
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/TIqaNuqRWzx9UgH9An2-bMHe9H0.mft
File: TIqaNuqRWzx9UgH9An2-bMHe9H0.mft (raw, json)
Hash identifier: LSR+sHuIDeBRRs3Th0yHSt+ooage/WrptmhFGgekBa4=
Subject key identifier: 6E:7C:68:46:D0:A6:F8:F4:23:CE:35:B7:AC:01:EF:78:E7:E7:9B:A7
Authority key identifier: 4C:8A:9A:36:EA:91:5B:3C:7D:52:01:FD:02:7D:BE:6C:C1:DE:F4:7D
Certificate issuer: /CN=A919B8FD/serialNumber=4C8A9A36EA915B3C7D5201FD027DBE6CC1DEF47D
Certificate serial: 5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIqaNuqRWzx9UgH9An2-bMHe9H0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/TIqaNuqRWzx9UgH9An2-bMHe9H0.mft
Manifest number: 5E
Signing time: Thu 03 Sep 2026 08:21:31 +0000
Manifest this update: Thu 03 Sep 2026 08:21:31 +0000
Manifest next update: Thu 10 Sep 2026 08:21:31 +0000
Files and hashes: 1: TIqaNuqRWzx9UgH9An2-bMHe9H0.crl (hash: ZS+RNYYwohlWFzC9WX/l7ntySsSFkwAixfMCZWKiDlc=)
2: 8565C302193411F1A01740F4343D8C67.roa (hash: Xa8aNC8yN08FK0E304SMW4mGgVgv5gPY8tv9Z+LN8jg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/TIqaNuqRWzx9UgH9An2-bMHe9H0.crl
rsync://rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/TIqaNuqRWzx9UgH9An2-bMHe9H0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIqaNuqRWzx9UgH9An2-bMHe9H0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:21:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B8FD, serialNumber=4C8A9A36EA915B3C7D5201FD027DBE6CC1DEF47D
Validity
Not Before: Sep 3 08:21:31 2026 GMT
Not After : Sep 10 08:21:31 2026 GMT
Subject: CN=6a992e0b-736f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5b:ed:6a:12:de:2c:8f:6b:06:d2:0a:44:22:
a8:95:8e:72:f6:67:c1:db:80:40:b7:ce:b0:c9:9a:
06:74:9d:d0:c8:dc:b6:72:8f:9e:10:16:66:c9:aa:
de:4c:f0:18:28:b0:59:f3:e3:73:f5:49:e5:ed:a1:
83:c1:48:22:ad:bb:d6:ce:e9:f4:8a:8e:0b:aa:8f:
b7:2c:cf:2a:ce:d1:2f:96:8b:fc:b9:20:7c:48:be:
19:f3:f5:26:bf:d6:82:c8:54:38:75:25:23:c0:8a:
af:34:ca:9f:c0:ca:14:8a:62:54:46:37:c8:10:ac:
c8:91:41:17:6e:88:89:37:da:50:f0:19:c8:bd:18:
2a:40:31:0b:24:5a:b5:2d:cb:07:d2:b2:98:20:c7:
a0:ef:98:35:cd:a2:b0:cd:09:e3:cb:0d:48:2a:1a:
37:2e:c7:bd:c4:8b:98:58:ee:2a:2e:df:0a:05:63:
b2:c6:9b:41:b1:e8:ae:4b:95:73:ab:d2:ad:c5:f4:
08:82:8b:bb:73:e5:c2:c7:16:cd:ff:f3:4e:ae:39:
61:a1:83:94:86:7e:e5:e0:af:3f:81:42:9e:ba:5b:
a1:58:57:59:d9:42:ff:8f:d5:87:bc:02:48:aa:c7:
8c:f6:64:19:7f:1a:a3:58:9d:c4:a7:6e:ab:2e:4c:
66:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7C:68:46:D0:A6:F8:F4:23:CE:35:B7:AC:01:EF:78:E7:E7:9B:A7
X509v3 Authority Key Identifier:
keyid:4C:8A:9A:36:EA:91:5B:3C:7D:52:01:FD:02:7D:BE:6C:C1:DE:F4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/TIqaNuqRWzx9UgH9An2-bMHe9H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIqaNuqRWzx9UgH9An2-bMHe9H0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/TIqaNuqRWzx9UgH9An2-bMHe9H0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b7:40:fa:00:43:b8:ba:94:5a:0f:92:2e:be:a4:ee:e4:32:
0c:0f:d8:07:b6:f9:d6:8a:0d:80:08:7c:0b:ae:29:dd:07:ee:
25:ff:4a:d5:b6:82:0b:a6:e0:cb:a3:76:5c:df:84:c0:cb:ab:
a9:24:d3:4b:aa:be:54:c3:5f:fe:58:b3:d3:7c:75:97:7c:6c:
4c:7f:4c:aa:4a:d9:be:41:21:09:b1:57:bb:f8:b7:57:35:3f:
85:8e:64:33:bd:bf:b2:76:51:69:3c:bd:33:c0:32:56:5b:17:
51:8b:8a:bd:7d:23:c2:7a:c7:8c:ed:f9:29:77:10:b4:46:67:
56:dc:c1:bc:60:00:f0:41:98:74:a5:c2:9e:88:35:17:46:fc:
0c:ce:82:20:7c:ce:2f:ff:81:d8:2c:46:43:14:0a:f0:a0:af:
9c:b2:e6:7e:85:de:d6:6d:ec:e2:92:8f:37:c9:18:70:2d:87:
cc:ef:a1:6c:c2:e6:22:07:3d:be:94:34:b6:66:69:1d:e4:fa:
b2:22:95:d7:11:d6:3b:db:90:7c:b6:ee:86:01:e6:71:22:d4:
5e:21:73:2b:59:9f:ab:c1:b5:b8:90:23:b7:5c:94:2b:5b:39:
18:63:7d:b2:75:eb:ac:7f:87:0a:21:7c:f4:e5:b4:8f:4c:17:
e6:87:f2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:03:12 2026 by rpki-client