
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft
File: T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft (raw, json)
Hash identifier: lPICUKHVixFAz7vyiaYrlrw6m+kmhY2grdPOiEkmFf4=
Subject key identifier: CA:E0:AB:B9:77:BD:67:46:EE:B9:12:A9:8C:E5:B1:E9:24:25:F2:13
Authority key identifier: 4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58
Certificate issuer: /CN=A9194815/serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258
Certificate serial: 0700
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft
Manifest number: 06F8
Signing time: Tue 18 Aug 2026 22:31:49 +0000
Manifest this update: Tue 18 Aug 2026 22:31:49 +0000
Manifest next update: Tue 25 Aug 2026 22:31:49 +0000
Files and hashes: 1: T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl (hash: b6HpWx19r5YMnZxMQdQq0ZLySlg5sDE2VT/dpJIJ+oM=)
2: z8DuojwefNMfMjHJw4JUXsxVGFU.asa (hash: 8k68+ZnqCsfjRxYjsxWK1ytUdo7eUuggWoUfcv/B8iE=)
3: 873D9ADEA1C411EB9F4FE15EC4F9AE02.roa (hash: +DsTSYc/RFH8M1KKuOG4oJwk1+xRcwtMfs7/UtYIA0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl
rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792 (0x700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194815, serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258
Validity
Not Before: Aug 18 22:31:49 2026 GMT
Not After : Aug 25 22:31:49 2026 GMT
Subject: CN=6a84dd55-493c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d2:0d:e4:b5:c2:9b:2c:31:ee:03:53:cd:28:
c2:86:d9:2d:14:84:1a:ec:90:80:72:8a:69:81:f5:
78:01:bd:8a:48:9d:2c:4e:11:c7:4d:37:74:2a:0f:
50:18:13:5b:50:20:93:d8:44:e8:c5:96:0d:19:a2:
ce:d5:54:f8:2c:c0:91:d8:19:24:55:ef:09:7d:99:
fd:8b:f4:ea:9f:13:9e:f0:00:3b:90:7c:b7:9b:63:
f6:5b:9d:c1:7c:a8:4e:9d:f2:e0:1f:6a:6b:a1:b1:
d5:ea:0b:de:f2:0f:3d:53:52:80:d8:47:ea:7a:64:
c7:bc:c4:5b:46:4f:6c:4c:e6:00:a1:9e:4e:f4:af:
f1:21:01:4e:2a:64:ce:d4:fb:d9:a0:09:d2:52:fb:
e2:f9:15:7c:8d:b7:39:ac:bb:8c:5f:a8:6b:13:1c:
0c:c8:56:ad:2f:eb:6f:71:c8:0a:f1:d4:5e:85:9a:
02:bf:f2:38:9e:26:37:83:56:89:45:80:d5:69:cf:
ba:a9:7a:cf:e9:fd:6e:81:03:fa:58:9e:67:c0:1b:
f6:b2:01:29:10:22:e0:20:9e:89:36:1d:55:d4:e5:
03:58:64:14:0f:74:1b:06:f8:4b:6f:69:e6:ae:ae:
31:3b:33:6d:7a:ee:03:a1:16:5a:35:55:a0:41:83:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E0:AB:B9:77:BD:67:46:EE:B9:12:A9:8C:E5:B1:E9:24:25:F2:13
X509v3 Authority Key Identifier:
keyid:4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:8e:b0:b6:15:4d:b1:0c:5b:23:f1:84:5e:d2:a6:15:90:f3:
24:56:64:2e:78:54:22:af:a5:2d:bc:56:e6:5d:fb:3a:31:59:
aa:28:b8:75:e8:c3:7b:76:1a:b5:cd:cf:93:fd:02:14:00:2e:
f2:c7:c3:79:9a:da:43:a2:05:d0:2b:e5:dc:f0:e6:45:0c:42:
b6:a3:54:3b:a0:ad:0d:c0:ad:78:a3:27:10:e0:be:dc:b0:2b:
e3:26:40:bc:a0:0f:46:c2:ba:32:87:08:a8:8f:6c:75:02:21:
b4:0c:80:72:e2:1a:89:5f:e6:70:ea:7c:62:06:b9:d4:89:a2:
c8:de:2c:5d:0f:a5:68:52:fb:e1:59:d1:45:df:02:a6:a2:5f:
2d:de:cb:32:42:5c:f4:a7:5f:3a:70:16:07:8f:0c:4d:94:83:
6a:a2:7c:94:66:f0:89:b2:ce:4a:ad:0a:43:44:ee:38:40:55:
92:57:1d:1f:ac:a5:f0:44:9e:a0:71:db:ef:68:94:43:eb:a1:
89:af:77:7f:5e:ce:bd:f4:08:29:da:5f:c3:fa:23:6a:dc:78:
9f:d8:82:9e:e8:13:a2:51:29:78:78:8f:6b:75:88:24:18:6d:
cf:b1:14:13:ba:a5:45:fc:34:85:59:93:ea:7b:00:3c:b1:b2:
92:06:c8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:41 2026 by rpki-client