
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
File: tJhXdJtDHfMjL417C4OVpy_9GEk.mft (raw, json)
Hash identifier: zu7Gj8aFD2tN6E4g8kE169YWAPTvGN9A/QA+Q1Oip+M=
Subject key identifier: 22:7E:02:EA:01:B7:3E:6E:93:83:0B:DA:4D:73:5F:2C:A3:3C:AB:2D
Authority key identifier: B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49
Certificate issuer: /CN=A918E293/serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849
Certificate serial: 023C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
Manifest number: 0235
Signing time: Tue 23 Jun 2026 02:47:34 +0000
Manifest this update: Tue 23 Jun 2026 02:47:33 +0000
Manifest next update: Tue 30 Jun 2026 02:47:33 +0000
Files and hashes: 1: tJhXdJtDHfMjL417C4OVpy_9GEk.crl (hash: vvUgiUzQ0Dng16t4g88EaOFp9kgJZXO7ze9A5ZuIelE=)
2: D865F69A233111EE813C5D26C4F9AE02.roa (hash: i4fkr2yi7rKl11iHs6wQVlIoLCufxpnrDVj0EZBu5xg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl
rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 02:47:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E293, serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849
Validity
Not Before: Jun 23 02:47:33 2026 GMT
Not After : Jun 30 02:47:33 2026 GMT
Subject: CN=6a39f3c6-35df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:6e:ba:17:dd:63:8f:20:74:4c:c0:b8:3f:
f7:0d:4a:ea:b7:58:ad:fd:79:16:7b:e9:bc:0d:9d:
6c:b1:17:4d:0f:d1:4f:30:76:00:34:93:b7:7d:d2:
69:b5:3b:d6:55:4b:ea:15:f3:83:0f:e8:d6:6e:a4:
ad:6f:e7:ca:cb:da:87:b9:b2:df:b2:ba:d7:dd:ce:
fc:a9:90:00:66:4c:7e:07:29:7c:30:65:9b:aa:55:
54:19:f0:b2:70:1c:87:04:c5:6b:b6:f9:23:f5:ca:
bd:ae:d9:39:ff:38:87:c1:c3:1f:7a:e8:2a:8f:8d:
58:e3:f0:91:53:c3:a2:18:b5:10:b4:58:ca:71:fe:
52:e1:ac:06:a6:ed:ce:c1:4a:19:99:64:15:04:6d:
1d:0c:66:6d:10:96:1f:ce:d1:b5:b4:ca:6b:36:ba:
a8:56:53:1b:8a:c9:18:4f:58:00:22:ae:9e:33:7b:
a2:3c:ea:4a:aa:46:2f:72:e3:44:44:c2:a0:ed:85:
d8:b2:31:7e:10:f9:93:c8:0e:02:3b:09:77:2b:c5:
5e:b1:9a:3a:b8:cd:f6:c0:fa:b6:32:6f:00:ad:69:
c3:f5:3d:c0:5a:89:aa:52:f8:16:46:f1:66:86:2e:
fe:94:16:34:19:a6:62:50:65:f6:b2:7a:b0:c7:b6:
d6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7E:02:EA:01:B7:3E:6E:93:83:0B:DA:4D:73:5F:2C:A3:3C:AB:2D
X509v3 Authority Key Identifier:
keyid:B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:24:e9:be:39:7a:8b:b0:c1:a6:73:f5:f6:77:d0:91:9d:e6:
8f:8f:31:30:39:de:82:c2:52:ab:40:f8:1e:bb:2f:4a:85:52:
18:03:f3:50:87:61:14:65:6c:05:8c:b8:4e:59:4c:b6:db:4b:
34:7a:14:5d:0f:87:a3:1c:16:19:29:b5:3d:e9:a4:b1:b0:4f:
9c:38:38:a3:27:4e:1b:61:66:08:25:7c:15:e2:50:76:fd:a8:
ef:5e:ef:e0:ae:39:2d:82:45:d5:f9:fd:89:e2:cd:3c:f5:d9:
01:d3:c2:45:42:31:a8:2b:0c:9b:5f:fc:e6:62:60:14:54:21:
c5:e8:95:88:4d:0d:63:fd:65:63:50:06:d5:9b:32:95:6c:12:
ec:96:f4:68:40:f1:4e:fb:45:09:d8:8a:67:a4:f6:39:4a:42:
85:bd:0b:39:eb:cb:57:e6:17:de:da:c0:de:62:ed:43:67:2c:
be:f5:11:50:7c:c4:c1:f1:c5:2c:76:57:ad:3d:a1:52:9e:06:
7d:96:2d:8f:f3:f0:2c:44:71:70:c2:e0:49:5e:1f:75:eb:bd:
fd:da:4c:57:54:bd:78:ae:fb:68:a6:21:f6:50:49:24:fa:8c:
0d:05:dd:d0:42:4f:ca:c9:ce:77:bc:70:ae:e7:36:79:43:c9:
51:bb:de:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:25:17 2026 by rpki-client