
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft
File: rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft (raw, json)
Hash identifier: ppgT9/XbIav+/Ca5mRXNE2uBJJ7+aeXQ9ZU8lVhz6SE=
Subject key identifier: E2:CE:CE:06:E0:40:31:C3:51:1A:F1:D3:C0:60:78:41:85:9A:D8:08
Authority key identifier: AD:3F:A6:AF:80:E3:73:11:D0:B3:AE:C9:4A:75:7E:54:46:3C:49:B7
Certificate issuer: /CN=A9171155/serialNumber=AD3FA6AF80E37311D0B3AEC94A757E54463C49B7
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft
Manifest number: 8A
Signing time: Mon 01 Jun 2026 08:21:23 +0000
Manifest this update: Mon 01 Jun 2026 08:21:23 +0000
Manifest next update: Mon 08 Jun 2026 08:21:23 +0000
Files and hashes: 1: rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl (hash: /AXU+/pUg/igLW0CP/QpoZENlhwtFQ0QeIcyn7gwKJg=)
2: DC9357242CEF11F19569049CA6833773.roa (hash: LyXNFSUKaVEfYkBM93JJQqk8m5s8Gi0RCu4mZmOB6Ok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl
rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:21:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171155, serialNumber=AD3FA6AF80E37311D0B3AEC94A757E54463C49B7
Validity
Not Before: Jun 1 08:21:23 2026 GMT
Not After : Jun 8 08:21:23 2026 GMT
Subject: CN=6a1d4103-036b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:99:02:74:8c:87:b5:dd:dd:3a:c3:49:c8:
13:df:6a:8e:e4:36:73:bf:47:fc:ab:09:b5:55:f7:
55:fb:28:48:b7:b5:76:4d:f8:a5:91:8c:1b:46:83:
2b:ac:e7:fd:57:26:5d:11:e2:b9:12:b8:a1:fa:a5:
16:ef:d7:e3:9b:40:c6:d3:55:5c:8a:4e:b7:24:32:
20:83:5a:86:c7:0e:d7:d5:a1:1b:27:42:ac:60:ea:
5e:91:5d:a0:88:3e:68:6e:16:e5:4b:2c:b6:bd:fb:
7e:71:bc:83:17:0f:2d:66:b0:b1:20:9a:80:77:b1:
73:9e:a4:65:17:57:cb:08:34:51:a9:18:5f:64:05:
82:2d:64:23:97:b4:9c:c1:e1:ff:99:9f:d1:4d:6b:
85:77:11:e5:c0:68:43:98:42:3a:8c:50:64:62:2b:
66:e4:f0:65:72:18:81:bb:b4:ef:36:c4:87:6e:d9:
92:fa:02:66:91:7b:2d:a7:ad:e8:e5:21:b3:19:58:
2f:c1:40:f7:13:e7:b8:8c:64:ec:4f:cf:cd:41:b2:
80:9e:7f:24:57:1d:14:35:96:5a:8e:cb:42:47:fa:
19:49:b1:57:8c:93:22:9f:ab:e9:b8:9c:d4:4f:c3:
61:16:e8:6c:8f:fb:46:e9:f5:8d:df:0c:2c:0b:03:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CE:CE:06:E0:40:31:C3:51:1A:F1:D3:C0:60:78:41:85:9A:D8:08
X509v3 Authority Key Identifier:
keyid:AD:3F:A6:AF:80:E3:73:11:D0:B3:AE:C9:4A:75:7E:54:46:3C:49:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:21:d0:19:ff:8f:06:61:1c:de:5d:4a:58:28:a1:3f:92:2d:
12:98:e6:96:80:64:60:74:92:48:93:36:1b:c3:0f:03:f3:e1:
98:fe:41:01:5e:1d:8b:d4:0f:58:c5:76:53:8a:fe:36:c4:f9:
35:f8:55:f9:89:27:c0:fe:83:64:46:8d:e1:9f:aa:9b:bc:7c:
b0:c1:c2:1a:b0:2d:f8:65:9a:d6:57:a1:19:ff:0b:cd:12:78:
53:b3:39:fd:67:4b:cf:bc:f8:f1:4b:22:8d:43:5f:24:9c:09:
5d:a0:d9:e6:8f:66:6f:8b:85:3c:3d:83:d1:17:f7:62:72:fb:
30:86:1f:ab:7c:27:0b:3a:c9:c2:bc:e1:4e:3f:04:e2:4e:dd:
14:c0:60:39:e9:8c:4c:52:83:c5:2e:fc:aa:33:fb:26:1f:4f:
60:ad:5c:56:36:8d:6b:c6:2e:2a:c0:bd:6d:3b:58:d5:9e:27:
27:4c:c5:92:cb:b0:cb:3c:9d:77:24:96:3f:4c:6c:c8:8b:d2:
49:79:bc:dd:6f:46:4e:08:44:cc:67:ca:bd:32:27:72:9c:44:
73:3b:72:10:f5:6a:57:6d:00:19:e3:08:98:5b:08:63:36:a0:
b7:ed:8f:34:f5:c7:06:05:c2:3a:f0:0c:1e:83:69:0c:db:18:
03:2b:a4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:06:08 2026 by rpki-client