
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
File: tdRsD3W7vyQRKYrr0rVitaqV7Go.mft (raw, json)
Hash identifier: IW3ovZbppiTyiu99X6CJ0vYJ3Yy7S4UFdr7eRvf2sFw=
Subject key identifier: 58:B4:9D:E9:27:7A:8C:6B:C8:A8:61:C1:DE:21:39:E3:7C:C5:83:4C
Authority key identifier: B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A
Certificate issuer: /CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A
Certificate serial: 0B29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
Manifest number: 0B17
Signing time: Tue 12 May 2026 19:23:05 +0000
Manifest this update: Tue 12 May 2026 19:23:05 +0000
Manifest next update: Tue 19 May 2026 19:23:05 +0000
Files and hashes: 1: tdRsD3W7vyQRKYrr0rVitaqV7Go.crl (hash: inv8s2q3E3v7vciV6FtUq2W3TDJ3qLjjAsdDTEmbwkc=)
2: 1429DACC099B11ED8A62781AC4F9AE02.roa (hash: Fanpld4VVwaoYG94GzGbb0OhM2Vk2NZntXiUdQVh2c4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl
rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2857 (0xb29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C230, serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A
Validity
Not Before: May 12 19:23:05 2026 GMT
Not After : May 19 19:23:05 2026 GMT
Subject: CN=6a037e19-6ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:0a:54:ca:6e:2d:ee:ba:a8:fc:6f:dc:89:
1c:a5:f4:2f:b5:bb:42:f2:e6:d0:c2:b5:32:0e:84:
ee:71:f7:26:3f:35:0d:6d:45:e4:58:3a:fa:df:50:
55:39:27:bb:ed:5a:55:89:da:d3:5e:3c:2f:bb:62:
db:e0:68:3a:b8:4d:de:6f:05:f8:b5:40:98:72:17:
a8:7c:4b:07:24:a9:46:7f:f9:58:2e:04:e4:b6:12:
6e:46:e6:32:29:51:d2:5d:55:d8:06:b5:38:04:8f:
b4:e4:9a:a4:52:b9:eb:98:4d:2e:f8:42:5d:22:5d:
3f:a5:22:74:e5:ff:b1:ca:d3:1b:d7:0e:3e:8d:f4:
6d:16:69:c8:27:f5:fa:5f:91:23:0b:c6:1f:ba:23:
92:ab:84:fb:cb:ba:e8:e8:8f:b2:b0:02:ce:09:2b:
42:16:d8:00:cb:7b:53:75:93:cb:83:95:8a:df:b9:
9c:cd:57:01:ad:9c:7f:47:a8:2d:70:9e:b9:1c:32:
7d:00:fa:8f:93:55:05:87:dc:ba:60:4b:b2:12:f6:
a8:76:99:4c:d3:f6:ab:2b:de:94:cd:e9:55:12:36:
2c:76:bf:47:3b:ed:f8:d2:4a:5f:4c:41:ec:5c:ce:
70:0d:ca:43:2c:c8:72:a7:fe:1a:70:9a:19:0f:e7:
a8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B4:9D:E9:27:7A:8C:6B:C8:A8:61:C1:DE:21:39:E3:7C:C5:83:4C
X509v3 Authority Key Identifier:
keyid:B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:ed:f2:3d:56:b2:e1:8f:8f:03:52:83:ab:ed:4a:6b:1a:b6:
1a:2d:72:9e:e0:2a:de:08:71:78:8e:c8:aa:9a:cf:8f:88:8d:
69:17:06:f4:ad:18:7b:06:5b:d0:c9:fd:8e:48:98:76:5b:4e:
0a:6c:5a:21:ce:f5:4c:4d:c7:63:b2:03:8a:5b:e9:9d:b4:79:
6b:3c:13:90:1f:f0:cb:36:d8:40:70:ae:d0:8c:4a:d8:d1:ce:
6a:d7:77:d7:62:b5:47:35:83:b2:a5:29:bb:e4:af:85:0d:f6:
59:d9:d8:bf:00:9f:82:c6:7a:25:7d:00:f2:f0:2f:86:91:23:
36:01:35:c6:43:0f:38:98:ac:ec:51:e8:69:aa:6e:5a:54:9e:
a0:f8:a1:50:66:13:f0:81:3e:b2:98:a2:6c:87:b5:ae:50:32:
fb:4a:94:aa:90:eb:af:4a:b3:86:e7:19:fe:15:c9:d5:5e:35:
86:0d:ef:cd:c3:42:7d:ed:5b:24:c0:c1:97:4c:97:60:02:47:
46:69:5b:78:e2:37:f4:ec:dc:e6:9d:94:a2:5d:c7:2d:49:4d:
04:5d:57:22:9b:a7:c0:da:1c:59:9f:10:57:db:89:fc:25:68:
84:1c:0c:d8:37:db:89:97:91:d2:a4:ca:25:85:33:49:c4:4d:
df:ff:c9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:14:36 2026 by rpki-client