
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
File: tNIXk5onUZOOB2WaeUiFqciEGRk.mft (raw, json)
Hash identifier: mq6GLlaMI3feyG4mWZlR7ZNJIwWeT9kzlhEcaD16RV8=
Subject key identifier: 22:7A:87:10:A4:E8:E6:55:43:70:ED:F9:29:FF:FA:4A:01:F0:B9:D2
Authority key identifier: B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19
Certificate issuer: /CN=A9145B13/serialNumber=B4D217939A2751938E07659A794885A9C8841919
Certificate serial: 0114
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
Manifest number: 0110
Signing time: Mon 11 May 2026 06:05:36 +0000
Manifest this update: Mon 11 May 2026 06:05:35 +0000
Manifest next update: Mon 18 May 2026 06:05:35 +0000
Files and hashes: 1: tNIXk5onUZOOB2WaeUiFqciEGRk.crl (hash: 9kXza0ydOvKgi4jJggsNGCle9+omCCfPFybaNTMSCR0=)
2: 793486E0C11A11EF99C19012C4F9AE02.roa (hash: v6BylN14fOxA4ftijT2xm8ugkwjC+LIOM8D065x7bmM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl
rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145B13, serialNumber=B4D217939A2751938E07659A794885A9C8841919
Validity
Not Before: May 11 06:05:35 2026 GMT
Not After : May 18 06:05:35 2026 GMT
Subject: CN=6a0171b0-1745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:29:7f:73:6d:8a:9b:3c:c8:e1:da:7f:34:
ff:6e:d8:62:f2:2b:c0:3c:4c:c3:8d:3e:58:f1:49:
8d:85:57:7b:1f:18:84:4e:e3:08:a0:81:9f:59:b4:
2e:d3:26:a4:fd:f4:29:60:2a:df:1b:a0:71:90:0a:
29:52:e4:83:3d:11:5e:ca:54:65:3d:e8:21:91:19:
a5:e3:fe:51:0c:24:bd:93:1e:94:ea:90:0f:01:14:
be:fc:ce:69:44:6f:14:3f:4f:25:aa:11:65:74:9f:
60:0e:b7:a2:00:6c:36:f1:d2:e7:f1:08:75:72:5a:
b9:3b:ad:1e:6a:95:7b:36:1c:31:f0:65:ec:59:c1:
8a:2f:01:ff:f7:53:dc:02:3a:a8:48:19:ed:af:c6:
5e:48:06:c5:20:62:97:08:d6:45:48:f3:49:05:13:
5b:24:62:33:8d:f6:c1:ce:b5:f3:5f:fa:56:26:36:
61:5f:76:3f:38:86:83:63:89:c8:82:9c:26:44:73:
a0:c4:e7:a2:77:00:e5:db:5d:35:56:21:ab:8e:f4:
46:21:41:0f:0a:32:f3:24:ac:e6:63:82:de:51:3d:
3c:ce:7c:2d:90:02:be:f6:ff:2c:ca:aa:5c:f8:8b:
ed:1b:1b:e0:88:81:ba:1d:8d:2a:8e:ad:8f:d7:d3:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7A:87:10:A4:E8:E6:55:43:70:ED:F9:29:FF:FA:4A:01:F0:B9:D2
X509v3 Authority Key Identifier:
keyid:B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:1d:0f:a8:21:70:88:27:b5:fc:4a:58:11:a9:03:3d:2d:f7:
e1:e7:b5:89:19:ec:57:e5:27:4e:a7:e1:9c:72:f4:a2:b2:2e:
2d:1b:8e:e1:72:d3:b1:d1:79:9a:e7:ed:5b:63:49:ca:fb:20:
e2:06:f7:5c:b5:ef:cb:36:2f:33:16:58:95:6c:c1:77:56:e6:
3c:91:e9:92:0d:13:d6:c0:58:9a:d3:0e:13:22:c0:89:bd:d2:
b0:65:e4:ac:1a:72:10:3a:13:ea:c2:32:89:41:41:e7:2a:d0:
13:d6:16:f5:24:0d:0c:de:0b:00:8a:73:73:41:76:06:2c:67:
5d:df:fc:24:7e:32:88:09:2d:cf:81:99:83:dc:fd:e1:95:6c:
63:fc:70:db:19:62:7f:2e:1e:8d:39:99:07:89:7b:e5:fe:bc:
ff:e4:8b:8c:34:8b:79:e6:8f:17:d5:98:67:b2:c0:88:cc:8c:
cc:08:82:7d:c0:03:e5:78:c0:08:6f:6d:36:60:96:34:ec:f2:
fe:93:ce:88:59:78:32:7a:ab:a8:84:cb:02:dc:c7:61:c1:43:
3a:e6:a6:37:fb:af:64:81:22:1d:24:37:b5:f1:22:ca:23:68:
fc:47:c5:c0:a0:86:09:fa:34:ec:79:dc:3b:8c:03:2c:62:78:
0a:0a:7f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:05:21 2026 by rpki-client