
$ rpki-client -vvf rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
File: 0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft (raw, json)
Hash identifier: rvox5hPLbk7pIX7wdhEXPJEEi/4Bu+nh633nxA80GFQ=
Subject key identifier: 4E:8A:0E:23:E3:BD:3A:49:01:63:F2:87:F4:6D:99:47:B7:A0:3A:FB
Authority key identifier: D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9
Certificate issuer: /CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9
Certificate serial: 11B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
Manifest number: 1196
Signing time: Tue 18 Aug 2026 17:23:09 +0000
Manifest this update: Tue 18 Aug 2026 17:23:09 +0000
Manifest next update: Tue 25 Aug 2026 17:23:09 +0000
Files and hashes: 1: 0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl (hash: 8piyschVsf3/27YEeBqBEecS6BhOPtJdpkcxxJRHdlg=)
2: 1ED5B13E30C111ECBB5A4116C4F9AE02.roa (hash: FMzrYGVGOtWt5cmIpjK8kf84YehxjN48qZYSg0E+H9o=)
3: 0E17B1AE78F511EC83E56014C4F9AE02.roa (hash: W4h7IWYUmM/hyejWwAL7UxMd6DDsYA0doq+8X7am/ms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl
rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4535 (0x11b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919608D, serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9
Validity
Not Before: Aug 18 17:23:09 2026 GMT
Not After : Aug 25 17:23:09 2026 GMT
Subject: CN=6a8494fd-ac22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:01:79:6e:c9:50:07:f2:18:07:57:63:2d:
f5:3c:b5:35:80:c0:4f:c2:23:b3:db:9d:e6:58:4b:
97:aa:0e:ce:52:f2:d5:fb:ee:22:d4:d1:00:c8:8f:
1b:61:5b:27:94:3a:36:a0:20:f5:40:16:dc:08:b6:
23:5e:ba:5d:82:63:cb:d1:4d:08:f8:c8:fd:c6:fa:
01:a5:bb:dc:7b:0d:ce:aa:56:03:1e:19:d3:0b:87:
ea:c4:6c:a3:16:a1:17:1f:da:04:91:50:d5:36:d6:
d5:8e:2f:7a:7e:eb:ba:dc:9c:5d:27:7d:a8:40:d9:
ce:29:f9:05:09:86:99:ee:97:1b:df:20:8c:59:40:
9b:49:af:3d:bd:87:1f:13:c8:92:57:ce:12:49:b4:
49:42:6b:23:1b:aa:60:57:8a:6d:8a:88:fa:fe:9c:
7d:f6:93:1c:9d:b8:cc:8c:21:5d:89:a8:3d:b3:84:
0d:84:f1:01:df:02:f0:70:15:ba:bd:b2:cf:b3:4b:
56:42:65:5c:86:62:74:66:1b:55:5e:ef:af:fd:ab:
62:a6:d1:ec:35:fa:84:63:27:ef:b6:c8:ba:44:75:
76:f1:1b:da:08:ac:45:c6:18:bb:f9:75:a9:d2:13:
d2:a2:59:92:f5:a4:c4:61:ca:e9:58:9c:e7:3d:3e:
df:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8A:0E:23:E3:BD:3A:49:01:63:F2:87:F4:6D:99:47:B7:A0:3A:FB
X509v3 Authority Key Identifier:
keyid:D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:0f:dc:7f:5e:0d:cd:f4:7a:9a:55:0e:ee:a3:51:35:a1:b0:
af:70:71:50:39:a5:37:7d:e4:6e:4b:33:83:ee:11:b0:0f:d4:
18:88:d2:59:ca:3f:79:10:85:43:21:78:6d:8f:e9:4b:d5:4c:
ac:79:fd:1b:08:90:9e:e5:b7:36:74:9e:d0:40:e1:ce:12:7c:
6f:b5:eb:bc:bb:b3:d1:a6:be:a3:d9:3a:c8:b6:59:c5:56:ba:
cd:08:e0:d4:b1:c2:d7:d8:ef:0e:ff:ff:92:f2:5d:ca:53:4e:
9d:66:15:5b:8f:40:0b:dc:e1:5a:cf:44:c7:d9:c7:9b:a5:c8:
f4:da:e5:e3:10:5f:dc:3f:fd:c4:31:08:a4:67:4d:47:be:fe:
54:0c:df:7b:27:1c:c9:d5:ae:bd:11:cd:bb:73:58:95:15:f8:
6a:cb:cd:b3:56:3e:8b:29:2a:41:86:56:e0:15:7d:ad:8c:4e:
f6:10:68:a6:77:03:7c:fe:b4:c5:58:fd:2d:3c:e8:51:33:46:
b6:b5:85:7a:e2:fb:ee:c9:0e:c8:40:e6:1a:cb:b9:a4:39:cc:
ec:3c:49:bf:70:aa:4a:41:3d:60:bb:83:95:b4:8a:3d:7d:b0:
2c:de:aa:58:e0:f3:f8:60:f7:41:24:74:9e:7a:3f:41:d4:a6:
a6:61:27:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 21:42:18 2026 by rpki-client