
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
File: TfrxJZm8ip9x2mCrOSDgofQBWOU.mft (raw, json)
Hash identifier: t9WwrmWZT8eG260wfRoxaHNxSnnPBIUIv1fyyvfBjLc=
Subject key identifier: 9B:03:37:69:51:94:F0:B2:BE:76:07:8A:5C:AC:1B:7C:36:94:C0:7B
Authority key identifier: 4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5
Certificate issuer: /CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5
Certificate serial: 0193
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
Manifest number: 018C
Signing time: Wed 25 Mar 2026 03:46:45 +0000
Manifest this update: Wed 25 Mar 2026 03:46:45 +0000
Manifest next update: Wed 01 Apr 2026 03:46:45 +0000
Files and hashes: 1: TfrxJZm8ip9x2mCrOSDgofQBWOU.crl (hash: GcbFKOMF1IJ8+YR779gE3jWa+/2LnkmkOzOfgn5i4Y8=)
2: E7780BD6D17411EE87F7325DC4F9AE02.roa (hash: aYWucjZ8tbFFOJjhnsxBWRbU4+NEAoHg7sD4aZhVjUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl
rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:46:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186249, serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5
Validity
Not Before: Mar 25 03:46:45 2026 GMT
Not After : Apr 1 03:46:45 2026 GMT
Subject: CN=69c35aa5-23c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:5a:97:6c:c3:c3:b4:4e:36:b0:72:c2:01:
11:7b:b4:09:eb:0e:81:88:45:f4:55:9a:e7:f1:56:
11:32:e9:0c:5c:e6:c1:80:7e:9a:02:28:e8:76:60:
e1:95:52:bf:cf:d5:66:c7:5d:f1:5d:f2:c5:03:7a:
43:2c:4f:cb:2e:df:08:26:a8:08:b6:ca:99:12:7f:
bb:95:4c:2e:17:dd:6b:ce:fa:77:d9:00:38:ef:71:
13:f9:c4:20:3f:7e:fb:7f:50:cb:9c:b8:ca:f4:64:
c3:9e:d5:ee:d0:48:18:4c:4b:1d:e6:3d:8e:4b:7b:
65:b3:57:6f:f1:ae:b5:ba:8c:e8:76:ee:87:7a:5c:
d7:d5:b1:95:52:8c:ed:2c:67:31:a2:88:15:6f:03:
7b:26:93:57:b4:78:5d:6a:cc:fd:10:7b:e9:2d:10:
96:6f:4c:3b:3d:60:4a:ff:04:31:c4:45:29:3d:5a:
2b:ec:58:56:55:25:e1:27:7c:77:df:83:dc:60:70:
1e:d0:ad:c3:e6:7f:52:f9:f0:4a:f2:4e:d1:a3:18:
0e:94:c9:29:a5:d6:68:d9:b1:ae:2c:de:d9:cc:05:
c0:88:9b:c6:26:9e:e5:d7:5c:c5:c1:10:d7:dc:43:
5f:01:c4:b8:a4:8b:1b:51:29:50:da:a6:0e:e2:a9:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:03:37:69:51:94:F0:B2:BE:76:07:8A:5C:AC:1B:7C:36:94:C0:7B
X509v3 Authority Key Identifier:
keyid:4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:f1:5c:cb:64:7b:d4:7c:8f:94:0e:bc:8d:62:e0:3c:1e:51:
e6:05:d7:d6:a6:28:65:81:1d:84:84:7d:73:79:16:42:28:c0:
f7:b6:9e:de:01:3c:29:b2:96:6f:38:51:44:98:c3:bb:67:5f:
eb:56:5f:46:48:1d:ef:33:e7:27:a2:9d:d9:15:71:85:d8:97:
1a:d5:cc:ba:07:b5:4c:c0:92:6f:1a:ae:d3:ec:fc:90:e4:38:
11:e0:bb:70:ba:ef:db:1d:e4:31:d3:dd:5c:6e:67:79:6d:df:
38:26:b6:74:a9:47:8e:d7:b0:88:80:4d:38:dd:b4:c3:09:6e:
fd:15:df:ba:6d:f1:cb:d1:56:f3:37:03:97:cb:cd:26:7f:0f:
e3:be:3f:04:12:bd:27:ee:f5:a6:ba:85:bb:80:70:b4:b7:0b:
e7:9e:b6:cc:d6:21:a4:d8:2f:07:ff:11:e1:dc:5b:5c:24:41:
92:f1:be:1c:e1:58:9a:a4:27:19:f3:fa:ab:64:63:63:e9:6d:
b8:3c:7a:cc:d9:4c:86:a3:46:1e:18:0c:4b:7b:f8:52:4d:8b:
00:ce:59:07:8e:2e:2c:e3:7c:18:7d:d3:82:2c:55:31:3d:9e:
bd:d6:b9:50:a2:3e:5c:a6:aa:b2:99:47:9d:f2:db:d4:da:91:
57:c2:3a:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyNDkxMTAvBgNVBAUTKDRERkFGMTI1OTlCQzhBOUY3MURBNjBBQjM5MjBFMEEx
RjQwMTU4RTUwHhcNMjYwMzI1MDM0NjQ1WhcNMjYwNDAxMDM0NjQ1WjAYMRYwFAYD
VQQDEw02OWMzNWFhNS0yM2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvWRal2zDw7RONrBywgERe7QJ6w6BiEX0VZrn8VYRMukMXObBgH6aAijodmDh
lVK/z9Vmx13xXfLFA3pDLE/LLt8IJqgItsqZEn+7lUwuF91rzvp32QA473ET+cQg
P377f1DLnLjK9GTDntXu0EgYTEsd5j2OS3tls1dv8a61uozodu6HelzX1bGVUozt
LGcxoogVbwN7JpNXtHhdasz9EHvpLRCWb0w7PWBK/wQxxEUpPVor7FhWVSXhJ3x3
34PcYHAe0K3D5n9S+fBK8k7RoxgOlMkppdZo2bGuLN7ZzAXAiJvGJp7l11zFwRDX
3ENfAcS4pIsbUSlQ2qYO4qkdJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJsDN2lR
lPCyvnYHilysG3w2lMB7MB8GA1UdIwQYMBaAFE368SWZvIqfcdpgqzkg4KH0AVjl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjI0OS85ODcyNkQ2RUQx
NzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlwOXgybUNyT1NEZ29mUUJX
T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RmcnhKWm04aXA5eDJtQ3JPU0Rnb2ZRQldPVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjI0OS85ODcyNkQ2RUQxNzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlw
OXgybUNyT1NEZ29mUUJXT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJPFcy2R71HyPlA68jWLgPB5R5gXX1qYoZYEdhIR9c3kWQijA97ae3gE8KbKW
bzhRRJjDu2df61ZfRkgd7zPnJ6Kd2RVxhdiXGtXMuge1TMCSbxqu0+z8kOQ4EeC7
cLrv2x3kMdPdXG5neW3fOCa2dKlHjtewiIBNON20wwlu/RXfum3xy9FW8zcDl8vN
Jn8P474/BBK9J+71prqFu4BwtLcL5562zNYhpNgvB/8R4dxbXCRBkvG+HOFYmqQn
GfP6q2RjY+ltuDx6zNlMhqNGHhgMS3v4Uk2LAM5ZB44uLON8GH3TgixVMT2evda5
UKI+XKaqsplHnfLb1NqRV8I6TQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:26 2026 by rpki-client