
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
File: tSxU1GporezDfV9vJyKMbepz6Fw.mft (raw, json)
Hash identifier: 80TQk+FiansUqrcCzKoVa4mrFTYUwojXO3VgcdKaFsA=
Subject key identifier: D3:BB:74:2F:C6:33:2B:A1:26:E3:86:DB:35:CD:CE:A3:D7:B7:0B:C5
Authority key identifier: B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C
Certificate issuer: /CN=A918E79C/serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C
Certificate serial: 0199
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
Manifest number: 0194
Signing time: Wed 25 Mar 2026 03:38:56 +0000
Manifest this update: Wed 25 Mar 2026 03:38:55 +0000
Manifest next update: Wed 01 Apr 2026 03:38:55 +0000
Files and hashes: 1: tSxU1GporezDfV9vJyKMbepz6Fw.crl (hash: P67sSg4k1Xu3AMcfbNZsTUiZmQy7+5dOPHtXXJ3UnwY=)
2: 28C6AB84C0E411EEAFFB100BC4F9AE02.roa (hash: Lqj3OiAEZ1NUj5c3pIE9yhxwkfOhtjVIBdNf9vQb1eQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl
rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E79C, serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C
Validity
Not Before: Mar 25 03:38:55 2026 GMT
Not After : Apr 1 03:38:55 2026 GMT
Subject: CN=69c358d0-da24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:ca:fe:54:c3:5f:11:b2:92:89:4f:52:bb:
3f:98:6a:57:9d:36:eb:9f:99:17:36:dc:fb:b4:9f:
7f:8b:64:8a:f2:5a:bc:76:2c:70:fc:b9:6b:96:48:
28:94:8a:6e:8e:ef:be:28:05:da:15:5c:00:a7:14:
92:42:bf:c0:ff:20:44:3d:b1:fc:6c:d8:f4:69:0a:
80:4b:0e:78:c0:1b:55:a8:0e:bc:f3:26:8a:e3:87:
ab:49:fa:04:5b:14:88:a3:c3:22:ba:3a:60:5a:35:
fa:1b:b2:80:d1:58:b0:8e:74:ef:4f:54:05:d6:d6:
90:c2:d4:71:7e:1a:50:4b:eb:f9:55:21:9f:ba:64:
c1:27:fe:70:49:ca:66:6e:6a:91:ae:92:7f:af:f5:
b4:34:76:c9:51:6a:a4:26:c1:8d:49:c2:83:2d:a8:
1a:24:6e:1f:b7:a5:7d:bf:46:80:0c:69:08:f8:27:
de:30:da:a4:d3:21:7e:d9:91:46:54:03:3d:bf:92:
c9:c1:d6:ab:e6:4f:b4:3d:ef:c5:c0:a8:47:0e:f9:
33:4a:b3:de:64:25:5e:19:9a:db:12:30:bb:d3:05:
af:c9:9d:1f:96:72:98:26:5e:b5:7a:e2:ae:d6:d0:
ea:d7:a2:72:b7:2b:9f:01:b1:a9:c5:38:2a:d3:3b:
68:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BB:74:2F:C6:33:2B:A1:26:E3:86:DB:35:CD:CE:A3:D7:B7:0B:C5
X509v3 Authority Key Identifier:
keyid:B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:2b:07:5f:f2:5f:ac:bd:0f:37:d7:2f:0f:f3:dd:1f:ae:3d:
77:da:44:7e:60:82:3d:13:eb:81:60:f1:ab:46:87:db:c2:59:
4c:51:19:f9:bc:c1:ce:39:4a:28:8e:da:0a:b6:00:7b:a1:1d:
58:ce:70:b6:f7:b0:8c:5e:26:80:33:6a:dd:29:51:ae:91:2d:
0c:74:79:89:f0:ff:20:bb:e5:36:d1:0f:e0:54:4d:78:3a:ac:
a6:5f:e2:76:c6:9f:18:9d:35:a4:88:4a:4e:75:79:84:1c:33:
f3:9d:7b:52:0d:c2:d1:09:e7:af:0c:42:b5:cf:5e:5d:8f:f4:
5b:94:8f:df:c8:f7:05:07:a7:27:91:81:16:97:96:89:1a:3d:
da:7b:ba:f2:c8:e1:5d:ab:5c:b9:50:b9:95:2c:18:90:5e:7c:
a3:73:47:9e:8a:db:8d:2e:76:1a:6d:f8:53:58:c5:29:97:cd:
5a:d9:c5:24:3c:cb:5b:1c:35:4c:87:de:56:70:96:20:f2:6e:
e6:ba:a4:69:41:1e:0d:12:40:14:ef:1a:9a:1b:19:d3:02:a0:
d3:72:51:97:ee:57:92:c7:32:0b:04:77:f4:69:b0:a1:7b:72:
36:5c:4a:4d:ce:8a:d9:65:6c:44:f6:8c:af:0e:ad:a8:22:e0:
8d:49:0a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:26 2026 by rpki-client