
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
File: tLhVi-xUNiD-bqkv68XoqSchTDk.mft (raw, json)
Hash identifier: lxY7DPKYouMAsH9U0/ypig30Cy6uPXa7j2t9WHfqvV0=
Subject key identifier: D4:7F:1F:65:07:23:1A:50:C5:A2:CB:DA:4E:27:02:EA:D8:84:29:18
Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39
Certificate issuer: /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39
Certificate serial: 0AE2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
Manifest number: 0AD3
Signing time: Tue 12 May 2026 19:29:21 +0000
Manifest this update: Tue 12 May 2026 19:29:21 +0000
Manifest next update: Tue 19 May 2026 19:29:21 +0000
Files and hashes: 1: tLhVi-xUNiD-bqkv68XoqSchTDk.crl (hash: oSleebEUk9YHIfWLXLY9lq670JLgG/OwFscjsokwvAw=)
2: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (hash: utr9cvGOzINqaYUQ/dmwQU5yDRbxn3goNF9CCVXnSpA=)
3: FC46090E9C2611F093B6FA57C4F9AE02.roa (hash: Js8cZgoWxEm28eX384SK+YZXcmAPJ6mZANs9VezfqXk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl
rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2786 (0xae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110BA6, serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39
Validity
Not Before: May 12 19:29:21 2026 GMT
Not After : May 19 19:29:21 2026 GMT
Subject: CN=6a037f91-6cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:7f:98:67:04:76:76:f3:3d:04:66:eb:9c:
c7:17:f5:17:2a:30:7e:a9:6e:b0:43:11:2d:c5:c4:
9e:60:58:f3:c3:0a:b6:a3:95:f9:b4:6f:6f:94:18:
d2:44:31:09:4f:c1:43:c0:4f:49:a1:aa:12:4e:4a:
e7:70:32:4d:ee:df:ee:d0:2e:fe:fd:e9:e6:19:13:
f4:c0:a4:26:c1:5d:99:7d:81:de:d0:56:18:dd:7f:
5e:f5:80:85:14:24:18:c7:ab:33:e9:38:9b:a8:ad:
8b:f0:fb:31:14:41:63:93:09:3f:a6:f3:e9:67:bb:
6d:31:4a:a6:28:ed:ad:4e:1f:af:91:a3:22:82:e5:
c4:96:18:15:1a:eb:c7:f7:3b:05:ba:32:ad:77:86:
2c:09:ae:77:6e:35:a2:3d:b9:7a:9e:c7:ad:b7:41:
34:e0:bc:04:c5:b4:e4:aa:55:e7:ff:c6:31:c6:c8:
9d:a2:0b:c0:ef:2c:19:8c:aa:63:ff:f6:a3:4d:42:
23:85:66:fa:ae:49:4e:f1:88:f5:36:ab:9d:15:84:
ff:41:94:7b:55:98:1f:b1:46:de:ef:87:6d:63:e5:
da:a6:3b:1e:ae:57:8d:a4:ea:c4:6d:37:1c:93:7a:
fc:c7:5a:31:5b:35:b6:a2:55:35:cd:3b:30:8a:60:
11:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7F:1F:65:07:23:1A:50:C5:A2:CB:DA:4E:27:02:EA:D8:84:29:18
X509v3 Authority Key Identifier:
keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:15:80:05:85:20:9f:ff:69:bd:88:dc:b7:b6:17:61:71:26:
9a:14:54:63:d4:e1:cc:5c:a5:f7:50:a6:84:b8:9a:fe:07:85:
78:89:42:df:ec:f4:81:fa:82:c6:e3:ba:08:94:c1:0c:89:3e:
e2:52:0a:7b:95:93:9b:18:f0:93:76:41:5f:ef:ad:1e:cb:5a:
f7:68:1d:d6:f1:db:7e:ac:80:0f:f7:6f:e6:60:eb:d0:ab:9b:
b4:c0:76:c1:52:be:ae:88:45:81:a2:cb:c7:38:64:89:3f:da:
08:ac:49:e6:5a:be:0b:b7:96:ba:cd:8b:24:ae:2f:78:70:44:
c7:44:69:b5:5f:92:6f:9c:74:3e:e6:c9:37:64:ef:84:a6:5f:
c4:06:eb:0b:ab:62:73:25:c1:36:23:8c:4b:88:a5:c6:52:00:
3b:3f:86:bf:70:73:66:db:33:95:51:17:88:9f:47:8c:c1:31:
3f:03:b4:c5:22:5a:af:87:4f:5f:05:0b:f1:26:95:5c:82:f5:
73:2b:39:d2:20:46:87:ca:88:e4:7a:58:ef:9e:04:23:9a:ad:
9a:d6:06:4a:fd:6c:00:77:09:5d:44:9f:28:6c:98:38:9d:1d:
6e:20:31:66:69:c7:5b:b3:43:4b:55:f5:a8:7a:17:e0:4e:d7:
66:58:f9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:28 2026 by rpki-client