
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
File: Te4INvoPfuksLmpsGYAW3oz4vxY.mft (raw, json)
Hash identifier: aaJOtl3yWoxOKHJMwCV7aWoiNd64xIF6IiTx5ikUWkA=
Subject key identifier: FA:A8:90:A6:D3:42:D6:F7:69:8F:E5:55:C3:21:41:06:7B:7A:AF:1C
Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16
Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16
Certificate serial: 024A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
Manifest number: 0238
Signing time: Mon 11 May 2026 02:44:19 +0000
Manifest this update: Mon 11 May 2026 02:44:19 +0000
Manifest next update: Mon 18 May 2026 02:44:19 +0000
Files and hashes: 1: Te4INvoPfuksLmpsGYAW3oz4vxY.crl (hash: EeaWcFLZBH9JRplOx+5sEG+dIe5j/3Ya7eEyABUNvNc=)
2: 9BC1D2907EDF11EE86C6A27BC4F9AE02.roa (hash: SmxK1GgjoBjC23E2cMN3xNRhJXyAe9oj/ORTb6kLl1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl
rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171D3C, serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16
Validity
Not Before: May 11 02:44:19 2026 GMT
Not After : May 18 02:44:19 2026 GMT
Subject: CN=6a014283-12db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:b4:c9:4d:71:1b:4b:34:9d:86:9b:f9:d2:
02:65:d7:ae:d2:7f:0e:ef:d8:4f:c3:59:12:a3:50:
cf:d5:1f:87:03:37:a6:7c:7c:1d:2e:a4:94:16:e4:
2f:d6:b7:e0:62:33:5d:7d:1e:25:83:95:98:04:88:
0f:ef:9f:7d:eb:7c:67:6d:82:f4:32:cb:27:62:d8:
ed:9d:d4:bd:ab:a3:5f:74:81:ab:d8:cb:19:4d:9e:
f4:df:ea:20:12:b9:7d:8f:74:19:25:21:11:11:3a:
bd:f3:15:3e:c7:b6:d0:51:69:70:85:5c:84:e2:62:
b9:67:5f:2c:db:f2:d6:b2:0c:ba:d6:bf:38:56:ba:
ea:66:a3:c5:14:10:f9:69:3d:dd:b2:e5:15:6f:af:
73:25:4e:1c:04:51:33:7d:24:94:31:77:39:24:61:
8a:10:8b:bd:34:24:b4:8f:49:95:bf:57:c1:50:ca:
74:13:c4:27:1e:71:36:6f:59:b2:fc:d8:9d:26:1c:
66:9a:29:73:35:b3:69:38:24:ee:d0:0e:1c:1e:a2:
fd:65:2b:ab:2f:ab:d6:41:ee:ce:ed:f7:1b:c3:c4:
ab:b2:b4:c8:7f:7f:ab:50:2a:d4:e1:20:83:71:cd:
97:2b:48:5c:d0:0c:53:77:5a:47:2b:23:13:7c:08:
d1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A8:90:A6:D3:42:D6:F7:69:8F:E5:55:C3:21:41:06:7B:7A:AF:1C
X509v3 Authority Key Identifier:
keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ec:b7:47:33:ef:24:f2:b3:a1:f7:fa:91:41:1b:a3:ae:0b:
a5:67:08:dc:07:59:b1:e0:59:2a:56:87:a3:59:20:9f:81:10:
ba:5e:c9:37:b6:3d:d5:f2:dd:81:89:9e:c8:30:bf:63:af:74:
f3:2a:a9:66:27:7c:86:46:e4:1e:d2:c4:c0:55:5c:f4:cc:35:
71:52:23:db:7e:41:01:0e:75:d5:7a:2d:28:6a:18:74:ba:89:
32:93:48:97:51:8a:df:6a:49:40:e0:fd:5f:bb:44:ba:03:b8:
8e:39:82:de:09:b0:f1:b9:40:1f:52:90:2c:b6:39:8e:27:4d:
24:30:fd:8f:63:70:4c:f4:5e:30:65:92:5f:9a:de:2f:11:8d:
eb:68:29:84:2d:a9:9e:05:8d:3d:f9:27:51:db:14:04:ff:5e:
35:1e:88:a6:3d:af:aa:4f:d2:b9:14:20:d2:be:ea:08:85:d5:
23:0f:af:43:13:34:57:15:60:e5:39:cd:62:17:dd:ac:6f:63:
a1:88:9f:49:de:5c:a0:ec:f4:eb:79:1d:19:4d:80:32:82:33:
4b:fa:64:f5:35:9f:69:70:5d:14:be:85:ea:27:46:4b:84:19:
ff:86:33:59:02:f9:2a:3a:a9:a1:b3:c3:da:d9:1e:ed:42:ae:
f3:f3:1f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:23:13 2026 by rpki-client