
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
File: _tgXL4qVo1IC1RxvdfqUfehE9M0.mft (raw, json)
Hash identifier: OtWcD3rYYB7wkDJDEl+xM/4x/MJ0BuMCmciq8Bqnz84=
Subject key identifier: 79:C6:81:DD:E0:CF:23:9F:9A:86:E8:22:D6:36:AE:AB:1A:E1:F0:73
Authority key identifier: FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD
Certificate issuer: /CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
Certificate serial: 0187
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
Manifest number: 017E
Signing time: Wed 25 Mar 2026 03:51:25 +0000
Manifest this update: Wed 25 Mar 2026 03:51:24 +0000
Manifest next update: Wed 01 Apr 2026 03:51:24 +0000
Files and hashes: 1: _tgXL4qVo1IC1RxvdfqUfehE9M0.crl (hash: LQH6i4PD2SmDQHk/AemUSboD/2kr2eySxk1y7VFtOGA=)
2: 994A883AE06511EEA8CEC61EC4F9AE02.roa (hash: iAJ7bJgPc3fvc0VT2Ih64KNDwG9PjNk9khGO+aQcVnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl
rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:51:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198D95, serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
Validity
Not Before: Mar 25 03:51:24 2026 GMT
Not After : Apr 1 03:51:24 2026 GMT
Subject: CN=69c35bbc-8a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0c:7b:e7:c7:2f:c5:18:73:0a:c3:d8:df:81:
ed:85:88:68:27:f4:d3:4b:6b:71:f7:47:0d:2a:22:
28:33:be:12:3a:ac:33:c0:53:d8:61:a2:2b:ed:69:
f4:db:0f:cf:88:c3:ed:15:3e:c7:d7:6a:ee:c1:ee:
01:b0:ed:ff:f5:14:8d:e7:b9:a3:df:f3:4c:0d:86:
e1:f5:9b:b7:9f:7a:cc:88:f8:a5:a8:65:39:8a:80:
5f:c9:01:d2:d6:67:d4:d9:f6:83:96:97:66:01:06:
03:eb:1c:79:d2:0e:f5:85:7e:dd:e0:7f:17:9c:7e:
b0:44:5e:0a:14:e8:da:d5:78:ea:1a:30:89:b8:cc:
38:82:dd:c5:88:6c:f1:87:a6:59:fd:36:98:f9:e7:
84:a5:45:1a:21:30:ee:92:2e:b1:58:96:c8:01:91:
92:8c:b9:c2:dd:08:da:d5:fe:da:f1:7d:6a:b5:3e:
84:3e:a6:d2:f1:be:6a:97:09:b7:80:a5:6c:2a:2c:
d7:d8:41:3d:e3:98:82:e9:b9:6c:88:31:d8:81:dc:
ca:ee:fe:78:9a:83:52:d1:0b:bf:7c:6c:6d:f9:a9:
dd:41:1a:4d:a5:3b:dd:06:4d:c4:2e:50:02:41:3f:
47:33:83:4f:bf:f4:3d:90:74:82:51:d4:27:0d:03:
c9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C6:81:DD:E0:CF:23:9F:9A:86:E8:22:D6:36:AE:AB:1A:E1:F0:73
X509v3 Authority Key Identifier:
keyid:FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:f1:ac:1d:c6:4a:ce:20:3b:c0:7d:56:43:4a:25:b9:69:ad:
b0:42:af:08:2b:27:4d:8e:4b:dd:0f:06:dd:86:49:f9:57:1a:
d2:d0:df:5c:63:aa:8e:7b:49:d8:d4:32:9c:ce:e8:21:c1:14:
ec:46:cc:23:f8:86:ec:6c:36:2b:2d:fa:52:05:e6:b3:d9:c3:
10:0a:1c:29:47:29:b6:0b:3e:0e:bd:4b:90:28:4b:28:bb:08:
bd:4e:a6:39:69:fc:ec:34:15:a6:0c:46:8c:90:2c:63:95:de:
d8:1b:59:65:9b:10:01:91:1d:d5:36:e3:13:9c:fd:48:e7:f3:
9b:a3:46:d0:1a:72:b0:b1:4d:de:24:e7:28:2e:eb:f0:58:66:
11:b9:dd:96:ec:0e:37:16:68:b8:06:af:f2:f3:78:0c:21:91:
5e:ed:88:af:5a:be:99:03:ab:a1:ad:73:05:80:3e:a9:8b:94:
7c:c2:4c:43:41:d9:8b:9a:2f:af:2a:0a:40:27:34:23:b5:05:
62:f6:44:7b:4f:61:e8:b6:3f:2d:39:c2:bb:4b:47:bc:cf:53:
f5:95:1f:44:74:70:11:ef:27:aa:06:6d:c4:56:83:65:fa:c6:
5d:a7:50:e2:02:c8:ff:62:04:c2:ec:e3:8b:92:5a:a9:ca:72:
ac:c5:63:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:19:41 2026 by rpki-client