
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
File: tDxOPTL5W1BV0E_cAfhRljfImm8.mft (raw, json)
Hash identifier: tfGRD8/p+6tnF3Ea2buuKg3TG66tJk/rymgp2PO0Bsk=
Subject key identifier: B7:03:71:0F:B8:85:B1:51:49:FC:DC:A2:5A:E7:8E:55:9F:26:6F:6B
Authority key identifier: B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F
Certificate issuer: /CN=A9161F73/serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
Manifest number: 015F
Signing time: Sun 17 May 2026 04:57:58 +0000
Manifest this update: Sun 17 May 2026 04:57:57 +0000
Manifest next update: Sun 24 May 2026 04:57:57 +0000
Files and hashes: 1: tDxOPTL5W1BV0E_cAfhRljfImm8.crl (hash: bBCYH8LA5kch186LWO71YbbuSEWTmKfPIRtvJpFCteM=)
2: 858870583D0A11EF829DCE39C4F9AE02.roa (hash: nUPXQLFgYxbwvoUneYWVygADhQDRKvtWC/3dO1oUTC4=)
3: 38BDA87E3D0A11EF9EEE4439C4F9AE02.roa (hash: e7uP2Q15Y7+PdXnvPFnRHiamG3196fJe6Q0lPV/VwQQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl
rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161F73, serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F
Validity
Not Before: May 17 04:57:57 2026 GMT
Not After : May 24 04:57:57 2026 GMT
Subject: CN=6a094ad5-e8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:f9:b4:97:e1:11:1d:2c:7f:4b:95:5d:b2:
9c:62:c5:f0:4e:de:22:54:00:62:2f:d6:45:c8:da:
52:9a:2c:ee:78:3a:78:30:82:79:e3:4c:c2:dd:b8:
4c:85:44:8d:1a:7a:6c:3e:65:61:3b:93:43:cc:59:
66:0d:77:8c:18:2d:8e:3d:95:1a:ee:e5:26:d1:72:
d2:38:7e:04:69:57:3e:b8:9c:24:a6:39:4f:f8:36:
29:03:54:ff:ac:2b:b3:db:76:da:c2:71:64:3b:8e:
45:06:26:29:64:e5:61:cc:4d:af:95:72:f1:f1:34:
d3:c3:ab:29:6b:87:c9:cf:21:1c:5e:b2:0b:8a:89:
39:6f:d7:17:70:5e:b6:fa:15:78:d3:1d:a7:7d:3d:
2a:7f:16:f5:91:d8:92:cc:40:6f:84:69:f6:2c:8e:
49:8b:1e:30:13:6f:18:a3:22:4a:23:50:66:d9:18:
ed:fb:46:34:2f:b0:b1:c0:e5:49:6e:3e:db:84:8c:
8d:24:2d:73:6f:dd:f4:ca:9d:2a:7e:1d:00:e6:7f:
1d:85:0c:b7:de:e9:d3:44:25:c3:9f:da:b8:71:30:
88:7c:9e:33:c0:aa:09:51:b8:cf:65:62:c4:b9:bb:
09:e6:68:da:a1:6f:82:cf:6e:2a:e9:ab:52:4c:44:
69:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:03:71:0F:B8:85:B1:51:49:FC:DC:A2:5A:E7:8E:55:9F:26:6F:6B
X509v3 Authority Key Identifier:
keyid:B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:25:a7:0c:b4:a1:e5:bf:a5:17:5f:55:d2:b4:11:4b:b0:21:
b9:dd:24:c5:55:01:8d:3b:e4:af:8c:6f:6e:6a:1f:0e:12:37:
2c:06:f0:75:cd:f4:f2:14:ef:09:1b:98:6b:35:4c:0e:bb:91:
a1:b9:36:7a:25:e2:ca:98:d8:64:48:7d:81:e0:e1:2d:9e:73:
01:52:31:db:69:23:20:86:62:44:bb:ce:5d:df:93:50:57:26:
29:64:47:8d:d7:6f:4b:f3:c4:61:f2:0e:4b:74:d7:90:40:53:
2d:66:7f:aa:f3:42:5f:f1:d7:77:1a:05:67:c4:47:bb:7c:14:
eb:11:c5:b6:29:e6:1b:48:6a:2b:f3:81:81:56:83:e8:93:ea:
71:40:3d:0e:3e:fe:24:5d:c5:23:c4:c0:a1:02:bb:09:45:60:
55:93:aa:36:ab:23:95:fe:26:67:17:ce:89:e1:16:cd:3e:71:
17:9b:6b:f5:e8:fd:fb:51:f5:63:ac:2e:f0:37:19:ac:cf:20:
c9:47:80:e2:8e:63:95:d8:da:35:21:c3:30:30:70:1e:03:80:
01:ba:ba:88:54:8c:87:d4:8d:55:51:ed:36:d7:11:bb:43:db:
ca:76:fd:be:b1:ef:29:25:39:89:3a:af:cc:95:33:7e:af:6a:
85:0d:4d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 08:47:53 2026 by rpki-client