
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
File: _tgXL4qVo1IC1RxvdfqUfehE9M0.mft (raw, json)
Hash identifier: IZ7gq5OspOyUs20ck9CzKuBmLh9FYdBeLQXhSjDu5Eo=
Subject key identifier: 5C:20:AA:02:F0:6D:73:76:91:D8:3B:61:1F:68:52:31:3B:6A:43:C1
Authority key identifier: FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD
Certificate issuer: /CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
Certificate serial: 01AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
Manifest number: 01A5
Signing time: Thu 11 Jun 2026 06:18:12 +0000
Manifest this update: Thu 11 Jun 2026 06:18:11 +0000
Manifest next update: Thu 18 Jun 2026 06:18:11 +0000
Files and hashes: 1: _tgXL4qVo1IC1RxvdfqUfehE9M0.crl (hash: I8xXe310HzSdnUvxQGQdxHSEM1e/6qhQQyy2IIaobHA=)
2: 994A883AE06511EEA8CEC61EC4F9AE02.roa (hash: iAJ7bJgPc3fvc0VT2Ih64KNDwG9PjNk9khGO+aQcVnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl
rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 06:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198D95, serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
Validity
Not Before: Jun 11 06:18:11 2026 GMT
Not After : Jun 18 06:18:11 2026 GMT
Subject: CN=6a2a5324-11ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:ab:2b:55:48:f2:4e:52:51:8e:2f:ba:97:
1b:b4:bd:73:f0:f8:d9:8d:21:00:f6:cb:5c:84:b0:
c9:47:87:39:c0:ca:f6:0c:f4:ce:a5:61:fb:1a:b0:
f7:2d:bd:ff:56:56:6b:59:9b:91:37:5d:1f:6f:5a:
9b:df:d8:6f:5e:bb:da:72:10:9d:72:d3:ed:f5:fd:
89:4d:4c:0b:96:3f:54:2e:2b:f8:bf:9c:07:66:49:
f6:43:15:90:8a:1c:67:06:b5:4a:ef:63:16:73:7d:
30:d4:39:f3:d0:24:91:fc:85:61:6a:23:f6:d6:99:
af:31:91:a8:81:f0:73:73:de:a3:d8:bc:a0:bd:bb:
86:fd:e1:43:05:6e:d1:4e:c2:48:77:fb:5c:e2:15:
31:5a:80:24:63:2e:0d:06:03:d0:59:13:f7:e7:a7:
7a:e9:d6:24:05:39:5b:e9:d8:34:ea:10:db:c6:7b:
a0:6c:95:49:99:a1:a9:aa:4d:b1:39:fe:6e:65:15:
69:aa:dc:8c:62:c3:eb:04:39:21:30:0e:52:c7:51:
52:7f:71:02:2c:dd:5f:63:de:77:d6:cc:d6:eb:da:
a5:23:6a:b0:47:7a:88:35:d4:be:0f:cc:d2:be:b3:
78:d4:01:1c:b8:a2:ad:dd:2f:d5:f7:8f:00:c6:ee:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:20:AA:02:F0:6D:73:76:91:D8:3B:61:1F:68:52:31:3B:6A:43:C1
X509v3 Authority Key Identifier:
keyid:FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:df:12:2e:8b:3b:87:b6:7f:b1:0b:06:66:e4:60:f9:09:8d:
44:e5:96:0a:2e:11:7d:f8:a0:c5:12:bb:7d:eb:ec:1d:e3:11:
be:de:5d:06:a9:15:a7:a8:93:21:30:e9:90:c6:55:61:bc:08:
fa:2b:18:25:f4:b0:66:90:b8:4e:d3:fa:c8:9a:eb:6c:e6:f5:
32:30:ed:f5:38:38:75:46:f7:cd:a6:25:b7:85:76:cd:53:48:
1a:82:6f:81:df:c5:aa:23:ba:51:26:78:53:b6:53:95:3e:a9:
4f:67:e0:e4:27:18:d6:40:b4:f2:19:f4:a4:c1:9a:03:e3:e5:
9a:5c:37:7b:4a:c8:0b:14:9d:db:8a:9c:45:c9:3b:f5:66:b2:
72:75:81:01:c0:1f:1f:89:43:e3:79:6c:2a:9a:29:f0:88:11:
7f:47:43:54:d1:20:f8:77:01:46:de:c2:8b:ab:8d:8a:4a:b4:
f7:c7:b6:11:51:be:0e:d7:84:60:03:bd:83:67:ac:ff:e6:0f:
e6:bc:36:f0:40:dc:bb:a1:9a:0e:94:27:d7:94:54:3e:7f:ba:
f4:3e:da:1d:2b:0b:18:ef:dc:b4:00:6a:81:98:5e:73:bb:96:
0a:5e:58:78:54:0d:24:0c:69:d2:7e:d3:c1:1b:d1:b7:7e:b8:
8e:21:0e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 20:12:36 2026 by rpki-client