
$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
File: TKAuwRGHSuDn0FVaJf8zAvkS64w.mft (raw, json)
Hash identifier: QgrP3dXWp8s57bqRgOhxuHvx0AgpW+CW8CF8klC1I0Y=
Subject key identifier: 6B:B8:DA:DF:2B:44:1C:EB:EF:7A:9A:27:0E:FC:7A:D5:67:8A:FC:FE
Authority key identifier: 4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C
Certificate issuer: /CN=A915825D/serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C
Certificate serial: 0110
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
Manifest number: 0108
Signing time: Wed 25 Mar 2026 05:22:39 +0000
Manifest this update: Wed 25 Mar 2026 05:22:39 +0000
Manifest next update: Wed 01 Apr 2026 05:22:39 +0000
Files and hashes: 1: TKAuwRGHSuDn0FVaJf8zAvkS64w.crl (hash: VLquDRWexxwFxUw6Dg4uTHl3EV+RhokyrwSxmxEBx3I=)
2: 109B1A6AC14F11EFAE8F4B0BC4F9AE02.roa (hash: UklKWqjJk/WpHXMdJyVcNE7U3J0tkGmO5t0fZzlkKZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl
rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915825D, serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C
Validity
Not Before: Mar 25 05:22:39 2026 GMT
Not After : Apr 1 05:22:39 2026 GMT
Subject: CN=69c3711f-890f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:c5:36:29:fe:6a:fa:8c:15:f2:07:77:be:
5c:d2:3a:9d:fc:d8:d1:d6:cd:80:cc:fb:f8:47:a6:
d6:e1:5c:ea:7a:1e:f4:6d:29:09:a2:ee:0b:dc:95:
64:f4:84:0d:b4:78:8a:51:ba:39:ce:87:79:0a:ed:
9f:9e:54:28:41:8d:74:7b:90:65:54:92:3a:1d:5e:
86:64:26:a8:c6:b9:7f:22:79:01:83:ca:a3:84:9c:
3d:b5:2c:0d:c7:c4:77:28:d3:f4:f1:03:5f:e1:3a:
50:67:c3:bb:0e:30:58:f4:af:1f:60:5b:7a:2e:dd:
bf:00:db:5b:44:80:88:d6:06:4a:28:b5:56:05:0c:
df:c7:0b:d8:75:bb:d7:f4:1e:b2:d2:a0:1d:e3:4a:
5a:e9:1e:4f:61:33:d1:51:e6:42:0e:7c:9e:e9:66:
10:72:c6:31:b7:1c:55:33:7a:d6:6d:6f:8c:99:cf:
ed:a5:3d:da:a0:60:72:56:78:01:7d:e4:d5:35:d5:
57:f0:fa:d4:49:e2:01:97:27:59:ca:34:6d:6c:a9:
29:73:7e:a9:6e:db:ec:98:ea:db:7f:68:5c:04:37:
fb:ff:1f:7a:da:73:58:91:38:bd:7d:ff:3a:fd:b7:
d8:15:e7:3d:cc:e7:48:f2:5c:a1:cf:66:2f:b5:9e:
8c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B8:DA:DF:2B:44:1C:EB:EF:7A:9A:27:0E:FC:7A:D5:67:8A:FC:FE
X509v3 Authority Key Identifier:
keyid:4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b1:51:8b:88:fd:15:53:ac:cf:88:7b:5a:79:4f:20:cd:c6:
aa:6f:d1:12:ba:3a:e9:57:87:cd:c1:4e:71:cc:33:e5:84:be:
c7:e7:73:89:d4:fe:d1:e4:d9:4b:1e:7c:7d:e7:59:4c:9b:f3:
0c:54:c3:09:84:f6:99:f8:48:01:74:7e:9e:ba:a9:e2:22:9b:
92:13:a2:29:3d:b7:98:aa:52:36:2d:51:b4:c5:fc:1f:43:a1:
51:fa:c7:e5:8c:a6:d4:3d:ec:98:6c:ae:e8:a9:71:a4:cc:b0:
d3:bd:74:64:c1:78:fa:72:b5:eb:c2:42:ba:05:52:2f:99:0f:
92:b8:33:0f:98:da:c6:8c:0a:91:c1:3e:92:f6:34:3d:c4:2b:
a0:b2:42:1c:76:e3:b7:9f:5c:a5:b7:8b:d4:43:bd:f1:2c:96:
e7:9d:44:74:a5:83:f2:a9:8f:21:2e:26:52:2f:e8:de:6e:0d:
c4:c4:58:80:71:f1:fc:01:54:41:7b:05:88:71:2c:78:1d:28:
d7:7d:95:77:3e:55:d5:5b:75:e7:75:f1:cb:4e:05:8b:cc:77:
a0:d4:37:00:53:8f:46:48:c9:5d:47:1e:22:b5:66:0e:26:f6:
d2:e3:0b:5b:6f:e5:42:16:a8:4d:aa:a3:b4:27:90:d6:5a:5f:
22:92:71:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:30:56 2026 by rpki-client