
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft
File: tw3qbHe56OzOWDkTKBnvkTc_xSc.mft (raw, json)
Hash identifier: 3qsGxcdj6vQ+AwLIWD9Msamj03iJQLRumt4WQI3Nea4=
Subject key identifier: B4:DD:18:96:5B:37:78:91:B7:BC:57:AC:97:16:FA:21:FD:82:F9:7C
Authority key identifier: B7:0D:EA:6C:77:B9:E8:EC:CE:58:39:13:28:19:EF:91:37:3F:C5:27
Certificate issuer: /CN=A914E2B2/serialNumber=B70DEA6C77B9E8ECCE5839132819EF91373FC527
Certificate serial: 01C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft
Manifest number: 01BF
Signing time: Wed 23 Sep 2026 03:43:30 +0000
Manifest this update: Wed 23 Sep 2026 03:43:29 +0000
Manifest next update: Wed 30 Sep 2026 03:43:29 +0000
Files and hashes: 1: tw3qbHe56OzOWDkTKBnvkTc_xSc.crl (hash: +R7BHem7t/ob5ZrE6JBY3b7KxxHET2taNCoyg1Nbxb4=)
2: D6AEA2D20DE311EFA1E24F25C4F9AE02.roa (hash: SjviPWHP1DeQCRL5zA27ZA6ZX61NzlG+Six3xPkugE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.crl
rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452 (0x1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E2B2, serialNumber=B70DEA6C77B9E8ECCE5839132819EF91373FC527
Validity
Not Before: Sep 23 03:43:29 2026 GMT
Not After : Sep 30 03:43:29 2026 GMT
Subject: CN=6ab34ae2-d201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:77:93:c0:f2:1c:a5:d0:70:8a:71:5e:d8:80:
68:5a:3d:ab:d4:78:91:13:c9:50:a8:56:65:1e:93:
a3:b6:7f:ac:91:b8:88:16:c0:25:48:a6:ef:17:9f:
bb:03:4f:3f:c6:a8:ce:98:37:fc:c3:96:c2:d1:6f:
37:f7:18:00:92:f8:21:a0:cf:d0:50:33:57:91:60:
70:90:83:64:9a:7f:43:33:21:4a:bb:68:3f:eb:7c:
76:d9:99:e4:65:97:6a:f7:a4:6c:b9:26:c6:4e:f5:
67:b3:8a:c9:23:30:6f:e3:74:61:41:e7:de:e1:c1:
47:09:ee:8a:3c:74:1c:9a:07:df:37:e9:e5:b6:bd:
45:24:e9:4a:99:7b:ab:b8:de:b3:0c:8a:9d:0f:04:
c1:6e:ab:61:2d:49:42:5d:46:85:1b:9b:23:b4:35:
f3:9e:78:31:09:e8:bf:bb:3f:37:53:61:e1:eb:5b:
0b:3c:9a:0d:1a:ab:3f:cd:9f:d4:3c:f7:9b:f7:a9:
c9:80:4f:0f:8d:8a:48:c8:55:b7:ec:48:31:d5:d6:
44:f1:61:4b:0d:3f:b4:7f:7f:33:dc:46:14:0b:13:
22:70:81:3d:41:64:6e:16:88:68:75:1a:29:11:f4:
58:9b:49:69:22:65:63:15:6a:e6:42:8f:35:c2:9c:
16:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DD:18:96:5B:37:78:91:B7:BC:57:AC:97:16:FA:21:FD:82:F9:7C
X509v3 Authority Key Identifier:
keyid:B7:0D:EA:6C:77:B9:E8:EC:CE:58:39:13:28:19:EF:91:37:3F:C5:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6a:d2:dd:63:e0:b8:0f:2d:ff:36:71:64:d7:a5:db:b0:c2:
85:e5:c7:6d:7c:c2:78:75:9d:c5:f1:43:9f:b1:77:00:25:48:
0c:41:aa:89:f2:8d:3a:47:aa:6d:25:74:a3:6b:25:54:d6:aa:
da:82:98:33:ac:0e:06:c0:69:3b:a7:c4:79:9a:82:10:76:83:
c3:3d:f7:3e:20:f8:b4:9e:ce:27:7a:61:e0:cb:9f:e3:74:d4:
76:92:b9:26:02:49:28:26:b4:f3:cb:9d:ce:fc:67:21:ba:95:
09:72:39:01:bc:c1:74:77:57:b4:d8:b3:8e:f4:00:73:c4:f6:
ed:ca:ae:55:6d:5b:6a:3a:21:cd:25:98:da:81:e9:e2:7d:e0:
c5:4d:4a:d2:37:39:52:7b:5f:7b:64:3e:bb:67:47:75:f8:89:
29:fd:e4:71:53:b2:d5:1d:15:ef:f7:cf:1c:31:fc:b0:76:e2:
2b:e3:65:bd:74:f8:3b:c9:3e:4c:1d:59:30:88:1a:5f:73:96:
9f:96:e5:4c:af:32:32:23:af:0b:8f:36:a1:17:cd:5e:7f:4f:
50:60:07:8d:78:7b:b1:b1:6e:82:45:86:ca:1a:6e:d6:28:2b:
4a:ce:4c:66:80:52:c5:60:63:98:c5:8a:6e:2f:91:dd:94:d0:
31:21:cd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:26:18 2026 by rpki-client