
$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
File: TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft (raw, json)
Hash identifier: Ac8DHAgfNGZSDB8LXdw9eUpPWUJJfwRmrqSbJmiJFC8=
Subject key identifier: 17:6D:74:7F:D2:55:27:BF:A5:F5:06:AE:E3:85:92:4E:14:A8:BC:EA
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial: 3621
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
Manifest number: 3584
Signing time: Tue 24 Mar 2026 14:56:00 +0000
Manifest this update: Tue 24 Mar 2026 14:56:00 +0000
Manifest next update: Tue 31 Mar 2026 14:56:00 +0000
Files and hashes: 1: TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl (hash: qe7DJmwx9ymyN5Gi0Q/a42CMyLGlWjzHqCuZptMvbbs=)
2: 78488CF4AD7411EAB93BA123C4F9AE02.roa (hash: XlwaXG0CLLlJ3jhue1QTDVM5EZboLImWAg1GFuaWpAc=)
3: AA7E3F9017A211F1926DA6A3313D8C67.roa (hash: L48creEngMJJ5TkDliX9ZnYTWQwzYlG+Qdxsr0lywoc=)
4: E205744CABA111EAB7C51982C4F9AE02.roa (hash: maoC/CPKGCGNHLen8pJwPD1KgmFNilHCq14nhz/BxFg=)
5: 586B5D9ED9F811E9A6874F46C4F9AE02.roa (hash: 7zglLDP11gzpQTB1+7hilO7iWT3HFWV4SBuiijDuHdQ=)
6: B64F4796C6A411F08CECEE7AC4F9AE02.roa (hash: 9Jynqmi/gB99jci6ggMyKRV6Dkc/gMa93AFgdesb6v0=)
7: C32EFEC617A211F19C2A0006323D8C67.roa (hash: A2O1ksquVn5Ms9ttsYq8s1cge74wxeUlGkxPG701xZk=)
8: 4754ED7C16BF11EBB31D5A6AC4F9AE02.roa (hash: ZJcFcxd06hMO8B2ugrVOha+QcsYL5Uhm5p6cGyGTG/c=)
9: D7F4292A53BE11EF819E6347C4F9AE02.roa (hash: Ue/t1PP419JlxBz1cKkLY7GRQHiNwZY7sf9eJ0m5LyI=)
10: 502A4A36AAA611EE998EEF3AC4F9AE02.roa (hash: rJcH7U56XuZEecskwbJvsdvGpT+jiKhjpWcLXzO0cjk=)
11: 49FEE4EA83CC11F09BE0565EC4F9AE02.roa (hash: eQqXfw7KpOOBP+Td93jgjIhVJNu+VT2VfIFdrctBg/A=)
12: CD072488981C11F081BD5721C4F9AE02.roa (hash: cxBmEBTcBfMyyvAlB+eLC5fqMYrlz3kg2+JupwPAjOA=)
13: 9A05BA12D86B11E9B8BFCE0AC4F9AE02.roa (hash: gGhukCL6lx8yYMc3XoZXuAuKGy5qCMkAQFaNYx2UVBo=)
14: 9427EF0A7CA411F09AE49B57C4F9AE02.roa (hash: Lh6oS48kKqVmyqex9gqFtgZ4m13NOn4qQbQx9k6l4Fo=)
15: B55C1B0CC6A411F0A408EE7AC4F9AE02.roa (hash: X1b91kjhN2zv6W6/j8hQrToM9JGJxLjczB6EqHMIOWY=)
16: D85FB84853BE11EF819E6347C4F9AE02.roa (hash: fWuhRWvQ3Edrdp8Xh2OPG31qXzaHDm9E0X4C1jpzpIA=)
17: ABE74AD463B111F0B7B37637C4F9AE02.roa (hash: QhAtb7RZdyqizEHTl7ia1E+ChVek7Dqp9PT6kKKvmME=)
18: E2A6885AABA111EAB7C51982C4F9AE02.roa (hash: 8YElfuPm+hdksAg1+pFS3ilrSanU7z1LehRzNHr86x4=)
19: B5DAF292C6A411F092F1EE7AC4F9AE02.roa (hash: ZOE+ul17pVmegkb++bJCcAeEY8oGwonKzzJtuNTmLFQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13857 (0x3621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Validity
Not Before: Mar 24 14:56:00 2026 GMT
Not After : Mar 31 14:56:00 2026 GMT
Subject: CN=69c2a600-5bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d6:15:38:5c:40:1a:21:8a:ae:88:9f:91:01:
78:91:b4:59:39:84:10:8a:21:30:c2:6e:fc:9b:59:
9c:b3:d9:70:78:19:1b:d2:5b:5a:68:80:06:36:25:
0e:93:c3:d5:f6:59:72:4f:45:d8:ae:a9:d1:c5:2f:
