
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json)
Hash identifier: tiSD/515kP2oB6VDBB+HxDE4CY8IGOfF6qOwOhL081M=
Subject key identifier: FF:EF:AA:71:6D:A4:39:9E:F1:FB:79:53:08:3E:7F:CB:11:1B:61:72
Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65
Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565
Certificate serial: 0AAD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
Manifest number: 1A69
Signing time: Thu 26 Mar 2026 17:27:01 +0000
Manifest this update: Thu 26 Mar 2026 17:27:01 +0000
Manifest next update: Thu 02 Apr 2026 17:27:01 +0000
Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: w5hRIMP0O58sN6tctSuj3w9eklPzjVQTQde6OtbR1qI=)
2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: WglSFimwBIxRaonVvtON24BGZwGg55rZ2VzaZUYH4UA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl
rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 17:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2733 (0xaad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565
Validity
Not Before: Mar 26 17:27:01 2026 GMT
Not After : Apr 2 17:27:01 2026 GMT
Subject: CN=69c56c65-396e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:e6:00:36:fd:18:57:75:45:00:b4:b8:8c:
ac:e9:c9:14:ba:76:e2:be:6d:be:97:6b:9f:c5:bb:
35:ba:97:17:d0:9e:39:89:c1:47:8b:35:3c:a4:cf:
59:55:7d:86:c8:79:13:7c:c2:c6:42:08:02:cf:f7:
c9:33:79:27:61:f9:aa:18:bb:fa:a8:ae:7e:e1:26:
49:b8:53:12:a8:8d:3f:bd:97:27:19:8f:3a:4f:d2:
ef:88:fe:d6:99:5b:2b:66:89:8e:aa:ae:70:40:75:
95:65:ca:47:86:4f:20:84:5a:c8:72:84:6b:82:87:
38:0d:26:d9:4b:47:51:01:9f:71:98:6f:2f:6a:a7:
bb:30:70:b5:43:df:ca:27:cf:51:92:17:52:8b:3c:
2d:6e:a3:d1:9e:12:24:7e:41:ce:8a:a7:b1:47:e9:
c7:83:07:e4:ae:10:83:a7:22:ee:22:b7:9d:51:a7:
46:59:07:27:78:79:f1:2c:c0:a7:fb:56:57:da:f8:
83:60:f9:42:20:14:3b:1c:b3:19:cb:13:df:e9:cf:
8c:30:9e:4c:4d:6d:55:e8:29:b5:b5:cf:ec:36:40:
ee:00:a8:d8:b0:ad:ab:89:c5:c2:f4:51:83:24:4f:
ce:00:a9:c1:4b:2a:36:32:b2:c2:fc:f9:ba:68:bb:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EF:AA:71:6D:A4:39:9E:F1:FB:79:53:08:3E:7F:CB:11:1B:61:72
X509v3 Authority Key Identifier:
keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b0:2b:70:7c:0d:be:12:39:7a:2a:62:ba:c8:9b:b0:a8:b1:
89:2b:2d:9a:0a:6a:77:eb:2a:9a:2e:b0:a3:0b:e0:97:29:78:
2a:a2:78:1e:88:08:6e:9a:5d:ef:37:9d:a6:d1:d8:85:f1:23:
fd:af:38:99:f3:8b:0c:f6:00:dc:5b:2a:0f:59:ff:2d:e6:43:
09:60:41:56:42:70:7b:65:bb:a8:11:34:2e:58:f5:bd:f3:47:
67:d4:37:f8:ac:fa:f1:89:eb:83:b7:01:49:9d:53:21:ad:21:
e2:71:94:95:6d:c5:78:29:cc:9d:97:61:a4:31:d9:82:9c:9f:
cf:81:47:35:c1:47:53:c6:b0:84:98:a5:c5:d1:fc:69:e1:f2:
49:8d:f4:89:ea:0e:8e:51:b2:2f:c8:04:d1:d7:b1:91:cf:ff:
49:92:3c:7d:df:f6:af:97:08:b5:1f:b4:81:5a:66:65:00:43:
fa:fb:af:5a:d0:1d:80:c5:11:96:5f:45:e1:09:76:c4:49:43:
2a:1d:d6:eb:6b:10:12:a2:a4:ad:3f:65:09:9d:71:c0:25:af:
ce:c2:1d:9c:82:5f:cf:c5:6f:5b:1c:f2:e4:a0:bf:6e:8a:a9:
dc:5e:f0:c0:04:89:94:80:66:10:4d:d9:77:d6:dc:29:fb:91:
2a:81:8f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:56 2026 by rpki-client