
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
File: 9TkpGRnN4USwNO8oiwpjR4PoLH8.mft (raw, json)
Hash identifier: yy4j/PkXzgZ8fKNANGmy7h9HBvaBWDE2hzM5zW7Cn20=
Subject key identifier: 38:2A:A1:AE:61:B4:7F:D8:9F:38:8B:7F:B7:BF:B3:7A:B3:B8:18:6A
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial: 0525
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
Manifest number: 04E3
Signing time: Wed 13 May 2026 00:06:21 +0000
Manifest this update: Wed 13 May 2026 00:06:21 +0000
Manifest next update: Wed 20 May 2026 00:06:21 +0000
Files and hashes: 1: 9TkpGRnN4USwNO8oiwpjR4PoLH8.crl (hash: QRgU7BTr+Yw+A1W/7Jk7/aMqpDaMEjDEj4TiTJ/1Db8=)
2: 06B47656E38A11EFA4DDBC1EC4F9AE02.roa (hash: L0bFUWqUd+yYiBxZkG/O4CedjSFjxQ9eMCz4NZl6+G4=)
3: 976C4E84F72711EFB800B84BC4F9AE02.roa (hash: djqnP2LQeOsKvH3FdDCmYIV4VP7v3SLpxkrs/LZrwvQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1317 (0x525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Validity
Not Before: May 13 00:06:21 2026 GMT
Not After : May 20 00:06:21 2026 GMT
Subject: CN=6a03c07d-4b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:a2:b7:d3:f3:5c:8c:61:31:8f:70:0f:a5:
ba:b2:25:9c:e1:2e:df:ae:8d:81:ca:0c:31:85:66:
61:9c:b7:74:0e:1e:0d:8c:d6:a1:95:be:2e:a7:73:
50:1f:9e:65:1e:2c:6d:13:e3:f8:b6:9b:8c:f9:8d:
f1:ec:bd:fd:6d:d4:4e:14:2f:d5:01:65:62:d4:a3:
1a:bf:0c:19:c4:5d:58:57:f9:f2:87:f8:78:9c:f9:
d1:f1:13:ab:f3:d1:fd:1f:d5:ce:eb:c4:5b:0d:28:
58:c6:07:48:7b:31:77:22:bb:de:88:77:72:1e:d0:
10:d0:ca:59:aa:03:d8:0c:29:04:6b:97:16:33:d7:
56:83:90:be:c1:9e:4e:7f:2c:24:e4:a9:0c:89:5b:
01:0c:b4:42:35:cc:da:87:86:0c:8f:1d:38:4e:62:
df:e4:46:7a:aa:da:81:b4:7d:5d:da:35:b3:8f:8a:
d0:92:cf:bd:34:4d:35:fa:f4:49:5c:8f:6d:f0:c9:
72:c6:96:fa:9c:a6:5a:67:a4:24:86:cf:33:f7:3d:
53:79:3f:d9:c8:02:7c:82:61:e9:1a:7b:94:7f:e2:
8e:7c:03:cc:57:a5:bc:21:55:e7:11:dd:32:a7:05:
bc:10:be:0f:16:14:73:9a:73:76:2f:a2:18:e1:2d:
39:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2A:A1:AE:61:B4:7F:D8:9F:38:8B:7F:B7:BF:B3:7A:B3:B8:18:6A
X509v3 Authority Key Identifier:
keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:24:73:b4:c8:c5:c2:18:c5:ba:36:d7:53:e4:16:f2:21:f8:
39:53:69:6f:e9:3f:03:19:05:92:13:f1:1e:6b:4e:a5:2d:83:
89:b7:fb:45:ed:f9:25:69:df:51:54:30:f3:b2:a4:36:82:70:
c6:0a:f5:f0:24:87:60:2d:5c:06:0e:93:f6:d7:ad:ec:f6:b2:
90:06:3d:f6:19:80:ce:95:e5:62:d2:fd:1f:b1:75:e3:14:e1:
84:d5:71:42:d7:5f:1f:42:fe:ad:5b:49:99:97:c6:d3:7c:75:
cd:3e:20:ab:c0:c7:59:40:4c:66:69:d6:e0:a6:95:c6:5c:9e:
10:eb:e4:bd:56:13:15:3d:a6:f0:08:c7:19:c0:e5:47:a3:56:
e7:44:c8:84:da:39:d9:e4:28:85:ed:d3:d9:eb:fe:c7:3d:4a:
01:51:a6:98:d1:de:4a:af:3a:9d:85:d8:f5:24:f7:27:54:3e:
74:95:8f:d5:03:40:d7:20:6c:0d:cc:5f:76:5e:46:82:3d:a5:
10:b4:e1:32:27:f6:d5:4d:72:97:60:59:f9:d4:a2:91:5e:1d:
95:61:29:21:f1:5a:d4:43:bd:05:f0:36:4b:cb:bd:d2:17:8b:
97:36:b4:c9:8e:06:4a:5c:00:84:70:12:9d:50:df:db:f2:bb:
cc:95:22:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:34:05 2026 by rpki-client