
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
File: tLhVi-xUNiD-bqkv68XoqSchTDk.mft (raw, json)
Hash identifier: Ck+mspg8I2sLB7cLoRExRRKJqR0uRGrToQNjUDS5GWM=
Subject key identifier: 4D:53:A2:4C:CA:27:47:87:C8:94:72:97:2A:FF:86:68:EE:64:72:CF
Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39
Certificate issuer: /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39
Certificate serial: 0AC9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
Manifest number: 0ABA
Signing time: Tue 24 Mar 2026 19:16:39 +0000
Manifest this update: Tue 24 Mar 2026 19:16:39 +0000
Manifest next update: Tue 31 Mar 2026 19:16:39 +0000
Files and hashes: 1: tLhVi-xUNiD-bqkv68XoqSchTDk.crl (hash: Nllvl+pAqfj2mRR6Yigl827bv7/FohI901dmnnt8Ums=)
2: FC46090E9C2611F093B6FA57C4F9AE02.roa (hash: Js8cZgoWxEm28eX384SK+YZXcmAPJ6mZANs9VezfqXk=)
3: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (hash: utr9cvGOzINqaYUQ/dmwQU5yDRbxn3goNF9CCVXnSpA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl
rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2761 (0xac9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110BA6, serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39
Validity
Not Before: Mar 24 19:16:39 2026 GMT
Not After : Mar 31 19:16:39 2026 GMT
Subject: CN=69c2e317-2038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:50:3c:54:39:e1:a0:21:c5:64:19:2e:b8:
87:8e:66:dc:b1:e9:e1:a4:d7:51:0e:25:b6:bc:ef:
87:ec:9e:be:17:de:9d:cd:e7:57:70:40:02:e9:73:
f0:f2:37:23:f6:e0:72:4b:d4:5a:ea:9c:e9:55:09:
ff:b5:ad:e5:f4:5a:62:ed:47:54:0f:d5:1b:57:38:
4a:1b:2b:d9:7d:b6:0d:54:29:f6:58:a6:e9:68:80:
55:be:1a:13:16:f3:f3:5a:f6:24:61:f6:90:f3:0d:
ff:6d:f1:fd:e8:74:ae:2e:d3:65:f6:a8:67:f2:77:
dd:5a:ea:7c:5a:ea:2e:4f:3c:fd:02:9d:e6:bf:e4:
5e:46:c5:07:88:26:0b:de:8f:99:9e:d1:07:08:9d:
65:e6:57:d6:96:af:60:2f:06:ab:b7:af:6c:04:f6:
dd:8e:2d:25:84:f8:51:23:d7:e2:2d:34:e9:55:97:
42:8d:f7:6b:3d:d8:85:bb:29:a0:43:0e:22:a8:10:
5e:87:ad:b4:45:ed:bb:c1:cc:2c:2d:40:ad:de:7a:
2b:75:48:88:a3:96:07:0c:ce:38:f7:1f:03:ce:89:
90:2d:12:92:ed:20:5f:c3:1a:82:45:68:9b:9a:ea:
41:a4:69:ac:4d:6d:dc:54:ce:72:b2:53:dd:6e:70:
27:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:53:A2:4C:CA:27:47:87:C8:94:72:97:2A:FF:86:68:EE:64:72:CF
X509v3 Authority Key Identifier:
keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:69:8b:c3:cb:58:4a:cb:54:ed:0e:96:a3:cf:40:d2:0a:78:
8c:59:51:40:74:7e:8b:04:8f:55:8b:13:a7:27:44:4d:a6:54:
cc:7b:4a:b6:ba:7a:25:70:07:d4:91:21:c8:2f:f3:53:d2:ee:
0b:dd:91:96:ca:79:f6:f5:d2:4b:ca:92:b3:2b:f7:0e:05:9f:
4a:5c:1b:e5:e9:57:9d:ea:d0:e6:7f:34:5a:44:3d:9d:57:cc:
d4:cb:bf:78:ea:cb:7d:d6:b3:c6:ef:7b:b9:37:eb:9d:f3:47:
27:9e:42:8d:3f:c7:c9:66:15:85:e1:6a:da:40:a2:81:4c:ec:
54:ae:ee:a6:62:fa:60:ae:c5:7b:79:66:d3:6a:99:e4:62:5f:
77:00:4a:76:b7:01:7d:cc:49:ae:4f:4c:4f:38:dd:49:95:fc:
38:cb:91:1f:83:91:3f:50:74:9a:d4:1c:d8:30:94:4a:11:45:
bd:20:8c:a6:bd:d9:6c:27:8b:2c:8a:2e:df:9e:b8:7c:2a:57:
14:48:58:73:a6:3a:88:61:cb:99:c4:d9:6e:10:82:b0:bd:de:
66:20:97:98:a6:31:34:24:0c:7e:6f:ef:70:23:f0:14:3c:6f:
da:35:0f:84:78:90:50:be:d1:a4:1e:51:d7:b3:d7:19:74:3d:
a7:2f:92:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:31:01 2026 by rpki-client