
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
File: TiH1qoySjAtnV8A-VbClkjxOSKs.mft (raw, json)
Hash identifier: QlyqIct6hWvXSRP6V817M1N0QF/3CxqLPcbe34PYrHw=
Subject key identifier: F7:76:EA:FC:25:2E:3D:31:DC:80:CA:C3:80:3E:A8:00:BA:D0:31:0B
Authority key identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB
Certificate issuer: /CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB
Certificate serial: 024E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
Manifest number: 0240
Signing time: Thu 29 Oct 2026 03:11:52 +0000
Manifest this update: Thu 29 Oct 2026 03:11:52 +0000
Manifest next update: Thu 05 Nov 2026 03:11:52 +0000
Files and hashes: 1: TiH1qoySjAtnV8A-VbClkjxOSKs.crl (hash: fgiZcctfEYgHl1FvEG5kwhvIm6HD2CrMDlgYCLiGcSw=)
2: E586278C29A111F0BA1F4E63C4F9AE02.roa (hash: TWqXRNuHNGqT9xQFkTm/MRTTDI5Xz/E8TDTyfszyBXc=)
3: F97DB5F229A111F090BC8163C4F9AE02.roa (hash: 8nTlPDZ0DSsBBfv62oC2hGynFbU3zo/HuUWjusgg60k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl
rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 03:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180D79, serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB
Validity
Not Before: Oct 29 03:11:52 2026 GMT
Not After : Nov 5 03:11:52 2026 GMT
Subject: CN=6ae2b978-a212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:b8:cd:84:70:23:3a:78:59:3e:0b:b5:ff:
80:f0:8e:13:cd:d6:c0:7f:51:ae:90:e3:2f:e0:db:
9d:c9:8b:8d:d4:0b:54:86:f1:b1:d7:88:46:d1:ba:
9e:00:66:63:08:2a:be:f6:25:1d:e9:8d:f1:02:10:
53:d1:90:fb:91:00:58:4b:ba:76:62:9d:89:c4:77:
d0:f1:d7:39:ab:b2:55:b2:db:b5:b9:6b:c7:6c:a4:
14:34:b5:a8:3f:ba:a1:27:cc:1d:1e:7d:67:c8:83:
1c:08:b7:87:e1:d6:5f:f2:09:79:c3:c8:25:29:d5:
66:b6:23:19:c7:73:3f:cc:11:31:f3:90:6a:09:b6:
79:95:7a:bf:c2:cf:49:a5:de:14:9f:5b:ac:0a:8e:
38:ab:e7:82:cd:6b:b0:2b:d8:9a:89:90:62:56:23:
49:1f:9c:51:bc:bd:8d:94:88:50:0e:cb:5d:d8:fc:
44:46:b3:3b:4a:e6:82:8b:39:68:cb:4c:8b:55:31:
d6:38:1e:f3:58:84:59:9c:7a:20:14:84:75:f0:08:
14:5c:33:df:df:4b:1c:bc:9c:f4:66:4d:85:8c:9f:
ea:37:58:59:bf:bb:6e:34:e7:2f:3a:bb:a1:04:53:
f9:4b:ca:d3:82:b4:7d:91:65:f0:49:07:2f:5e:69:
43:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:76:EA:FC:25:2E:3D:31:DC:80:CA:C3:80:3E:A8:00:BA:D0:31:0B
X509v3 Authority Key Identifier:
keyid:4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:6a:c4:41:85:5d:7f:00:f5:30:4c:2a:60:02:fb:3c:4c:03:
