
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
File: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft (raw, json)
Hash identifier: wW7B46Ig0llRn+SOmj7kwQtuvs7e07Tw383ew/HZxOs=
Subject key identifier: 79:46:DD:CF:78:04:58:D3:F6:2B:BB:24:F7:2D:0E:35:C9:7F:7B:53
Authority key identifier: 4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E
Certificate issuer: /CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E
Certificate serial: 19D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
Manifest number: 19C9
Signing time: Mon 22 Jun 2026 16:21:46 +0000
Manifest this update: Mon 22 Jun 2026 16:21:46 +0000
Manifest next update: Mon 29 Jun 2026 16:21:46 +0000
Files and hashes: 1: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl (hash: Kj/VzlCSO0W9Sx2DdhduuvezYiPzIX0EdetOPDWGQCQ=)
2: 9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa (hash: tuFhPkM88OAOhbJHPJWo76XV19a6w7QlA1gqkoBuKS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl
rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 16:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6617 (0x19d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173C8A, serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E
Validity
Not Before: Jun 22 16:21:46 2026 GMT
Not After : Jun 29 16:21:46 2026 GMT
Subject: CN=6a39611a-df53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:44:f6:b4:7d:56:0b:51:cb:2f:90:81:f3:
54:7b:c8:3c:a1:9e:5b:e5:f0:46:69:e8:07:88:a6:
cd:c9:11:c5:2f:4c:95:37:34:d7:8d:f0:b8:d4:b1:
7b:41:2e:85:6c:5c:7b:37:8f:35:53:02:e4:db:62:
15:3a:9b:03:7e:0c:3e:50:7f:57:8b:70:0b:60:6a:
e8:67:26:b1:6b:97:01:90:55:bb:fa:44:b3:76:6b:
dc:e7:47:85:61:d6:50:66:9a:af:12:df:ba:c7:c1:
2d:37:19:c6:ff:38:fb:ca:51:3d:22:c9:ea:a3:37:
ea:a6:00:13:77:3c:27:24:86:59:f6:90:9e:46:05:
fb:23:b5:1c:26:b5:1a:42:97:89:02:9e:e6:fc:9c:
76:47:88:eb:c9:dd:d4:94:cc:c1:48:f5:0d:71:8e:
ef:74:6b:7a:79:25:7c:51:25:fd:a2:80:2f:e3:af:
ec:ef:fd:34:2b:ca:97:ee:da:74:d6:e8:84:d5:82:
58:71:21:1f:38:ad:e8:4f:29:41:46:d7:6c:ff:3b:
24:b1:f1:ac:69:2a:80:6a:ef:b3:b6:02:61:e8:f7:
c4:02:d5:ca:35:e5:08:f8:f3:34:d3:75:ac:f5:b2:
c9:9b:00:a8:0e:bf:2f:49:d5:2e:c7:47:14:f1:f7:
47:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:46:DD:CF:78:04:58:D3:F6:2B:BB:24:F7:2D:0E:35:C9:7F:7B:53
X509v3 Authority Key Identifier:
keyid:4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:df:85:b1:ee:6d:ac:43:77:04:3b:6b:1c:5f:d3:79:66:d9:
21:c2:3e:89:c2:6f:f9:60:0b:68:12:56:5d:ce:df:e1:42:62:
43:c5:72:48:f9:47:4a:08:0d:73:88:e5:31:dd:e9:d3:fe:29:
48:36:01:a2:87:37:5a:5a:bc:50:48:18:db:57:46:41:ba:d5:
92:8f:38:18:48:75:8a:52:48:be:80:81:ee:03:e0:db:8b:dd:
4f:95:52:02:96:19:55:f0:97:ae:46:e5:f1:f1:5e:0f:2e:aa:
47:b9:52:95:c5:f5:7e:d4:2d:31:89:f4:c2:cb:a9:82:7d:d9:
73:de:c7:11:79:f7:01:21:b1:ff:7e:5e:7f:16:0b:55:14:2f:
f8:1c:b6:24:2b:b5:c9:da:28:00:b2:29:43:10:d3:8f:ba:dd:
c8:b9:1c:da:03:ef:43:aa:b8:ab:a3:f4:46:8a:27:d6:6d:c1:
ba:59:aa:ef:a1:37:23:4d:8e:86:d1:ce:60:97:cd:46:aa:fd:
df:a4:78:c1:fc:b7:0b:f1:cd:dc:77:c5:2a:c7:55:32:ad:ca:
c8:cf:e5:35:40:89:a7:2a:ca:1d:ca:19:ff:de:f7:ad:6e:1f:
1f:19:3f:15:65:04:8c:b0:59:06:23:25:f4:10:96:22:af:75:
2f:de:d1:bf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNDOEExMTAvBgNVBAUTKDRFMkIyMEQ5NTM3MzJCNzVFRUQxMkYxMjk5MjFBMEIx
QjVFQjE1OEUwHhcNMjYwNjIyMTYyMTQ2WhcNMjYwNjI5MTYyMTQ2WjAYMRYwFAYD
VQQDEw02YTM5NjExYS1kZjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu09E9rR9VgtRyy+QgfNUe8g8oZ5b5fBGaegHiKbNyRHFL0yVNzTXjfC41LF7
QS6FbFx7N481UwLk22IVOpsDfgw+UH9Xi3ALYGroZyaxa5cBkFW7+kSzdmvc50eF
YdZQZpqvEt+6x8EtNxnG/zj7ylE9IsnqozfqpgATdzwnJIZZ9pCeRgX7I7UcJrUa
QpeJAp7m/Jx2R4jryd3UlMzBSPUNcY7vdGt6eSV8USX9ooAv46/s7/00K8qX7tp0
1uiE1YJYcSEfOK3oTylBRtds/zsksfGsaSqAau+ztgJh6PfEAtXKNeUI+PM003Ws
9bLJmwCoDr8vSdUux0cU8fdHhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHlG3c94
BFjT9iu7JPctDjXJf3tTMB8GA1UdIwQYMBaAFE4rINlTcyt17tEvEpkhoLG16xWO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M4QS9FN0ZGQzVGNDg2
RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOekszWHUwUzhTbVNHZ3NiWHJG
WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Rpc2cyVk56SzNYdTBTOFNtU0dnc2JYckZZNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0M4QS9FN0ZGQzVGNDg2RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOeksz
WHUwUzhTbVNHZ3NiWHJGWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC9+Fse5trEN3BDtrHF/TeWbZIcI+icJv+WALaBJWXc7f4UJiQ8VySPlHSggN
c4jlMd3p0/4pSDYBooc3Wlq8UEgY21dGQbrVko84GEh1ilJIvoCB7gPg24vdT5VS
ApYZVfCXrkbl8fFeDy6qR7lSlcX1ftQtMYn0wsupgn3Zc97HEXn3ASGx/35efxYL
VRQv+By2JCu1ydooALIpQxDTj7rdyLkc2gPvQ6q4q6P0Roon1m3Bulmq76E3I02O
htHOYJfNRqr936R4wfy3C/HN3HfFKsdVMq3KyM/lNUCJpyrKHcoZ/973rW4fHxk/
FWUEjLBZBiMl9BCWIq91L97Rvw==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:59 2026 by rpki-client