
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
File: TiH1qoySjAtnV8A-VbClkjxOSKs.mft (raw, json)
Hash identifier: LnPCWbG3ZGP1S2aHnX2uH9kWay3gH1WKKN0RQfmHl3c=
Subject key identifier: 79:CD:FD:35:84:E8:0D:F0:F5:6F:28:8E:91:CC:02:73:38:23:AA:B8
Authority key identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB
Certificate issuer: /CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB
Certificate serial: 01F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
Manifest number: 01ED
Signing time: Thu 21 May 2026 03:26:38 +0000
Manifest this update: Thu 21 May 2026 03:26:37 +0000
Manifest next update: Thu 28 May 2026 03:26:37 +0000
Files and hashes: 1: TiH1qoySjAtnV8A-VbClkjxOSKs.crl (hash: MNpYQ4lHDkhQoZDsIVOlxcgPHH0UL/txpiZcaJCaZEA=)
2: F97DB5F229A111F090BC8163C4F9AE02.roa (hash: 1EHDhgVqidDrXRWgA6OsvGx4WrHFvoHxphKqIoJn6qI=)
3: E586278C29A111F0BA1F4E63C4F9AE02.roa (hash: 7O2mtkzrE7WGBGsCng9QGlpq45C/QzmD5NcTuRUtGbQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl
rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180D79, serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB
Validity
Not Before: May 21 03:26:37 2026 GMT
Not After : May 28 03:26:37 2026 GMT
Subject: CN=6a0e7b6d-0029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:af:55:7d:e1:19:bb:07:fa:7d:c0:53:b2:e1:
5d:d6:83:20:20:62:9a:a2:86:7a:2a:ee:7c:f5:12:
f5:08:0c:87:23:04:88:9d:d2:57:48:5f:be:67:dc:
34:7e:a5:98:c7:8d:7d:13:f6:aa:d0:29:a8:0e:1a:
e2:41:11:f9:de:0b:be:de:8c:95:c2:9e:c6:74:94:
d0:81:6a:0a:71:c8:6f:07:af:e5:bc:48:c2:53:0b:
b9:97:1c:5f:f5:f6:5e:b6:4e:92:c8:98:eb:ec:7b:
a7:e4:c6:aa:f7:45:43:51:d8:2a:85:7a:12:8d:83:
47:16:ef:66:b8:65:0d:05:00:53:16:e8:9f:b9:98:
b8:81:0b:a9:3a:34:26:a6:47:4c:d9:82:77:5d:08:
ac:bf:3e:27:36:39:d8:93:6b:da:20:42:48:c7:62:
9a:02:2c:f4:d4:80:9c:0f:ec:ee:b9:ab:c9:ed:90:
4d:e4:34:9d:67:4b:e5:64:36:e0:e4:94:cf:2d:26:
9c:30:12:e9:e3:cd:80:ca:74:47:cd:a1:e8:0a:ec:
a4:65:d0:c9:43:24:22:8a:a3:f1:f7:43:e0:b3:d2:
a1:cd:02:6e:7f:0b:4c:b3:9e:50:b7:d0:5c:2a:d0:
22:f6:f4:e3:06:0e:26:f7:db:65:87:28:ab:d8:7b:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CD:FD:35:84:E8:0D:F0:F5:6F:28:8E:91:CC:02:73:38:23:AA:B8
X509v3 Authority Key Identifier:
keyid:4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:42:51:e4:36:fe:f9:58:b4:c3:38:28:08:a0:1f:2b:cf:c9:
ed:04:43:8b:f0:6a:45:fb:29:d0:df:c4:e4:97:56:2b:36:cb:
aa:94:fe:51:a7:48:ec:ac:56:df:12:ee:1e:01:0c:d4:23:29:
9b:24:65:b7:4a:16:14:a7:70:9d:75:99:6c:af:b9:06:34:8b:
6d:41:d0:19:74:1a:33:76:e2:1a:30:a6:6b:ff:8d:ff:d9:84:
34:c5:80:91:df:93:82:40:6e:e9:83:4f:91:13:87:2b:93:f3:
e8:66:87:bb:5d:83:27:81:de:9b:1b:79:54:0c:40:60:0b:f5:
fc:b3:33:a5:78:cf:fd:06:78:63:3e:cc:d8:70:ef:17:77:9c:
72:84:1e:38:db:33:65:87:82:a8:34:cf:4f:63:19:c6:56:5e:
78:ba:9e:ce:6e:bb:93:4f:79:21:e8:c1:fd:4e:b4:0d:bc:4c:
e4:01:a6:ca:db:be:9f:d8:b8:f5:4c:0d:22:7a:7b:3e:1f:af:
b0:e1:2c:3a:ff:c8:14:52:e4:a8:c4:5c:df:25:d3:7f:ae:8b:
f7:82:3a:d5:72:2c:cb:2c:da:f6:cb:b3:c3:a3:ac:30:b8:53:
78:f2:d0:c9:76:76:94:b1:bf:d8:ab:01:e3:2e:92:fc:ee:94:
36:8c:3d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:34 2026 by rpki-client