
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
File: tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json)
Hash identifier: zoIoG8iRnI29BVCt/fEl//knrvnIYhjcYScYfQ+yI0o=
Subject key identifier: E7:F2:21:73:0B:69:1F:1B:0A:73:F4:8B:3E:C8:E2:84:C7:99:0F:F1
Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
Certificate issuer: /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Certificate serial: 0348
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
Manifest number: 033A
Signing time: Tue 15 Sep 2026 00:43:44 +0000
Manifest this update: Tue 15 Sep 2026 00:43:44 +0000
Manifest next update: Tue 22 Sep 2026 00:43:44 +0000
Files and hashes: 1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: z+/oSNymnQaccsc22G+nkap88atJi5HAAxmULO/2VE4=)
2: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: k7oa0gyVDVstpxNJdtdSBjaevXmXY8KxLGB4YjxHPeM=)
3: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: zLRwlyYQoMCNATwicvYcavIJagOdRZfxbGUFbhuhVoc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 00:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 840 (0x348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Validity
Not Before: Sep 15 00:43:44 2026 GMT
Not After : Sep 22 00:43:44 2026 GMT
Subject: CN=6aa894c0-71c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5c:ff:39:4a:26:c5:ff:1f:0a:bb:69:41:1f:
98:d5:ed:3c:c8:e1:4c:49:a1:94:55:77:0a:66:ce:
30:1d:c5:f8:41:80:08:84:84:cc:05:19:0a:23:73:
d8:f3:ee:2d:32:ef:d1:6c:44:6e:10:11:4c:17:65:
e9:2d:4a:61:0d:27:b3:e6:66:21:49:ed:b4:d9:11:
4e:a5:d9:02:d5:08:97:6f:dd:fb:44:ec:40:e3:6b:
11:cf:5c:cb:72:b9:3a:e1:ea:56:05:98:3c:c8:2a:
43:ae:69:0b:db:64:6b:bd:1d:ac:27:b9:54:f8:7d:
b2:7d:c9:44:f4:a9:d5:b7:76:fb:f7:95:c3:e9:74:
25:b1:86:da:50:bc:00:89:4b:2a:2c:39:a0:87:91:
44:97:85:7e:40:92:b8:6d:bf:08:49:e7:a5:fc:24:
d3:ae:68:38:05:fd:59:8d:77:4d:fa:d2:18:13:4c:
07:a4:b9:07:28:8a:7e:c8:2b:15:44:df:5b:24:12:
67:2a:d2:7d:58:53:e7:c0:b8:f6:db:d3:db:7f:71:
75:b1:0c:16:b3:e7:61:7c:b1:dc:af:e9:5f:2b:14:
c6:6d:b0:94:f2:16:49:f0:d4:55:ee:b1:3a:19:74:
10:92:2a:5e:ee:2e:2e:70:3b:c0:08:4f:f7:3d:13:
3d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F2:21:73:0B:69:1F:1B:0A:73:F4:8B:3E:C8:E2:84:C7:99:0F:F1
X509v3 Authority Key Identifier:
keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0d:6e:60:c4:3d:a7:92:1a:9a:c7:f8:0c:f6:57:98:3c:52:
3b:21:5f:57:a9:33:9c:67:62:74:13:6e:f1:c2:40:3e:c7:97:
d0:f6:3e:86:d8:59:9e:e3:5e:c4:bd:8c:94:ad:73:1f:8c:be:
04:b9:04:08:4d:28:e2:6f:1f:5a:ea:a3:22:47:39:91:7c:2e:
2e:7b:3c:26:91:23:48:ac:db:d1:9d:00:6e:a0:ed:a9:22:1c:
dc:3b:fc:ea:99:06:73:e6:5e:b8:95:af:7a:93:60:df:18:25:
68:9b:65:1f:16:0e:9a:e1:f5:7c:ea:09:39:c5:c6:03:cb:e8:
b5:04:1e:eb:81:49:35:db:ae:08:7c:3e:5c:79:49:f6:dc:72:
44:49:76:cd:c8:41:22:24:b6:50:df:80:d3:3e:d9:ac:d9:21:
1b:6d:5a:81:db:b4:07:a1:3c:73:30:3a:26:e5:1d:bb:3b:2a:
c1:49:27:89:f8:3a:6d:95:26:cc:4b:bf:ec:d9:ec:d7:9c:20:
7c:9a:62:b9:ad:61:67:f2:0e:df:6a:b4:66:d5:44:c0:37:61:
a4:cc:51:02:cf:e2:d9:56:d1:dc:30:19:2b:e6:92:e9:2f:f3:
ef:e6:d2:51:e0:fa:3b:b3:f4:26:e7:26:ab:70:92:4e:7f:ee:
3f:df:84:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 10:46:09 2026 by rpki-client