
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
File: T2scW0K2HdXigZOWenDRiiKP73Y.mft (raw, json)
Hash identifier: ulp4CdHb8pUew/Fp6h4zJv4a/wgUNHsOJHvvI6bMPHY=
Subject key identifier: D6:A7:85:B8:14:AC:4D:F6:9C:C1:14:33:78:AF:73:85:A2:C2:60:DF
Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76
Certificate issuer: /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
Certificate serial: 0D40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
Manifest number: 0D36
Signing time: Tue 12 May 2026 18:05:57 +0000
Manifest this update: Tue 12 May 2026 18:05:56 +0000
Manifest next update: Tue 19 May 2026 18:05:56 +0000
Files and hashes: 1: T2scW0K2HdXigZOWenDRiiKP73Y.crl (hash: BeZPlaUEwdYHwT3QWg/mBGE8DK8LPjqR1StBeS8EZlE=)
2: 7DF47F46F95611E996377877C4F9AE02.roa (hash: WNUk8jDYPlrb/rdVyo4XTCfnmiGld7eyz2MY75cZ7HI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl
rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3392 (0xd40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174DAD, serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
Validity
Not Before: May 12 18:05:56 2026 GMT
Not After : May 19 18:05:56 2026 GMT
Subject: CN=6a036c05-e491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2e:0a:95:d8:b9:b5:3e:d4:c6:4e:56:35:2a:
f0:e0:40:14:a1:45:03:e9:e0:cc:e8:8f:42:7b:ff:
99:1e:d9:bd:b5:8c:35:d6:0b:ca:8f:fd:14:b8:8d:
c4:df:eb:0d:eb:a7:32:67:88:31:ef:86:51:64:bf:
bd:b0:8c:9f:86:3e:ab:fc:af:ee:5c:15:a0:10:af:
19:c5:a2:8a:60:d6:64:da:87:fa:74:18:d8:96:2e:
00:96:c7:b1:4d:6c:2f:3e:12:56:ef:18:eb:21:ee:
ae:a6:8a:f6:d4:b9:81:6f:d7:d2:f1:fd:db:47:fd:
90:1f:5e:58:b5:49:e2:89:b6:c7:1c:73:40:b9:47:
68:85:12:4b:fc:08:10:7d:57:52:57:78:0e:38:78:
9f:29:a5:06:5b:07:bd:a1:15:9f:c5:f2:58:d6:ae:
a0:1b:1b:6e:03:d1:2f:dc:43:1c:59:c1:d9:81:6c:
0c:a9:81:71:e3:c0:04:20:9b:8d:37:00:8c:44:82:
dc:6f:3f:ee:f0:d5:f7:51:2f:61:0d:13:8b:96:cd:
c4:75:9e:b5:4c:43:cb:e4:c5:ca:e3:5e:da:0a:d7:
c2:fa:52:0c:28:b4:dd:b7:64:99:5d:a5:00:0c:d4:
b9:21:e0:ca:e8:c7:22:e2:23:17:0b:1f:ce:70:40:
3f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A7:85:B8:14:AC:4D:F6:9C:C1:14:33:78:AF:73:85:A2:C2:60:DF
X509v3 Authority Key Identifier:
keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e3:b7:7b:42:0f:4b:8e:7c:92:bb:00:5f:0c:c2:47:83:9e:
c5:34:7e:f1:21:12:9d:64:95:a4:c5:60:c7:0e:bb:66:c5:82:
a7:4d:17:e6:9d:5e:d7:6a:64:31:82:fb:cd:b7:fb:5b:40:21:
11:b4:88:99:69:ab:8a:d1:17:3b:84:a5:fc:8b:b2:f0:d7:73:
01:e6:5e:7e:9e:fa:17:24:34:d2:28:18:7b:12:fb:a2:8f:be:
da:eb:0c:2b:41:1a:18:06:09:ec:2d:40:cc:bc:a5:b2:9a:6f:
38:5b:97:e8:1f:18:51:d2:b9:f7:68:f8:f2:38:0d:2f:90:12:
2e:a1:e3:45:c8:49:a6:b4:bf:14:fa:aa:c2:d7:e8:49:68:56:
82:77:40:29:20:db:43:10:29:4b:5a:ef:c9:3c:2a:ff:97:4e:
1e:65:aa:f2:57:07:24:0b:32:ae:55:0f:49:cf:55:fc:6c:8f:
75:19:72:56:bb:37:9c:34:cf:c9:e4:fc:ed:11:eb:9d:d2:25:
80:05:28:8d:3f:63:17:fc:ef:81:46:49:73:ac:66:d6:04:52:
44:91:e2:89:e6:ce:e7:a8:2b:4e:92:d8:42:87:dd:d2:0a:2d:
78:e7:6b:c5:ac:30:0f:b8:e9:90:da:15:6a:8f:76:8a:b4:a0:
0c:2d:2f:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzREQUQxMTAvBgNVBAUTKDRGNkIxQzVCNDJCNjFERDVFMjgxOTM5NjdBNzBEMThB
MjI4RkVGNzYwHhcNMjYwNTEyMTgwNTU2WhcNMjYwNTE5MTgwNTU2WjAYMRYwFAYD
VQQDEw02YTAzNmMwNS1lNDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6C4Kldi5tT7Uxk5WNSrw4EAUoUUD6eDM6I9Ce/+ZHtm9tYw11gvKj/0UuI3E
3+sN66cyZ4gx74ZRZL+9sIyfhj6r/K/uXBWgEK8ZxaKKYNZk2of6dBjYli4Alsex
TWwvPhJW7xjrIe6upor21LmBb9fS8f3bR/2QH15YtUniibbHHHNAuUdohRJL/AgQ
fVdSV3gOOHifKaUGWwe9oRWfxfJY1q6gGxtuA9Ev3EMcWcHZgWwMqYFx48AEIJuN
NwCMRILcbz/u8NX3US9hDROLls3EdZ61TEPL5MXK417aCtfC+lIMKLTdt2SZXaUA
DNS5IeDK6Mci4iMXCx/OcEA/MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNanhbgU
rE32nMEUM3ivc4WiwmDfMB8GA1UdIwQYMBaAFE9rHFtCth3V4oGTlnpw0Yoij+92
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NERBRC9GQzYwRTVCQUY5
NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhkWGlnWk9XZW5EUmlpS1A3
M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Qyc2NXMEsySGRYaWdaT1dlbkRSaWlLUDczWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NERBRC9GQzYwRTVCQUY5NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhk
WGlnWk9XZW5EUmlpS1A3M1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPOO3e0IPS458krsAXwzCR4OexTR+8SESnWSVpMVgxw67ZsWCp00X5p1e12pk
MYL7zbf7W0AhEbSImWmritEXO4Sl/Iuy8NdzAeZefp76FyQ00igYexL7oo++2usM
K0EaGAYJ7C1AzLylsppvOFuX6B8YUdK592j48jgNL5ASLqHjRchJprS/FPqqwtfo
SWhWgndAKSDbQxApS1rvyTwq/5dOHmWq8lcHJAsyrlUPSc9V/GyPdRlyVrs3nDTP
yeT87RHrndIlgAUojT9jF/zvgUZJc6xm1gRSRJHiiebO56grTpLYQofd0goteOdr
xawwD7jpkNoVao92irSgDC0vmA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:25:08 2026 by rpki-client