
$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
File: TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft (raw, json)
Hash identifier: A/7ArZkIbKTD+bU2h9C1GpRJNd//oT0SjUnhujPI7Ck=
Subject key identifier: D2:2D:85:5D:16:5B:8D:6F:89:D0:52:38:1A:41:B0:5C:A2:BC:4F:48
Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
Certificate issuer: /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Certificate serial: 0284
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
Manifest number: 025C
Signing time: Wed 25 Mar 2026 02:01:22 +0000
Manifest this update: Wed 25 Mar 2026 02:01:21 +0000
Manifest next update: Wed 01 Apr 2026 02:01:21 +0000
Files and hashes: 1: TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl (hash: nwaX4EcadnFgYZdY1rcdVsT6V1whs5yLf8WyXR3bk5s=)
2: AF4851DEE36C11EF876EED6BC4F9AE02.roa (hash: EtO6wbraksayLXE18v91zlhc7ewTBueQmyYuDQn9f80=)
3: B029CB28E36C11EF876EED6BC4F9AE02.roa (hash: Nk/g84duKOL84EOqCsGJGsJdoLwJbBNblBDdMjJDacY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl
rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 644 (0x284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918664E, serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Validity
Not Before: Mar 25 02:01:21 2026 GMT
Not After : Apr 1 02:01:21 2026 GMT
Subject: CN=69c341f2-07c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:02:ba:84:92:2f:62:c2:86:80:94:9a:d9:c6:
dc:b7:7d:46:aa:95:f5:56:dd:8b:e0:ad:7b:0a:ab:
72:95:03:0f:4d:e8:b0:e4:76:48:d4:ad:5e:84:6b:
04:45:f5:0b:d6:54:69:61:55:4e:f6:69:b5:95:06:
5b:18:c7:9d:27:05:34:c7:f8:70:ad:af:91:6a:2c:
18:ee:14:a2:24:74:46:57:a4:5e:28:78:9d:f0:06:
bc:67:96:27:44:6a:65:b3:54:bb:7b:b3:52:4b:c9:
7e:4c:c6:92:a3:c4:62:af:d0:50:68:d4:71:21:9d:
71:fe:e4:28:a0:bd:52:05:bd:e7:1a:8c:e1:ee:08:
ac:85:ca:b9:89:53:c8:53:33:e3:c9:b5:c7:6d:12:
6a:17:c2:52:15:d8:24:1a:4e:ef:99:59:f1:82:37:
0f:52:fa:c7:05:1c:74:ba:31:a0:b9:4d:33:e3:8b:
1a:1e:b5:47:b1:5f:cf:51:f9:1a:52:15:4c:3e:ac:
63:af:07:42:ac:3a:25:fc:12:63:b8:67:61:74:2d:
3a:bf:b5:d9:90:0a:99:69:56:48:bc:1c:6a:38:44:
b5:0f:f6:25:59:17:d3:db:aa:86:5c:7a:da:8b:17:
85:fc:65:72:3f:ee:5a:fe:d9:6e:a2:4d:3c:11:af:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2D:85:5D:16:5B:8D:6F:89:D0:52:38:1A:41:B0:5C:A2:BC:4F:48
X509v3 Authority Key Identifier:
keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:52:34:c2:ef:ee:b0:b8:ed:e1:00:ea:15:67:0e:f8:8e:df:
17:b1:6f:12:4f:d9:b7:9f:af:b6:00:3b:7e:06:b9:a0:d1:04:
8b:a0:22:8c:fb:e8:3d:03:5a:38:53:e8:dd:84:26:69:bf:0e:
42:34:9b:c8:b4:20:fc:f9:86:8d:c4:aa:92:1d:f7:2c:f1:a5:
44:d7:b8:25:6b:ed:ee:e0:a3:00:ba:d3:4d:65:83:ad:94:8e:
7b:61:52:bd:1c:37:28:f6:c4:25:5c:2a:d5:b1:7e:d6:80:dd:
1b:fc:57:08:1f:ec:0f:34:c1:e8:7e:3a:82:5a:3e:0c:26:36:
94:f7:8c:68:45:65:fa:c5:1a:5b:bf:e8:a2:77:e5:db:14:51:
28:3b:4b:89:79:3b:78:34:a5:ed:6c:43:01:fe:94:0f:d4:b2:
52:ca:3b:ee:ed:c0:51:5a:4b:93:b1:a5:a4:7e:c9:18:6e:51:
fd:d9:c8:d8:38:09:4f:e0:d3:6e:e8:39:72:a9:d7:39:8f:73:
12:e6:b5:bf:1f:c5:f3:90:65:ef:97:bb:97:7b:6d:0b:44:20:
b3:8d:7d:07:1a:c9:3d:5c:5e:bf:2c:15:33:58:c3:24:18:e4:
50:21:ed:a6:6a:8c:0e:11:ba:6c:9f:a1:4f:db:cb:14:0e:4c:
31:70:bd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:46 2026 by rpki-client