
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
File: tDxOPTL5W1BV0E_cAfhRljfImm8.mft (raw, json)
Hash identifier: MeIC/7auK4M5UtXlO7McOwDBqd69n+WFvrhDrK7XzeI=
Subject key identifier: 8B:6E:FE:25:21:AD:E0:D2:02:BF:F3:F0:13:D5:7B:E3:E7:D1:C4:79
Authority key identifier: B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F
Certificate issuer: /CN=A9161F73/serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F
Certificate serial: 01A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
Manifest number: 018E
Signing time: Sat 15 Aug 2026 04:35:33 +0000
Manifest this update: Sat 15 Aug 2026 04:35:33 +0000
Manifest next update: Sat 22 Aug 2026 04:35:33 +0000
Files and hashes: 1: tDxOPTL5W1BV0E_cAfhRljfImm8.crl (hash: cXEIYM1kgupMrAvBKnzdO0o7GyGJIpGxAAxR71LoGOI=)
2: 38BDA87E3D0A11EF9EEE4439C4F9AE02.roa (hash: cYJup+wUJGtYgdIrc1oUwAkSXzmV3AlmQSx4GJxEnkI=)
3: 858870583D0A11EF829DCE39C4F9AE02.roa (hash: Mem81CDNt2s+1wxtJl9qhDaTI/CWwYf0sPuRtvT/byE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl
rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416 (0x1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161F73, serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F
Validity
Not Before: Aug 15 04:35:33 2026 GMT
Not After : Aug 22 04:35:33 2026 GMT
Subject: CN=6a7fec95-fb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b1:9d:e8:de:87:2e:ce:f5:17:68:51:dd:61:
93:cf:4f:23:06:94:66:66:42:28:a0:8e:47:cc:9a:
89:21:b7:9d:a1:28:bc:30:79:95:47:66:18:3b:51:
d5:d0:a5:17:a2:35:f9:8e:37:85:a8:2a:75:f3:77:
aa:35:f7:f4:54:19:85:93:1d:b4:19:12:34:2e:f1:
80:56:d6:71:90:37:84:4a:0f:44:08:39:37:f3:e4:
0a:6e:84:56:8a:3d:5b:0b:6f:3b:5e:7a:aa:a4:18:
a3:5c:a3:94:a2:70:99:ce:63:bd:d2:aa:e5:24:74:
c3:72:eb:47:aa:a0:54:d1:1a:2e:68:17:d5:a9:6a:
95:6b:99:96:82:ec:07:9d:99:c7:ea:d3:f9:2c:58:
9d:16:55:7a:eb:02:9c:0f:22:53:81:53:fe:3b:99:
ac:0d:d3:01:c2:f7:6e:ba:8e:29:e6:a3:26:0e:38:
6c:e1:4f:56:ba:b1:0d:7d:db:06:f2:97:a7:92:fc:
d3:09:2c:5b:35:6d:cf:41:2a:9c:aa:5a:24:f2:38:
87:d5:98:a8:66:24:83:c0:d7:b3:9f:25:e2:c4:ac:
29:ca:a9:87:38:bd:6f:dc:d1:cc:88:f8:10:3c:87:
06:5a:32:c7:2b:13:0a:f1:ff:bb:34:f1:37:07:c4:
0a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6E:FE:25:21:AD:E0:D2:02:BF:F3:F0:13:D5:7B:E3:E7:D1:C4:79
X509v3 Authority Key Identifier:
keyid:B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:9e:48:61:05:1c:f9:27:e4:6f:34:01:80:7d:5f:a6:b5:66:
01:dc:21:57:01:30:ad:50:fc:a0:97:79:07:70:c3:96:9c:0d:
ae:cb:10:d4:3b:5a:64:bf:2e:85:46:64:03:45:c5:1d:e2:ae:
ed:cb:fe:eb:14:7d:c5:d2:ec:6b:a9:d4:26:b8:c1:4b:3c:66:
cc:ad:e9:cd:7e:a5:3a:c5:e6:d8:33:df:53:89:ca:93:63:25:
77:42:40:07:a0:6e:77:d9:0b:6e:d9:66:79:a9:4f:84:74:b5:
66:a5:dc:c3:47:6e:20:c1:d2:b8:2e:ef:d6:a8:db:35:ca:5d:
f2:1d:a8:82:ab:2e:7f:95:b7:bc:a7:2b:21:50:ff:ed:2c:26:
02:7b:5a:f3:ad:80:40:10:fd:18:3d:cd:db:28:a6:f7:fc:98:
f8:37:92:aa:58:f8:fa:ba:b5:40:5b:7f:f4:68:24:42:ea:f0:
2c:12:10:cd:dd:4e:01:c2:14:97:ef:32:e5:fc:4b:a1:9e:96:
38:d8:46:e7:be:99:ea:b5:9a:0f:29:42:91:20:44:d6:9f:f4:
71:de:af:0c:c1:e6:e5:ca:5e:8e:95:5a:7c:6a:c4:0c:fc:4d:
8d:59:b6:62:4a:79:b3:26:d8:fd:f0:b1:15:2a:3c:05:00:76:
32:6b:a1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 13:45:50 2026 by rpki-client