
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
File: tkVWXJMbKETS92DqqrDirkvjFBQ.mft (raw, json)
Hash identifier: Z1kJMU4Vy/YMn5OC3sstHhTB5QTLvGO+kz8YGzhlWN0=
Subject key identifier: E2:22:63:0A:F2:3F:D1:34:23:37:6B:F6:B6:70:4A:BB:F1:A3:A5:6C
Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14
Certificate issuer: /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414
Certificate serial: 04EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
Manifest number: 04E7
Signing time: Thu 26 Mar 2026 23:32:58 +0000
Manifest this update: Thu 26 Mar 2026 23:32:58 +0000
Manifest next update: Thu 02 Apr 2026 23:32:58 +0000
Files and hashes: 1: tkVWXJMbKETS92DqqrDirkvjFBQ.crl (hash: g41EokV5tKg3Xu+g1/idl+4rCzqoqj0AxZ4wOVcPzwo=)
2: 838DF1B0572011EC905C770CC4F9AE02.roa (hash: lZ1bwrjyN0UbXwL+oCg+Wnabt6ugA+6V0SyJb/rt1uI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl
rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1263 (0x4ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170187, serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414
Validity
Not Before: Mar 26 23:32:58 2026 GMT
Not After : Apr 2 23:32:58 2026 GMT
Subject: CN=69c5c22a-4904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:5c:3b:f5:b6:7e:50:74:38:d4:e8:2a:4d:
6e:61:e6:1c:20:15:e5:68:25:f0:14:0f:c7:81:50:
6b:cc:0d:d1:a2:1f:a8:fc:03:0f:77:e2:5e:dc:61:
44:53:62:34:27:95:3a:b3:b4:83:c7:06:4e:00:ef:
11:e1:7a:cb:0f:2d:06:5c:f0:8b:eb:cf:37:17:60:
29:ef:66:19:90:30:8f:0c:9d:38:18:69:66:12:59:
b7:88:e1:9e:08:eb:94:c2:2c:39:3e:10:80:ef:82:
a0:ba:58:d8:e1:7c:fb:cd:ef:f3:fa:09:8e:ae:b5:
80:91:bf:3a:2b:a3:23:d1:27:cf:c7:fb:ec:b5:4a:
1e:9d:4e:fd:48:3a:50:2b:21:34:eb:8d:cf:07:0d:
16:68:9a:13:19:59:af:93:92:18:78:ba:9a:4f:e9:
ac:40:b3:82:a4:b5:b3:96:31:c1:88:e3:fb:c0:b2:
e6:0b:af:35:72:93:e5:93:3d:3a:c4:1f:73:2f:fa:
7e:a7:c8:19:57:08:ad:fb:b8:be:87:9e:13:bb:92:
ba:ac:34:ce:f2:f3:07:85:32:5f:37:93:3c:d4:1c:
07:64:18:06:54:cd:cf:24:db:f4:b1:6a:f1:0b:b1:
b2:85:a9:fa:97:68:8d:89:81:bb:be:38:ae:8d:bc:
2f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:22:63:0A:F2:3F:D1:34:23:37:6B:F6:B6:70:4A:BB:F1:A3:A5:6C
X509v3 Authority Key Identifier:
keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4b:42:8b:77:78:30:9c:5c:95:04:a3:a3:07:13:63:4d:5c:
f2:38:69:cc:59:66:7c:ac:15:4f:a2:66:85:22:cc:e9:9f:f2:
00:0d:d0:a8:a0:cd:f4:53:ca:a4:ff:4f:21:9b:cd:4b:3f:75:
8f:eb:72:4d:2a:ae:bc:9c:e8:d5:ba:6d:80:6b:0c:36:3c:71:
91:5d:69:cd:f9:1b:85:ff:ec:0b:63:34:5b:57:97:56:77:41:
64:f6:40:a4:f9:c9:73:0b:37:c5:08:04:c6:b6:76:e8:5f:5e:
27:03:0e:ff:35:24:f8:74:36:0f:eb:92:3d:7d:f3:f7:66:23:
bc:41:27:24:a3:00:97:27:cd:60:ec:9c:66:e0:5a:64:fc:77:
57:04:ac:9d:27:9e:6d:81:e2:5f:a0:83:b3:12:78:3e:4b:52:
23:ac:1d:05:e7:21:13:e8:20:14:dd:64:8f:bb:14:ed:c7:74:
bd:98:0e:e8:78:b8:96:6a:58:af:8e:00:fe:01:75:d3:8d:ff:
95:44:8a:9f:5a:b8:7f:19:36:59:8c:28:70:e0:78:65:e3:58:
47:71:db:c5:1c:43:6b:e5:81:0e:cc:b0:d0:15:49:1e:ba:12:
97:66:65:8f:5e:55:9a:0a:16:6e:3d:7a:65:22:81:6e:05:b2:
1c:92:c2:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzAxODcxMTAvBgNVBAUTKEI2NDU1NjVDOTMxQjI4NDREMkY3NjBFQUFBQjBFMkFF
NEJFMzE0MTQwHhcNMjYwMzI2MjMzMjU4WhcNMjYwNDAyMjMzMjU4WjAYMRYwFAYD
VQQDEw02OWM1YzIyYS00OTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqZxcO/W2flB0ONToKk1uYeYcIBXlaCXwFA/HgVBrzA3Roh+o/AMPd+Je3GFE
U2I0J5U6s7SDxwZOAO8R4XrLDy0GXPCL6883F2Ap72YZkDCPDJ04GGlmElm3iOGe
COuUwiw5PhCA74KguljY4Xz7ze/z+gmOrrWAkb86K6Mj0SfPx/vstUoenU79SDpQ
KyE0643PBw0WaJoTGVmvk5IYeLqaT+msQLOCpLWzljHBiOP7wLLmC681cpPlkz06
xB9zL/p+p8gZVwit+7i+h54Tu5K6rDTO8vMHhTJfN5M81BwHZBgGVM3PJNv0sWrx
C7Gyhan6l2iNiYG7vjiujbwvDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOIiYwry
P9E0Izdr9rZwSrvxo6VsMB8GA1UdIwQYMBaAFLZFVlyTGyhE0vdg6qqw4q5L4xQU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDE4Ny9GMUUyQTNGODU3
MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktFVFM5MkRxcXJEaXJrdmpG
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RrVldYSk1iS0VUUzkyRHFxckRpcmt2akZCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDE4Ny9GMUUyQTNGODU3MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktF
VFM5MkRxcXJEaXJrdmpGQlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPEtCi3d4MJxclQSjowcTY01c8jhpzFlmfKwVT6JmhSLM6Z/yAA3QqKDN9FPK
pP9PIZvNSz91j+tyTSquvJzo1bptgGsMNjxxkV1pzfkbhf/sC2M0W1eXVndBZPZA
pPnJcws3xQgExrZ26F9eJwMO/zUk+HQ2D+uSPX3z92YjvEEnJKMAlyfNYOycZuBa
ZPx3VwSsnSeebYHiX6CDsxJ4PktSI6wdBechE+ggFN1kj7sU7cd0vZgO6Hi4lmpY
r44A/gF1043/lUSKn1q4fxk2WYwocOB4ZeNYR3HbxRxDa+WBDsyw0BVJHroSl2Zl
j15VmgoWbj16ZSKBbgWyHJLCeg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:46 2026 by rpki-client