
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
File: tGadMNIQ5JB80oiL50uJpt08tsg.mft (raw, json)
Hash identifier: RKo/lbsJnTdApAmhAa2PBEbKiLOd0S/bqLaCuUFsUNs=
Subject key identifier: 67:35:3E:2B:CF:26:27:06:72:C5:7A:74:7D:45:EB:17:BA:02:1B:E8
Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8
Certificate issuer: /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
Certificate serial: 0A23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
Manifest number: 0A06
Signing time: Fri 04 Sep 2026 19:42:19 +0000
Manifest this update: Fri 04 Sep 2026 19:42:18 +0000
Manifest next update: Fri 11 Sep 2026 19:42:18 +0000
Files and hashes: 1: tGadMNIQ5JB80oiL50uJpt08tsg.crl (hash: CojGdgY3kUaOSZhV3gbbphetOPtdN0SR534AU5RyR8A=)
2: B350B67E964611EDA10D8777C4F9AE02.roa (hash: aMRVpWtmZnwUR1mTSqb8jU7v8RNHSZIpMkATgGb8rEM=)
3: 6E6FFF6A92F911ED8A66E70CC4F9AE02.roa (hash: wBIj83x+5tbUquS7FIlQQAMIzPRLzq+ZJDvfE+mcXhY=)
4: 4AA9F8CC75B511F18A3D446262A30FBC.roa (hash: a8REmHCWm+jSLUiYkfwW5npJYFrJiobn6pD3SgbZbKk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl
rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2595 (0xa23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161A58, serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
Validity
Not Before: Sep 4 19:42:18 2026 GMT
Not After : Sep 11 19:42:18 2026 GMT
Subject: CN=6a9b1f1b-3037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:56:d5:4c:d7:99:31:02:56:f9:e6:fc:a5:71:
f4:d9:d0:21:01:d3:11:90:ab:ee:a2:9a:0d:43:65:
56:33:b0:2a:09:9a:97:0d:cc:f1:bc:2a:7c:ae:61:
fb:b3:e9:72:e5:85:c3:7f:21:f4:2f:d7:a2:af:09:
be:bd:84:a5:50:5d:a5:dc:f1:fb:b8:d8:25:cb:15:
ce:c6:2f:06:11:81:91:01:d0:07:ca:5e:f6:a2:6a:
2c:c7:7c:54:ba:03:a3:3f:a9:fa:22:ab:68:b2:63:
16:02:b6:86:19:ee:ab:18:b5:2f:d4:6b:f6:8d:79:
32:65:fc:b0:0a:74:e8:39:d1:a8:1e:85:c8:b1:9b:
49:00:ea:5e:78:10:d7:a7:96:43:86:f6:00:c9:26:
3f:ec:07:9f:da:1c:43:0a:5e:58:6d:fa:d9:33:de:
22:24:86:e2:4d:88:5e:e7:dd:57:42:22:f7:48:f8:
b8:69:49:53:ce:a1:06:15:82:8d:2b:cb:84:67:d8:
af:fa:a9:28:9e:f9:25:47:09:45:2d:de:4b:1e:c4:
05:9c:cb:9c:60:f4:24:5c:d1:3e:c3:6d:f9:be:d6:
c9:aa:4a:0d:8c:6e:8b:8b:bd:34:2f:5f:7c:01:d7:
5c:7b:03:d9:54:b2:1c:07:91:ad:48:fe:4b:bb:a4:
19:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:35:3E:2B:CF:26:27:06:72:C5:7A:74:7D:45:EB:17:BA:02:1B:E8
X509v3 Authority Key Identifier:
keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:d1:39:17:1e:23:e3:10:1f:b8:2b:7b:93:57:19:3e:60:e3:
d8:d1:a1:d0:38:cb:01:4b:9f:8d:7f:73:e9:28:c4:7f:a0:a6:
ca:d5:e2:ea:32:f1:d4:1e:79:1b:0c:69:88:28:d5:83:09:21:
07:9d:9e:54:a0:3b:0a:c7:ac:50:be:3e:22:6f:64:a3:94:1b:
86:20:29:94:63:ac:a0:50:a6:a4:75:54:52:eb:c0:f0:77:ae:
1e:71:c3:ed:ba:41:ab:ac:10:e6:94:aa:fd:d6:c4:9a:4d:7f:
e0:47:46:5b:c8:7e:28:3b:c9:1d:a3:43:3e:e5:c5:2b:8d:f3:
3c:65:fe:d7:55:60:bb:ed:bd:a9:3a:84:01:d1:0a:3e:ba:bf:
44:31:74:a9:f7:25:9d:b4:c3:00:be:e4:30:26:01:1b:82:66:
93:b1:8e:bd:8d:a3:4c:53:d4:71:0d:7d:d0:f3:a2:99:a5:03:
cc:65:44:32:69:81:ef:bb:69:c6:ac:d2:f4:d6:39:38:fd:5b:
30:9b:e1:9b:ee:ce:87:e0:17:53:15:86:d9:47:d3:54:d9:10:
a6:9f:90:01:36:a6:cd:08:9d:1f:27:5c:36:52:aa:ea:e4:6e:
f8:aa:e7:fa:86:6a:f4:aa:a7:10:cc:68:5d:bd:fa:6b:d4:76:
81:70:d1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:57 2026 by rpki-client