
$ rpki-client -vvf rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft
File: tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft (raw, json)
Hash identifier: kG7xj8vHdzFAqj7eVdFzwcazl61dEVPtUzTEh7QxdRo=
Subject key identifier: 16:B3:D9:7F:54:44:DC:8A:5E:8A:EB:04:CD:59:C6:27:8A:C5:D3:DA
Authority key identifier: B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55
Certificate issuer: /CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155
Certificate serial: 0BB3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft
Manifest number: 0BA8
Signing time: Tue 24 Mar 2026 18:50:41 +0000
Manifest this update: Tue 24 Mar 2026 18:50:40 +0000
Manifest next update: Tue 31 Mar 2026 18:50:40 +0000
Files and hashes: 1: tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl (hash: TNY3/MfpbSUS+PjqasFms/K+90XRWTGpdy6YkSRFE4E=)
2: 741645EE422211EA937BB919C4F9AE02.roa (hash: HwPx0vPg1VtGRQbAWOwpU/WcG4J7vax6C4J9fWBN2DQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl
rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:50:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2995 (0xbb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915577F, serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155
Validity
Not Before: Mar 24 18:50:40 2026 GMT
Not After : Mar 31 18:50:40 2026 GMT
Subject: CN=69c2dd01-f636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:a3:a8:ef:4d:95:5b:32:47:10:59:2a:b9:
c3:e9:2a:b2:94:fa:54:6a:fe:d3:67:35:87:7a:d0:
d0:76:f8:41:39:7c:8b:0d:b0:81:55:85:36:52:64:
41:a2:6f:b0:d3:9e:0d:6d:25:e2:29:d2:11:a5:0e:
13:8a:1e:9f:46:da:67:5a:15:37:bb:30:38:c3:61:
69:2f:ba:77:a8:92:88:93:9f:45:69:62:1b:d2:d5:
35:fc:d7:34:cc:dc:33:15:23:03:c9:d9:e0:af:ff:
e3:71:dc:73:22:25:ca:53:d2:d4:93:f4:45:c6:d4:
86:dc:34:76:d3:2a:f3:32:b4:7a:c0:66:c0:7a:66:
36:d8:b6:ba:60:55:5e:3f:fc:b1:35:1f:e8:4e:36:
9e:97:70:17:50:cb:4a:57:12:2e:02:ce:52:85:da:
88:5e:64:a8:d8:49:d7:88:dc:6d:2e:07:d1:f3:9c:
0e:6b:57:48:07:b7:fe:a9:54:a6:dc:25:83:77:3a:
7a:09:19:71:29:83:7a:de:6e:a1:49:c0:a3:26:56:
20:67:d0:70:cc:6a:1b:41:41:84:0d:36:4f:40:56:
ee:81:ff:f7:64:9b:b4:3d:7a:ad:4c:c0:cd:ce:38:
9f:de:f4:30:6f:24:86:30:39:2b:fb:fd:a0:1f:79:
23:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B3:D9:7F:54:44:DC:8A:5E:8A:EB:04:CD:59:C6:27:8A:C5:D3:DA
X509v3 Authority Key Identifier:
keyid:B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:10:56:11:44:6c:72:85:6b:61:0f:e3:0b:d6:6d:ec:83:c1:
24:cf:96:06:12:a2:31:b7:30:2d:88:01:df:7e:3a:d4:5a:cd:
11:48:09:74:c1:62:0a:ca:30:2d:86:f4:52:82:09:a6:f1:8f:
a3:42:22:c7:c9:57:dd:a4:74:7b:05:f8:1b:c3:aa:0b:72:d2:
05:62:96:63:e7:fc:c6:ea:a1:77:9d:03:3d:2c:b0:fe:25:33:
0e:11:03:46:2a:28:67:19:43:3d:3f:5d:a2:a7:2b:1c:2f:54:
12:6c:32:f3:22:0e:da:0b:17:43:c0:31:94:6e:1b:5f:38:a8:
8e:92:10:5a:88:f4:95:96:db:10:55:9e:a9:0c:9b:ba:8a:11:
f8:5a:3e:6c:a0:c7:8d:0c:8e:0b:30:42:4f:2a:a4:3e:9b:63:
ca:8b:61:db:98:f9:1b:4e:d3:92:2a:0f:09:6e:06:3f:d4:57:
cd:c4:f4:99:68:31:7b:e6:88:1e:d0:2a:83:97:eb:a2:2b:0e:
37:5b:72:3d:4e:b8:24:9a:94:9c:cf:bc:ad:93:13:cb:5c:c4:
10:06:10:50:4d:7d:c8:fd:19:9b:50:c6:ff:10:17:ab:5a:ba:
b7:34:83:5c:af:09:2a:ea:fe:0b:47:7b:8f:f2:fb:b4:cd:5c:
40:d9:90:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:44 2026 by rpki-client