
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
File: TiH1qoySjAtnV8A-VbClkjxOSKs.mft (raw, json)
Hash identifier: QoCpYKidYenaeuwgFOGOINO7IKjac1ru/8sD5F0BBJY=
Subject key identifier: 2C:DD:1E:DF:20:3E:15:F8:FE:A3:59:E8:B7:13:7D:D3:32:4D:B7:33
Authority key identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB
Certificate issuer: /CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB
Certificate serial: 021A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
Manifest number: 020E
Signing time: Mon 27 Jul 2026 04:37:56 +0000
Manifest this update: Mon 27 Jul 2026 04:37:55 +0000
Manifest next update: Mon 03 Aug 2026 04:37:55 +0000
Files and hashes: 1: TiH1qoySjAtnV8A-VbClkjxOSKs.crl (hash: /SCPT7jRp80RObelL5P2LFVWwFrNOv9Nj7W8jNHW5DE=)
2: F97DB5F229A111F090BC8163C4F9AE02.roa (hash: 1EHDhgVqidDrXRWgA6OsvGx4WrHFvoHxphKqIoJn6qI=)
3: E586278C29A111F0BA1F4E63C4F9AE02.roa (hash: 7O2mtkzrE7WGBGsCng9QGlpq45C/QzmD5NcTuRUtGbQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl
rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180D79, serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB
Validity
Not Before: Jul 27 04:37:55 2026 GMT
Not After : Aug 3 04:37:55 2026 GMT
Subject: CN=6a66e0a4-6f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:19:26:c4:59:32:4e:ed:14:81:fb:88:c2:3f:
f9:ef:c4:21:fb:6a:29:3a:90:3c:d8:cf:5b:b7:4d:
1c:eb:af:87:b0:b8:95:d1:fd:4e:1f:18:e2:bb:9b:
6c:e3:43:9a:79:50:0e:cd:47:76:74:16:e9:6c:6d:
ef:e0:1c:b8:18:c9:1a:d2:7e:d1:9e:62:8e:75:cd:
fe:5d:23:a7:d7:c3:7c:ec:b4:1c:94:2a:6c:ad:63:
f2:e7:0f:2b:d5:b0:9d:96:98:3e:f8:50:3c:cd:01:
71:b5:05:f6:b1:47:19:a8:ac:ed:de:29:0d:fc:06:
8b:21:8e:06:55:7e:f4:d4:e5:93:ac:60:fb:4a:0d:
6b:45:db:02:ac:79:ed:1f:42:61:92:04:cf:82:65:
92:d5:d6:65:0b:8c:88:f5:ed:8b:4a:c6:fe:48:9f:
3a:f7:c2:9b:55:b7:4b:54:35:9e:2a:43:d5:0c:85:
c7:f6:d7:ba:fc:a6:b6:3f:b2:4b:7d:02:8b:bf:7b:
4b:fd:97:8c:77:74:7b:f4:59:fd:0a:2f:a4:7c:06:
7b:0d:f4:31:e9:64:ac:2c:0a:38:4e:32:f3:b3:ae:
f8:5d:02:29:1c:45:73:20:d4:60:75:0d:40:36:18:
c0:dc:18:fe:49:a1:47:6c:5c:e7:90:68:61:83:c6:
40:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DD:1E:DF:20:3E:15:F8:FE:A3:59:E8:B7:13:7D:D3:32:4D:B7:33
X509v3 Authority Key Identifier:
keyid:4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:47:ea:11:29:1a:4e:7f:a7:11:d5:82:50:3f:51:1e:d3:2e:
04:46:36:46:a7:8d:c0:46:6b:0e:61:9c:ad:37:1a:8f:c9:06:
ac:7c:a2:99:c2:3d:e2:28:51:2f:42:e3:14:aa:39:bf:85:65:
ed:03:c3:d2:d9:d2:60:74:b6:d1:7c:6d:96:f3:8e:4d:85:7d:
7a:1c:57:9c:33:d0:29:a0:6e:0c:5f:56:b4:c8:d9:1a:1b:70:
71:67:97:6a:01:5d:88:21:84:c4:8a:84:58:a0:c6:31:e7:09:
33:ca:d2:60:66:72:25:72:50:ec:59:57:fd:e8:63:89:df:60:
a2:44:a0:ea:a4:0d:f7:f2:09:4b:1e:ca:86:2e:b2:d2:de:d0:
bc:8c:66:9b:d8:32:1b:29:f0:39:9a:1c:f5:47:9d:42:69:24:
6e:97:3c:01:86:2e:c6:2c:cf:7e:bc:45:45:88:3f:d6:7f:18:
1e:00:1d:ab:1a:63:8d:82:69:5a:1f:f1:5a:2a:c7:c2:57:a3:
33:01:6d:27:d2:63:e5:1a:8b:e1:21:dd:fb:f7:28:a7:0b:e1:
0e:10:6c:8c:c4:26:71:54:98:9a:d5:7e:6a:00:5d:a4:2e:14:
8f:22:68:3a:f1:43:66:d7:d7:c9:19:29:ed:8f:6f:b3:e3:0a:
45:0e:7d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:22:49 2026 by rpki-client