URnL3GTf
a4e+/Gqb1j+HJresOXGU4U3qC1VPyGOrlm8QBoMweIQ9LFipfReSVmjipKJHMWfQ
femED5OBFuGjEJ0fiKYbsDjgYfzUtQyzqgh4nBjAJtIIs4xPxgzOENu7+Ko5ejZv
yekCyT+RtJx+5HstiIwo8oqK6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP8RyhnT
SkaNTNp43ugoM6ANl4y3MB8GA1UdIwQYMBaAFLRoDRc7C7hfNLi4u+3DJjl5WNju
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjQ3NC8xM0Q2QjRGRUFF
NkMxMUYwODc5NEJCNTJDNEY5QUUwMi90R2dORnpzTHVGODB1TGk3N2NNbU9YbFky
TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RHZ05GenNMdUY4MHVMaTc3Y01tT1hsWTJPNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjQ3NC8xM0Q2QjRGRUFFNkMxMUYwODc5NEJCNTJDNEY5QUUwMi90R2dORnpzTHVG
ODB1TGk3N2NNbU9YbFkyTzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW9o6fdKdsCJ1FzsTLCL+x3ZHznOaRfN9ZbI6nN4fLi9yuIcRqJUwJxgbGbJO
lB5bdtLIgTl/KVnzWagZzrYYcq9b5IUkPiqJwqBOeYw3Kra1NOpozUWYcFgCgzWW
qON1E4Jj4g1IryiX79cjhwlQdFa7uPUF9pWL2VDEPxfqWM6Db9tFqVAYnJwygjCh
nB02g8u2Vn5VnrYm+bU9nqmIFBz7LBfzT+aLzUYWnFat2BziiTBrN7F6ELpWjGPa
8EShvEe/gUZ4f2gfM0EmA1pTXlEINZzvQH+QoPF5QY/rsEr6oMj0VJTOumfKXY9V
TxUXTakTnZ4L94mVy6dy6yCgJw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 05:18:44 2026 by rpki-client