
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
File: TfrxJZm8ip9x2mCrOSDgofQBWOU.mft (raw, json)
Hash identifier: Tv5xM2ZcAA8kktfWCv31JxGflUJBwezZ8Z+EQNC3Yx4=
Subject key identifier: 13:15:7A:E4:87:22:0E:06:D4:80:E7:72:91:9B:F9:C8:55:D9:55:82
Authority key identifier: 4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5
Certificate issuer: /CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
Manifest number: 01FC
Signing time: Wed 21 Oct 2026 03:51:37 +0000
Manifest this update: Wed 21 Oct 2026 03:51:36 +0000
Manifest next update: Wed 28 Oct 2026 03:51:36 +0000
Files and hashes: 1: TfrxJZm8ip9x2mCrOSDgofQBWOU.crl (hash: r9Gt8QynPUmIMjHAkvnrYx0/2TKEI77FAIWGrDs30jk=)
2: 61437CA4ABB911F1BD08353C5611F970.roa (hash: 7zLyRUO2jbdPU/ju8XFNTwlDh0zc8bJo13HRv/HfWCI=)
3: 90D05F8EABB711F1BEA6DAFF5411F970.roa (hash: MkS+e7RWc04qmAprNFSaDQdzetMMyHG8u/16PJQSYfQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl
rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 03:51:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186249, serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5
Validity
Not Before: Oct 21 03:51:36 2026 GMT
Not After : Oct 28 03:51:36 2026 GMT
Subject: CN=6ad836c9-fdf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:3d:86:c9:3a:6e:35:90:34:3f:88:61:9c:
36:4d:00:6c:6f:cb:44:31:2b:c4:8b:48:28:38:2b:
ba:cc:c4:b3:4d:29:bf:c5:b6:b8:23:d8:c9:43:ad:
bd:ef:cc:73:11:a4:dc:5e:86:2e:17:4e:65:61:a2:
7b:f6:70:2a:f5:98:18:51:69:2e:1e:88:c7:9a:7d:
2b:1d:e6:6b:a1:81:37:bd:a7:50:77:b7:be:2f:7b:
e3:c0:e0:0b:8c:fa:f1:a9:ba:7e:dc:bf:f9:3b:bd:
8f:b5:0a:b4:02:92:6d:79:82:20:bd:9a:e8:c4:ab:
7e:fe:61:a0:06:46:bd:9d:3c:1a:1b:fb:6c:f6:80:
99:e6:9b:aa:9c:f9:64:df:35:10:4b:30:ef:d0:97:
ab:0f:db:03:93:62:63:a1:73:84:cb:ec:7d:07:6b:
d8:bb:f5:73:6d:b1:25:71:9d:3a:dd:59:0b:9f:63:
ab:20:e2:36:e8:40:5e:17:10:2c:13:b5:5e:b4:9f:
80:23:9d:33:26:3a:5c:08:ef:a7:f3:e7:e5:f4:3d:
aa:3a:3d:68:49:f3:1e:22:ce:73:d3:7e:0f:b8:a0:
ff:66:5a:a6:c3:c3:db:a8:a7:e5:14:bf:ff:9c:f9:
96:41:6b:31:3e:2a:25:fb:5f:81:66:f6:03:8f:bf:
70:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:15:7A:E4:87:22:0E:06:D4:80:E7:72:91:9B:F9:C8:55:D9:55:82
X509v3 Authority Key Identifier:
keyid:4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:9f:3f:3d:ff:89:98:2d:63:6c:5a:8a:a6:c5:37:c1:25:8a:
22:a4:eb:8b:0f:b4:18:de:a9:ec:17:c9:63:3e:2e:92:7f:e1:
ff:04:5e:4f:24:8f:72:d9:46:df:05:b7:4b:c6:ab:91:57:16:
4f:9d:9a:4b:f7:89:9a:1c:5f:18:dc:1f:b2:3f:68:1b:c9:bf:
84:84:0e:f7:d6:35:06:db:59:a1:34:49:23:f1:e8:32:a0:70:
c8:ed:53:46:ea:aa:21:5c:a7:4e:42:80:ea:c2:db:94:1e:17:
de:eb:51:be:7c:f0:85:11:eb:3f:c3:be:4b:58:3f:f9:1f:b5:
4c:8a:35:09:6b:d5:f9:f0:dc:62:a7:14:da:83:ab:21:90:cf:
2f:90:48:7f:81:b0:a2:24:92:d2:b8:50:c5:95:23:fd:b2:4b:
ad:dc:8f:a5:bb:38:a2:6e:f4:71:58:b4:77:2d:ce:6e:b0:dd:
db:47:ee:c4:b2:11:fd:88:c2:9e:25:30:e2:5b:74:9f:3a:0a:
00:96:7e:67:fb:bb:99:18:3a:72:15:4a:6d:3b:8d:f3:e6:bb:
e3:70:b1:eb:a2:49:4c:ed:e2:f5:d8:7d:fb:4e:21:e3:da:15:
83:cd:44:24:3c:a7:fc:b0:d5:af:f5:47:9d:10:18:f3:52:75:
4b:57:fa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 21:14:35 2026 by rpki-client