d5:0d:db:9b:28:34:5c:9e:1a:97:2b:46:6d:2e:0d:c6:d8:25:
8d:d4:7d:e0:45:99:5b:ad:78:ba:14:3f:f0:ff:51:29:c4:f3:
88:43:ed:96:9d:85:a4:79:e0:bf:2c:aa:7b:e9:62:fc:f6:28:
21:33:b9:21:2e:0b:f8:bc:52:20:6a:da:05:51:d5:14:36:52:
27:fd:f8:27:fe:b0:5e:89:df:64:df:6a:8c:b2:1f:21:d4:63:
40:31:1a:f5:27:59:9a:e6:88:80:74:da:99:8e:5a:c1:7e:73:
ea:e0:c4:64:4b:16:65:a3:d7:2c:c5:6a:4c:44:45:dd:6b:d2:
0d:ff:2c:06:33:07:71:6d:30:d2:17:b5:e1:68:78:26:f7:a3:
4c:9b:d7:f5:a7:3c:4a:5e:4e:d5:65:45:77:b0:39:21:c0:b8:
bc:f0:46:d4:83:9e:d3:62:1f:b9:28:73:e4:1a:69:e6:d3:19:
35:e5:3c:99:4c:3c:1f:a6:d4:ad:07:22:90:a5:52:0e:58:1d:
bd:9f:19:c7:0f:a1:c4:46:1b:aa:51:e3:39:90:9d:b9:43:b4:
4b:97:25:e4:d4:b9:40:7d:aa:1c:4f:fa:1e:93:9a:33:69:ac:
4c:d5:07:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODBENzkxMTAvBgNVBAUTKDRFMjFGNUFBOEM5MjhDMEI2NzU3QzAzRTU1QjBBNTky
M0M0RTQ4QUIwHhcNMjYxMDI5MDMxMTUyWhcNMjYxMTA1MDMxMTUyWjAYMRYwFAYD
VQQDEw02YWUyYjk3OC1hMjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtre4zYRwIzp4WT4Ltf+A8I4TzdbAf1GukOMv4NudyYuN1AtUhvGx14hG0bqe
AGZjCCq+9iUd6Y3xAhBT0ZD7kQBYS7p2Yp2JxHfQ8dc5q7JVstu1uWvHbKQUNLWo
P7qhJ8wdHn1nyIMcCLeH4dZf8gl5w8glKdVmtiMZx3M/zBEx85BqCbZ5lXq/ws9J
pd4Un1usCo44q+eCzWuwK9iaiZBiViNJH5xRvL2NlIhQDstd2PxERrM7SuaCizlo
y0yLVTHWOB7zWIRZnHogFIR18AgUXDPf30scvJz0Zk2FjJ/qN1hZv7tuNOcvOruh
BFP5S8rTgrR9kWXwSQcvXmlDWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPd26vwl
Lj0x3IDKw4A+qAC60DELMB8GA1UdIwQYMBaAFE4h9aqMkowLZ1fAPlWwpZI8Tkir
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEQ3OS9FMTgyMDhCQzZE
OUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pBdG5WOEEtVmJDbGtqeE9T
S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RpSDFxb3lTakF0blY4QS1WYkNsa2p4T1NLcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MEQ3OS9FMTgyMDhCQzZEOUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pB
dG5WOEEtVmJDbGtqeE9TS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAr2rEQYVdfwD1MEwqYAL7PEwD1Q3bmyg0XJ4alytGbS4NxtgljdR94EWZW614
uhQ/8P9RKcTziEPtlp2FpHngvyyqe+li/PYoITO5IS4L+LxSIGraBVHVFDZSJ/34
J/6wXonfZN9qjLIfIdRjQDEa9SdZmuaIgHTamY5awX5z6uDEZEsWZaPXLMVqTERF
3WvSDf8sBjMHcW0w0he14Wh4JvejTJvX9ac8Sl5O1WVFd7A5IcC4vPBG1IOe02If
uShz5Bpp5tMZNeU8mUw8H6bUrQcikKVSDlgdvZ8Zxw+hxEYbqlHjOZCduUO0S5cl
5NS5QH2qHE/6HpOaM2msTNUH4g==
-----END CERTIFICATE-----
Generated at Thu Oct 29 13:48:49 2026 by rpki-client