
$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
File: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json)
Hash identifier: e/NDsF465e8T5CiggKOQqdqz6D4pA8ldYdiQIAN/bjA=
Subject key identifier: 77:58:27:08:76:D8:19:C0:9A:06:13:3F:4D:32:44:B0:E4:11:4F:F3
Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9
Certificate issuer: /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9
Certificate serial: 089A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
Manifest number: 0890
Signing time: Tue 24 Mar 2026 20:19:54 +0000
Manifest this update: Tue 24 Mar 2026 20:19:54 +0000
Manifest next update: Tue 31 Mar 2026 20:19:54 +0000
Files and hashes: 1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: dF+pGktm9wbWFoLgvikJxlPdjnoEZhNOtdLKXXu6168=)
2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: updD38wtAdj5dijUmVbc8ur6Q26JQGPvJNSN6xjVgUc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl
rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:19:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2202 (0x89a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911155C, serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9
Validity
Not Before: Mar 24 20:19:54 2026 GMT
Not After : Mar 31 20:19:54 2026 GMT
Subject: CN=69c2f1ea-90b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:3f:5e:19:5e:da:f3:81:9e:13:95:19:69:
22:b4:ff:4d:54:0d:dd:62:a4:b4:65:6b:93:47:87:
3d:61:0a:8b:fe:f7:9e:b0:12:79:68:d6:c7:43:bf:
17:67:ac:82:86:b4:c7:8f:07:05:10:b0:87:8e:d9:
cc:a3:57:25:da:d0:53:f4:c5:b3:3f:15:61:23:93:
f7:a4:f8:ff:2e:07:8f:65:9c:22:4f:28:cf:b8:4d:
d8:5e:c4:25:14:62:52:2b:9a:c9:eb:8a:77:60:05:
ac:ab:9e:62:3a:61:42:e2:ef:a1:4e:37:2b:3b:22:
06:08:99:22:7f:8a:60:67:ca:92:64:d8:56:df:65:
4e:ac:2f:7e:ec:9a:69:6f:3f:f6:f1:80:d2:f6:6e:
a8:33:0d:2e:8d:48:ea:96:34:85:58:9d:68:4f:f5:
6f:d0:d7:86:54:e6:ed:b2:e1:aa:79:b3:ce:6c:ef:
d5:27:92:fd:c3:81:39:af:57:65:3c:78:f2:e1:ef:
bb:6f:36:bb:a2:ae:49:b5:39:0a:4e:9d:68:1f:d3:
e1:55:0b:63:6c:65:99:e0:d3:fe:4a:6b:bd:88:fd:
d0:5c:a9:3e:62:22:17:6b:58:b1:a3:61:fa:80:60:
b3:c8:39:15:b7:5b:ac:05:92:b3:71:aa:3a:82:04:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:58:27:08:76:D8:19:C0:9A:06:13:3F:4D:32:44:B0:E4:11:4F:F3
X509v3 Authority Key Identifier:
keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:28:b3:54:ce:d8:29:84:14:be:45:b6:e7:de:b3:e7:2c:f9:
b1:1a:d8:b9:2f:9f:6c:28:5d:a9:39:81:9b:bc:3c:e5:e4:bc:
f5:94:01:5a:28:37:5d:db:69:ff:a2:16:06:a7:0b:2a:12:a8:
0a:22:a6:06:78:14:63:81:cf:20:6a:8c:f4:f6:bd:73:45:6a:
54:25:df:cb:76:10:32:ff:23:b5:08:59:79:99:36:c7:4f:e1:
af:f3:27:39:f7:fc:48:02:7e:72:42:7f:f9:73:18:2e:e7:b1:
8e:6a:bd:0d:b3:bf:fe:1d:e3:f9:39:13:17:6a:62:15:9c:ac:
1e:6b:fd:27:e2:dd:04:86:1f:4b:d6:89:b8:a9:44:23:15:d3:
29:9c:21:c6:b4:73:af:cf:23:0c:ee:54:19:38:cd:ec:ac:aa:
19:6b:f2:f1:c5:53:44:4d:ca:db:8a:60:26:3d:da:a8:df:8b:
48:a0:97:06:77:ae:43:96:77:35:e0:3c:b6:5c:83:9b:9a:e5:
2f:54:a0:a6:cc:3c:1d:79:d3:77:4f:3a:d8:28:bf:78:a5:b6:
d4:8a:2e:57:41:41:1b:00:6a:50:96:88:78:8a:a2:04:c5:4e:
05:63:67:85:21:96:87:bf:5c:36:85:09:37:41:55:6c:99:ca:
be:fd:02:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:12 2026 by rpki-client