da:3d:b3:09:ef:a7:89:71:b8:57:58:3e:4d:93:6b:
1b:cb:ba:90:c8:9c:bb:04:57:96:2a:75:5c:1c:23:
4b:ee:e5:4e:e3:a6:d4:15:f9:34:9e:07:07:ab:2f:
8a:34:48:c2:03:1b:e7:f9:fb:26:db:d5:30:c4:7e:
36:07:e1:1b:db:d9:50:04:e2:ee:f9:a9:4c:04:bc:
3a:3f:41:00:7e:37:c1:75:f8:73:5d:20:68:9c:18:
62:5c:78:4a:66:98:d8:10:97:67:80:6f:55:b7:5e:
d6:f6:83:a0:a4:8d:22:d2:e9:c8:0e:d5:10:a0:8b:
5c:08:77:22:26:b1:ae:46:5c:28:cf:79:23:68:35:
3f:e8:14:01:36:04:cd:65:3b:0e:65:8a:0b:8c:a6:
f2:7d:f2:d8:8d:3e:7c:e3:19:d9:1d:94:5b:ee:9d:
4c:61:f2:55:d5:b0:43:dc:c4:e0:3b:f1:b1:27:33:
a5:c8:78:e6:c7:82:95:80:ce:90:f2:4a:50:4c:de:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6D:74:7F:D2:55:27:BF:A5:F5:06:AE:E3:85:92:4E:14:A8:BC:EA
X509v3 Authority Key Identifier:
keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:95:32:b2:52:92:ed:09:85:0c:f9:72:e9:5f:62:da:8f:fa:
cf:a7:85:14:b7:10:5c:08:dc:88:e7:44:8a:54:08:32:97:9d:
13:7c:40:e2:1e:61:43:96:f7:27:f2:da:d0:17:c0:89:59:c5:
4b:44:9d:02:22:7a:7f:6b:17:ed:f2:4f:9e:95:c2:00:0d:d0:
23:47:3a:7e:cb:a2:c5:c0:10:e0:21:e0:b7:16:02:d6:2f:a7:
85:1c:d7:24:d4:20:6c:15:19:99:4e:2a:ff:78:ab:d8:b4:1d:
de:04:7b:21:e7:fc:c0:89:73:32:52:2a:07:25:02:21:a8:5f:
de:e1:87:3a:99:5c:df:5f:5b:10:f9:48:71:a8:bb:89:ae:02:
b1:9c:7d:0f:04:0d:0f:47:f6:72:a4:ba:72:e4:d0:dd:be:c7:
03:a6:be:aa:90:46:b3:5b:17:b1:73:1a:0a:6d:32:cc:de:9d:
c1:81:c7:54:3d:06:a4:d3:43:20:44:8f:b0:fc:d9:3b:d1:4e:
ca:ab:75:6d:50:93:17:b1:d9:f9:25:e2:4c:de:31:50:67:fd:
d0:65:ea:86:f3:80:ca:fc:a4:5f:2a:2c:85:49:07:b8:55:02:
a0:ee:e6:61:0f:04:8e:55:81:7e:84:31:db:f7:f7:c3:77:d9:
65:7e:82:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5
QzhGNjU5MEQwHhcNMjYwMzI0MTQ1NjAwWhcNMjYwMzMxMTQ1NjAwWjAYMRYwFAYD
VQQDEw02OWMyYTYwMC01YmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2tYVOFxAGiGKroifkQF4kbRZOYQQiiEwwm78m1mcs9lweBkb0ltaaIAGNiUO
k8PV9llyT0XYrqnRxS/aPbMJ76eJcbhXWD5Nk2sby7qQyJy7BFeWKnVcHCNL7uVO
46bUFfk0ngcHqy+KNEjCAxvn+fsm29UwxH42B+Eb29lQBOLu+alMBLw6P0EAfjfB
dfhzXSBonBhiXHhKZpjYEJdngG9Vt17W9oOgpI0i0unIDtUQoItcCHciJrGuRlwo
z3kjaDU/6BQBNgTNZTsOZYoLjKbyffLYjT584xnZHZRb7p1MYfJV1bBD3MTgO/Gx
JzOlyHjmx4KVgM6Q8kpQTN77EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBdtdH/S
VSe/pfUGruOFkk4UqLzqMB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE
OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzgxQS9ENTIxNDI3MDFEOUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJ
MVZKRG12ams0S0NjajJXUTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXJUyslKS7QmFDPly6V9i2o/6z6eFFLcQXAjciOdEilQIMpedE3xA4h5hQ5b3
J/La0BfAiVnFS0SdAiJ6f2sX7fJPnpXCAA3QI0c6fsuixcAQ4CHgtxYC1i+nhRzX
JNQgbBUZmU4q/3ir2LQd3gR7Ief8wIlzMlIqByUCIahf3uGHOplc319bEPlIcai7
ia4CsZx9DwQND0f2cqS6cuTQ3b7HA6a+qpBGs1sXsXMaCm0yzN6dwYHHVD0GpNND
IESPsPzZO9FOyqt1bVCTF7HZ+SXiTN4xUGf90GXqhvOAyvykXyoshUkHuFUCoO7m
YQ8EjlWBfoQx2/f3w3fZZX6CkA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:52 2026 by rpki-client