
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
File: tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft (raw, json)
Hash identifier: EhV5BNPQXpSVbZcw6JkSa0N2z5gyQsvkZQ0mQHd73tI=
Subject key identifier: FD:86:38:75:AA:E2:B8:58:B3:C8:E5:88:FB:66:8B:84:3E:2B:DE:4C
Authority key identifier: B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD
Certificate issuer: /CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
Manifest number: 051C
Signing time: Wed 09 Sep 2026 01:07:23 +0000
Manifest this update: Wed 09 Sep 2026 01:07:22 +0000
Manifest next update: Wed 16 Sep 2026 01:07:22 +0000
Files and hashes: 1: tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl (hash: j6njz/cqTUR0lQUrEBc14OxjXrEyBVpgjIf3KY0+3e4=)
2: FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa (hash: vheM5uAeinqDGQFeaGFPdqZpD7OIlMbyVmkXjE8fDNc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl
rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 01:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150CF3, serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD
Validity
Not Before: Sep 9 01:07:22 2026 GMT
Not After : Sep 16 01:07:22 2026 GMT
Subject: CN=6aa0b14b-d32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bd:96:2d:d8:36:a6:d6:26:a5:67:b5:c8:a7:
99:ec:70:0f:bd:b3:91:6e:87:57:f2:ff:ec:80:3a:
68:32:f4:be:2c:79:a9:69:df:c0:78:b7:e8:b1:67:
74:b7:b4:c7:2d:c5:23:cc:41:20:bc:09:dd:47:46:
89:de:b3:22:e5:89:18:8e:26:8d:de:0b:f2:48:5f:
99:3b:7c:f6:7c:7b:e4:6a:f9:a9:d4:ee:65:b0:4f:
64:21:98:53:04:0f:27:d2:6f:91:6e:a5:cd:d6:e4:
07:6f:77:40:45:fb:c6:73:93:80:18:d6:fe:e8:4d:
5f:ea:f4:6f:ee:1c:c9:21:2b:28:bf:4b:3c:08:d1:
c0:56:bf:25:c1:6a:15:7c:90:56:31:ce:59:84:d0:
29:ef:72:e7:d3:d9:6f:38:6e:51:44:5c:56:4d:d2:
d2:0f:77:21:76:7d:72:01:d6:fe:ed:e7:50:cd:46:
a7:ca:cc:5b:b9:84:1f:8d:bb:38:83:0c:1d:9d:ad:
0a:44:b7:e7:8b:e7:3e:ec:13:e0:1f:c8:8d:59:18:
6d:6c:b6:e4:95:58:c5:50:55:88:60:71:a1:05:4c:
71:c6:7e:93:a8:c7:0f:cb:2c:59:70:96:de:a7:cf:
ce:93:5c:db:b4:94:71:a0:a9:5d:4f:01:7b:ae:73:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:86:38:75:AA:E2:B8:58:B3:C8:E5:88:FB:66:8B:84:3E:2B:DE:4C
X509v3 Authority Key Identifier:
keyid:B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:60:02:5a:f4:a5:05:2f:fd:3b:94:d5:87:09:6b:c4:53:f6:
06:23:05:11:d7:88:f2:cf:25:60:d1:81:80:69:2c:98:64:03:
4d:33:6f:30:f1:db:8a:25:83:27:b0:05:07:d7:e0:98:ab:2f:
89:58:ad:aa:b8:84:35:00:05:8b:db:ab:32:9b:9b:9d:ae:a0:
c8:0d:89:45:b3:be:2c:46:67:60:2f:8e:79:d4:d5:51:94:fe:
79:23:59:7a:a3:83:f3:60:ab:94:1d:68:23:ab:66:0b:00:51:
3c:17:8a:b3:e3:19:43:9e:ae:ac:e8:76:a2:ff:85:cd:32:fe:
f3:1d:cb:51:82:f9:33:e4:09:26:b3:ea:6b:08:55:88:7a:da:
48:28:7c:0d:5a:3e:70:3a:90:d6:00:98:38:00:d5:03:c6:03:
c9:f6:a2:3f:06:e2:ed:07:75:6c:e8:ba:cb:96:3a:69:9f:d0:
87:1d:ff:8e:33:84:1d:c8:5f:99:9c:6b:8b:3c:fe:12:be:ed:
a6:4e:15:aa:e8:99:f5:e6:d7:dc:f4:d8:86:84:e9:f6:08:4e:
2d:77:5e:99:ef:a0:fd:e1:87:f1:af:df:44:02:4f:34:12:48:
a3:77:ca:09:5b:af:54:95:d1:16:07:f9:cf:fa:9f:c0:5e:80:
b2:3c:77:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:40:59 2026 by rpki-client