
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
File: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft (raw, json)
Hash identifier: jYgo7iAaqJRnsxCKejbdGY54ke20P10UuDl8O++5O2s=
Subject key identifier: 36:92:10:5C:18:E4:38:1C:0C:90:61:5F:14:7C:49:F8:95:E2:E9:90
Authority key identifier: 4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
Certificate issuer: /CN=A9176C8F/serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
Certificate serial: 0199
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
Manifest number: 0190
Signing time: Mon 05 Oct 2026 04:53:38 +0000
Manifest this update: Mon 05 Oct 2026 04:53:37 +0000
Manifest next update: Mon 12 Oct 2026 04:53:37 +0000
Files and hashes: 1: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl (hash: InIShkOe56qnTXJFVSPEsGTzMuXz6vSfdixNQWJNdho=)
2: 43749A72824E11F0A1C4B018C4F9AE02.roa (hash: KSDxonhKP2R/jFXcwFf/p6d4f1Qwk//gYks77lT8Zqc=)
3: 4E9597086B5C11EFABB11F60C4F9AE02.roa (hash: KmFo8WXoDjWbWyLh/FF39LTCZs17MIBxb0+OrFi78Hs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl
rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 04:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176C8F, serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
Validity
Not Before: Oct 5 04:53:37 2026 GMT
Not After : Oct 12 04:53:37 2026 GMT
Subject: CN=6ac32d51-d73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f2:ed:c9:76:94:3b:6f:d6:67:37:7d:d4:fd:
f3:e2:ad:28:bf:c7:85:bd:9e:db:9e:6e:a2:b7:11:
d5:74:d7:8a:49:1b:fc:19:e2:9b:11:56:3a:dd:cf:
f1:77:4f:49:dc:af:39:b5:79:19:08:78:82:5c:9a:
48:00:dc:52:c2:00:62:4b:8f:e5:09:aa:dd:a2:ae:
a4:56:4f:d5:49:e4:37:56:5e:5e:e6:5e:24:a7:07:
7a:0c:a3:ff:7b:e8:26:76:88:c2:82:ff:be:7e:3e:
71:cb:08:0d:cc:77:ce:f2:5c:50:41:11:26:9a:87:
9f:59:46:e9:9b:96:2a:51:31:af:16:f0:d1:38:7b:
0b:d5:8f:a3:6b:35:bd:e5:00:42:98:27:0b:d6:ae:
da:ae:96:b9:d8:f0:8e:95:bd:02:0a:c1:ad:20:4b:
22:3a:e7:83:c3:2f:e5:81:dd:03:ba:33:b4:dc:ab:
a4:45:cc:45:94:b5:41:b1:65:57:44:a3:fc:e5:ba:
2b:b5:a4:21:34:66:8c:84:0c:b6:fe:0a:a0:44:3a:
23:1e:28:a6:b7:1c:9c:cd:9b:18:58:13:48:81:21:
e6:e5:20:11:90:fd:f4:2c:79:c5:91:93:a8:83:a1:
b5:8c:4e:6f:39:dc:d5:7c:be:18:77:27:af:e9:a0:
0c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:92:10:5C:18:E4:38:1C:0C:90:61:5F:14:7C:49:F8:95:E2:E9:90
X509v3 Authority Key Identifier:
keyid:4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:a5:d0:c1:5d:22:8e:3e:c5:29:cc:37:fd:1c:ac:d1:f5:42:
2a:e6:e3:7a:77:ed:37:c2:e0:df:3c:09:21:f0:86:2e:37:5f:
ba:16:9f:79:67:f6:5b:8a:f2:0f:ff:f7:96:92:9d:4f:c4:37:
b2:b3:35:6b:31:6d:b2:ff:3d:18:5e:a3:78:54:3a:6e:55:f4:
32:c5:dd:97:22:5d:67:e1:da:aa:c4:1d:cf:15:84:41:cf:9f:
56:04:67:d6:07:c5:95:20:9b:6b:04:33:00:15:07:b5:63:22:
9b:62:6d:f1:ed:9a:7f:75:de:62:2a:79:b5:5d:e4:a8:0e:c1:
51:44:06:c5:17:1f:e4:ac:cd:8c:22:ed:07:03:21:6a:76:3d:
eb:64:ff:e6:7b:26:5b:36:c6:a4:83:29:96:6b:6e:d9:24:d5:
d1:df:b0:25:6a:ba:78:5a:04:6c:1d:01:33:1f:53:2d:3b:a0:
e2:b2:15:6f:22:51:02:65:69:df:be:ff:f6:dd:c7:0b:db:af:
73:aa:08:6d:f0:2b:e8:ea:0a:70:e4:e3:33:df:69:e5:67:d1:
9a:4d:34:9a:c1:b7:a9:e3:72:b0:12:1d:7c:b5:1c:79:57:c3:
30:45:83:26:97:1e:db:02:f4:38:f2:b0:22:57:c0:db:48:0e:
6f:d0:fd:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzZDOEYxMTAvBgNVBAUTKDRFN0VEOTUxQzRGODlGMTFGMTk0NDY4RUE4MTU0NEQ3
MzM1RTRGNTkwHhcNMjYxMDA1MDQ1MzM3WhcNMjYxMDEyMDQ1MzM3WjAYMRYwFAYD
VQQDEw02YWMzMmQ1MS1kNzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmvLtyXaUO2/WZzd91P3z4q0ov8eFvZ7bnm6itxHVdNeKSRv8GeKbEVY63c/x
d09J3K85tXkZCHiCXJpIANxSwgBiS4/lCardoq6kVk/VSeQ3Vl5e5l4kpwd6DKP/
e+gmdojCgv++fj5xywgNzHfO8lxQQREmmoefWUbpm5YqUTGvFvDROHsL1Y+jazW9
5QBCmCcL1q7arpa52PCOlb0CCsGtIEsiOueDwy/lgd0DujO03KukRcxFlLVBsWVX
RKP85bortaQhNGaMhAy2/gqgRDojHiimtxyczZsYWBNIgSHm5SARkP30LHnFkZOo
g6G1jE5vOdzVfL4Ydyev6aAM6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDaSEFwY
5DgcDJBhXxR8SfiV4umQMB8GA1UdIwQYMBaAFE5+2VHE+J8R8ZRGjqgVRNczXk9Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GMTRFRUQ5ODZC
NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9UbjdaVWNUNG54SHhsRWFPcUJWRTF6TmVU
MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RuN1pVY1Q0bnhIeGxFYU9xQlZFMXpOZVQxay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NkM4Ri9GMTRFRUQ5ODZCNUExMUVGQkM5OTkyNUNDNEY5QUUwMi9UbjdaVWNUNG54
SHhsRWFPcUJWRTF6TmVUMWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMqXQwV0ijj7FKcw3/Rys0fVCKubjenftN8Lg3zwJIfCGLjdfuhafeWf2W4ry
D//3lpKdT8Q3srM1azFtsv89GF6jeFQ6blX0MsXdlyJdZ+HaqsQdzxWEQc+fVgRn
1gfFlSCbawQzABUHtWMim2Jt8e2af3XeYip5tV3kqA7BUUQGxRcf5KzNjCLtBwMh
anY962T/5nsmWzbGpIMplmtu2STV0d+wJWq6eFoEbB0BMx9TLTug4rIVbyJRAmVp
377/9t3HC9uvc6oIbfAr6OoKcOTjM99p5WfRmk00msG3qeNysBIdfLUceVfDMEWD
Jpce2wL0OPKwIlfA20gOb9D9Ug==
-----END CERTIFICATE-----
Generated at Tue Oct 6 06:55:26 2026 by rpki-client