
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
File: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft (raw, json)
Hash identifier: FUTaynW4X5eTlWtXA1Uiy/JVtkhG0UgP+QtW1r3wJb8=
Subject key identifier: 85:41:B5:E7:69:50:A3:34:12:B5:6A:BD:C2:88:93:1C:9C:C3:9E:3A
Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9
Certificate issuer: /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
Manifest number: 0135
Signing time: Thu 03 Sep 2026 05:49:34 +0000
Manifest this update: Thu 03 Sep 2026 05:49:34 +0000
Manifest next update: Thu 10 Sep 2026 05:49:34 +0000
Files and hashes: 1: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl (hash: 72HT7nLjKdu0ur0kk7TKUyS4ILPIqkCw841PJqGK6Ro=)
2: 240B1914D90B11EF95020982C4F9AE02.roa (hash: 0gHNtWChBEUR4YEQpsBzxLagBwCzjHIiYU13EWlRZC8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl
rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 05:49:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9
Validity
Not Before: Sep 3 05:49:34 2026 GMT
Not After : Sep 10 05:49:34 2026 GMT
Subject: CN=6a990a6e-6768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:16:fc:b7:d9:45:fb:fe:e2:cd:dd:66:f8:
22:6a:c5:91:d7:e5:1e:b9:59:eb:c6:85:13:93:a1:
da:0a:3c:d5:2b:7a:97:c4:26:3f:1c:39:50:62:33:
fa:f4:36:1e:0c:91:7a:1a:69:2d:ba:a0:0a:95:2e:
72:d8:c7:7a:d2:89:d0:26:e9:25:9c:be:3b:27:aa:
80:d9:bb:6a:c9:2a:f2:e3:d9:b9:a5:2b:ac:c4:ba:
11:f3:b2:48:97:40:be:ed:72:fc:13:5d:80:92:88:
46:03:a7:1d:bb:cb:32:0e:93:54:f4:c5:74:02:33:
5f:bb:f4:d0:b7:a3:a7:c1:4c:05:03:6a:8c:fb:88:
b6:3a:e1:c3:59:69:af:57:f1:37:0a:09:b6:cf:b0:
3c:49:a6:32:c9:1a:b4:2e:66:4b:15:43:0e:82:98:
d1:9c:8e:95:63:9f:2c:8f:d4:d7:c0:a6:4f:4f:83:
a7:28:ff:ac:bc:6b:c2:11:bd:0d:0a:4b:32:4f:2b:
51:dd:19:c7:d4:d6:48:fc:02:7e:c0:ca:1c:1d:f7:
c3:30:81:12:98:8f:f7:49:3e:0b:48:86:ef:fa:04:
b5:de:20:e0:77:f8:1f:5a:16:82:04:77:99:92:e1:
7d:15:46:20:9f:28:90:f1:76:f6:40:7f:59:9b:bc:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:41:B5:E7:69:50:A3:34:12:B5:6A:BD:C2:88:93:1C:9C:C3:9E:3A
X509v3 Authority Key Identifier:
keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:e1:f3:22:bb:34:52:c9:e3:c7:5f:d6:44:76:93:d3:45:8c:
5b:f1:18:18:52:d2:6d:67:39:4f:cb:40:91:b6:70:e3:5d:9b:
4b:75:d6:b9:2c:da:f2:9f:d6:bb:e6:e8:85:5d:68:05:3f:26:
e2:0c:f9:8b:cd:e9:9e:54:b5:ea:34:76:75:37:5b:4e:4c:33:
70:0e:73:31:b6:55:03:27:ac:e0:ec:d9:04:a5:b3:bd:c3:35:
0c:82:c8:df:2c:04:b2:3a:20:2c:33:06:86:07:a6:7f:3e:9a:
69:1f:77:a5:40:6a:78:fe:60:70:1c:53:50:21:ac:5c:14:44:
3c:d4:6e:78:22:7a:49:8f:03:e6:63:cd:6c:3f:db:85:d9:2a:
db:78:74:a9:b0:a6:cf:f5:21:9a:08:73:5d:8c:dd:48:78:42:
49:0e:e0:dd:f3:23:3c:73:4b:17:a1:d3:6c:52:80:be:5e:61:
fa:5d:8c:21:bf:a6:86:70:e4:31:12:a6:9a:49:a0:35:47:2a:
49:90:db:2b:a2:45:bc:50:b9:e9:5f:4c:5c:d3:09:8d:0d:b1:
59:7a:52:5b:60:f2:b2:67:7c:cc:46:60:f1:c6:28:8a:70:86:
6d:eb:9c:1f:6b:15:76:bf:aa:f0:61:5a:88:c9:98:34:35:1b:
f3:66:12:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMxNjExMTAvBgNVBAUTKEI0OUIyQjExRDM4NzZERUNERTEzRjVFOEY1OUU2NDFB
N0QwOTNGQjkwHhcNMjYwOTAzMDU0OTM0WhcNMjYwOTEwMDU0OTM0WjAYMRYwFAYD
VQQDEw02YTk5MGE2ZS02NzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuCkW/LfZRfv+4s3dZvgiasWR1+UeuVnrxoUTk6HaCjzVK3qXxCY/HDlQYjP6
9DYeDJF6GmktuqAKlS5y2Md60onQJuklnL47J6qA2btqySry49m5pSusxLoR87JI
l0C+7XL8E12AkohGA6cdu8syDpNU9MV0AjNfu/TQt6OnwUwFA2qM+4i2OuHDWWmv
V/E3Cgm2z7A8SaYyyRq0LmZLFUMOgpjRnI6VY58sj9TXwKZPT4OnKP+svGvCEb0N
CksyTytR3RnH1NZI/AJ+wMocHffDMIESmI/3ST4LSIbv+gS13iDgd/gfWhaCBHeZ
kuF9FUYgnyiQ8Xb2QH9Zm7zTNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIVBtedp
UKM0ErVqvcKIkxycw546MB8GA1UdIwQYMBaAFLSbKxHTh23s3hP16PWeZBp9CT+5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE2MS83MTMyRUY5QUQ5
MDcxMUVGQjI3Rjc4NTdDNEY5QUUwMi90SnNyRWRPSGJlemVFX1hvOVo1a0duMEpQ
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3RKc3JFZE9IYmV6ZUVfWG85WjVrR24wSlA3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzE2MS83MTMyRUY5QUQ5MDcxMUVGQjI3Rjc4NTdDNEY5QUUwMi90SnNyRWRPSGJl
emVFX1hvOVo1a0duMEpQN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN+HzIrs0Usnjx1/WRHaT00WMW/EYGFLSbWc5T8tAkbZw412bS3XWuSza8p/W
u+bohV1oBT8m4gz5i83pnlS16jR2dTdbTkwzcA5zMbZVAyes4OzZBKWzvcM1DILI
3ywEsjogLDMGhgemfz6aaR93pUBqeP5gcBxTUCGsXBREPNRueCJ6SY8D5mPNbD/b
hdkq23h0qbCmz/UhmghzXYzdSHhCSQ7g3fMjPHNLF6HTbFKAvl5h+l2MIb+mhnDk
MRKmmkmgNUcqSZDbK6JFvFC56V9MXNMJjQ2xWXpSW2Dysmd8zEZg8cYoinCGbeuc
H2sVdr+q8GFaiMmYNDUb82YS3Q==
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:47:43 2026 by rpki-client