
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
File: T2scW0K2HdXigZOWenDRiiKP73Y.mft (raw, json)
Hash identifier: goqIyXxQAvN7cuZeXS8rb5Jv9T74VB5HkVhsGjkeJyo=
Subject key identifier: B2:6C:D9:19:F0:F6:E4:56:D3:83:AE:66:11:6F:50:46:53:E7:58:63
Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76
Certificate issuer: /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
Certificate serial: 0D28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
Manifest number: 0D1E
Signing time: Thu 26 Mar 2026 18:01:16 +0000
Manifest this update: Thu 26 Mar 2026 18:01:15 +0000
Manifest next update: Thu 02 Apr 2026 18:01:15 +0000
Files and hashes: 1: T2scW0K2HdXigZOWenDRiiKP73Y.crl (hash: HEWNawDk18pQL2LKUcqxALKldJIrBXvBXqYUUDTNKR4=)
2: 7DF47F46F95611E996377877C4F9AE02.roa (hash: WNUk8jDYPlrb/rdVyo4XTCfnmiGld7eyz2MY75cZ7HI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl
rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 18:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3368 (0xd28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174DAD, serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
Validity
Not Before: Mar 26 18:01:15 2026 GMT
Not After : Apr 2 18:01:15 2026 GMT
Subject: CN=69c5746c-5b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dd:11:7e:8b:67:38:e0:ba:41:1c:94:ce:48:
4b:7f:c1:13:fe:c3:27:1e:31:8a:d5:55:13:6d:d2:
5e:b3:08:05:2b:5f:0f:f1:ff:54:5d:fb:f3:36:7d:
53:b1:09:b1:de:b9:0a:a9:f9:1a:b6:5d:0b:1a:c0:
73:53:94:1e:0a:a6:f9:c0:82:f2:ad:cd:82:e3:01:
a4:f3:88:fd:ac:46:38:20:3e:5f:43:80:0c:fe:f7:
13:f2:dc:ae:39:7d:be:00:31:60:3a:71:65:de:8d:
97:8f:56:bb:5a:30:6e:d7:0e:da:9a:8c:6d:c5:47:
b9:c8:d4:7e:6a:b9:4e:a4:98:86:4f:9f:b5:40:25:
7b:89:c8:d6:fd:2c:03:52:c2:53:c1:ba:fd:ab:be:
da:f7:79:60:53:53:04:ed:ce:41:1e:66:03:f4:c4:
29:99:fc:94:f1:42:f1:64:2d:15:4e:3f:b7:39:66:
3f:38:ff:df:1d:56:d8:74:ec:28:15:95:b7:a2:b1:
74:f8:ef:7c:1a:31:68:ab:5b:a7:28:71:66:39:a9:
57:65:71:85:dd:c5:73:d3:20:66:45:39:33:2a:23:
22:76:62:55:c9:ea:e3:ce:7b:c1:e1:80:42:6f:24:
b7:de:35:a4:25:ab:e4:fb:c5:db:96:c0:eb:ff:02:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6C:D9:19:F0:F6:E4:56:D3:83:AE:66:11:6F:50:46:53:E7:58:63
X509v3 Authority Key Identifier:
keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a8:2c:8c:58:d9:a1:3d:5e:40:13:40:fe:f5:f6:63:14:8c:
59:c1:7f:98:2a:fb:65:8e:27:6c:ac:4e:b4:2a:b3:c5:e0:22:
5f:34:e9:8f:4b:2e:44:e3:ea:4a:51:b0:95:55:ec:1a:ed:4f:
c3:a5:b5:05:25:c2:a6:1b:f0:9f:bd:c4:fb:30:93:f0:7b:ac:
31:ab:1f:2b:c3:2c:c3:6d:fd:23:2f:a2:4c:4a:d9:c0:98:51:
51:87:6b:e6:98:78:e0:c4:b1:f6:0a:74:3c:ca:52:31:b1:bb:
e4:c6:ef:52:88:a7:2a:11:9c:d9:e3:fe:ee:bf:67:2d:39:59:
fd:5f:0b:1d:18:41:7c:08:56:f9:23:99:ca:6e:0f:f8:1d:fc:
d0:ed:34:76:be:d1:16:04:01:7d:a6:32:d9:31:ce:3e:43:c4:
4f:5e:e7:8c:98:68:ca:7f:d1:14:e6:d9:dc:d5:de:39:2a:dc:
9c:89:a3:90:7f:f3:bd:38:25:5e:08:86:54:32:fc:3a:90:ca:
a5:f4:1a:31:2d:69:98:cf:6b:bf:2c:e3:26:95:38:f9:0c:eb:
de:45:16:5a:f6:c5:85:21:75:f9:7f:1a:f7:da:d8:aa:7a:8e:
5f:87:99:f0:b9:5c:8f:14:a0:75:f9:35:8c:1f:68:31:bc:21:
34:65:bb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:44:12 2026 by rpki-client