
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft
File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json)
Hash identifier: WKkax1EhcJN3YrPonl1WRbbJvfanDid4rU/4t/gohZU=
Subject key identifier: 30:A1:CA:E6:53:0E:81:67:C4:B2:B1:E6:A6:93:32:AB:90:D7:0B:D4
Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A
Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A
Certificate serial: 07BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft
Manifest number: 079A
Signing time: Sat 04 Jul 2026 21:46:33 +0000
Manifest this update: Sat 04 Jul 2026 21:46:32 +0000
Manifest next update: Sat 11 Jul 2026 21:46:32 +0000
Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: xKxRlFUreAzcTlb05VcO5WRH19WTOsX23LPWAskLH5k=)
2: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: 2oVR2t5v2J8c0h/gxceBEyWV3OdTw+s6Iy45bTBQMQ0=)
3: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: AVHjOo/UrE4RIu/UGGKNS+wB7XI6SMjM5Z9Qu4YFYdc=)
4: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: y9iPf5uYx69ejY3kwl7gRifI2qQ+lUK4vj5z1o6EqvE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl
rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 21:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1978 (0x7ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A
Validity
Not Before: Jul 4 21:46:32 2026 GMT
Not After : Jul 11 21:46:32 2026 GMT
Subject: CN=6a497f39-199d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0c:37:ac:74:4d:7e:b2:57:05:93:29:92:6d:
d1:65:36:ab:aa:b2:3d:40:7a:f0:7d:98:0c:13:3e:
46:a2:ab:1c:ec:3b:56:53:74:97:ba:8a:f1:a5:d0:
f7:c2:d7:69:42:32:0f:d6:ef:a9:c7:10:a5:04:b8:
c6:3f:03:64:56:e2:a2:20:ec:60:05:3c:ca:ff:2a:
0b:69:a4:57:2a:89:64:8b:c8:9d:d9:6f:57:5c:7f:
78:08:91:1d:1e:5f:e6:aa:6d:74:fe:6c:bd:38:50:
5c:9c:b1:e5:84:6b:72:d7:66:e7:2d:b2:df:4f:2f:
b2:81:72:2a:48:72:1e:10:a2:1b:8b:4a:18:99:8f:
0e:2e:26:3e:ad:5f:33:70:eb:26:a6:70:15:3c:5e:
69:23:e0:7e:ad:dc:eb:86:16:1e:af:7f:87:5f:e1:
bb:5c:42:a3:89:46:44:f5:53:5b:fa:b5:09:d8:fd:
11:0b:25:5a:0a:68:af:0a:6a:3d:8d:01:4c:90:4d:
96:d1:07:b7:2c:a0:f4:b9:fb:e5:44:75:89:13:5a:
45:f5:68:ac:95:bc:0c:55:4f:8e:ac:32:0a:c3:a9:
ab:26:3a:ed:3e:6c:36:e6:ee:0e:d0:8a:9f:b6:6d:
1f:bd:b3:45:3a:78:ee:00:b4:c6:60:9b:d1:51:e9:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A1:CA:E6:53:0E:81:67:C4:B2:B1:E6:A6:93:32:AB:90:D7:0B:D4
X509v3 Authority Key Identifier:
keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:bc:1b:ac:a6:bb:09:bb:c8:47:44:27:82:61:53:1f:09:e7:
57:55:b1:48:83:bd:dd:49:d9:55:55:8d:f5:3d:c2:dc:6e:62:
bd:ec:bd:36:f7:a7:b1:7a:90:60:43:5a:17:d6:fa:a3:07:de:
ef:c1:66:0e:24:ff:c4:7b:c6:ab:b5:55:1c:f5:e5:53:b6:8c:
f3:2d:25:fd:3c:dc:35:b7:9b:e3:c1:8f:79:35:b7:b6:3c:c6:
79:08:7a:d1:1d:5d:bb:ad:2b:7b:f2:cc:f1:5c:b9:f4:e2:a5:
90:24:01:fc:56:38:71:ef:be:2e:5c:5a:35:d6:1f:7f:13:f0:
f6:a5:3c:6e:64:a1:31:0a:c7:63:69:9d:6e:2b:62:b9:cd:a9:
32:24:c1:e6:37:a3:1e:4a:ea:d0:f7:df:02:80:53:53:d4:89:
22:91:ee:62:6f:ad:05:9b:06:42:ac:4b:55:98:68:27:d0:2f:
39:93:f2:cb:24:fb:bd:90:46:b4:aa:68:e3:0e:b8:17:51:4c:
f3:e0:9c:b5:fe:0d:7f:51:dd:58:a2:0e:8a:13:cd:2f:97:4f:
95:55:2a:6c:15:85:75:73:3c:dc:52:71:83:d8:6d:2f:63:c9:
dc:40:aa:f8:1b:f0:cf:7a:38:3f:fe:68:73:ed:43:8c:96:8d:
e4:28:8a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:15:52 2026 by rpki-client