
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
File: tdRsD3W7vyQRKYrr0rVitaqV7Go.mft (raw, json)
Hash identifier: JE8Ij6+tWyAo1GjN8SHno3fnDUpKn+RMcFkUZQcWNr4=
Subject key identifier: 60:27:A7:71:53:61:F0:29:0F:00:CF:83:9A:9C:B0:CE:1F:B8:A0:41
Authority key identifier: B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A
Certificate issuer: /CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A
Certificate serial: 0B10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
Manifest number: 0AFE
Signing time: Tue 24 Mar 2026 19:10:37 +0000
Manifest this update: Tue 24 Mar 2026 19:10:37 +0000
Manifest next update: Tue 31 Mar 2026 19:10:37 +0000
Files and hashes: 1: tdRsD3W7vyQRKYrr0rVitaqV7Go.crl (hash: Tr6EFDviZCk4qj3nrnwqb2qEqamey7EePSFdYK+dxUU=)
2: 1429DACC099B11ED8A62781AC4F9AE02.roa (hash: Fanpld4VVwaoYG94GzGbb0OhM2Vk2NZntXiUdQVh2c4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl
rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2832 (0xb10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C230, serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A
Validity
Not Before: Mar 24 19:10:37 2026 GMT
Not After : Mar 31 19:10:37 2026 GMT
Subject: CN=69c2e1ad-ed35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:df:78:12:6d:16:c6:0f:da:9e:41:e2:10:
08:35:0d:5c:54:4f:1a:7e:72:02:92:c1:9a:75:96:
23:20:1c:7d:b1:03:e3:d4:14:9d:b6:0e:7a:e9:3a:
59:01:d5:90:12:2a:5d:05:29:0a:98:6a:ca:82:1d:
9c:fd:6a:bb:48:4a:73:b6:0a:93:a6:d2:70:83:e7:
1d:e5:a2:e3:cb:d4:5c:ee:9d:05:19:c6:cc:06:af:
0d:00:8f:b2:22:ca:da:a3:15:b4:5f:46:10:2e:3b:
e6:28:c0:32:36:d6:f0:52:05:d7:e8:5d:c6:23:47:
7c:6e:56:e1:cb:af:de:e5:f5:e1:66:1d:2d:2c:c6:
04:19:9b:8c:86:6c:69:63:a9:81:0e:0b:00:a9:c0:
2c:ab:b8:34:ef:d3:3d:a8:71:74:17:70:cb:b8:73:
a4:c6:4d:2a:f0:ae:a7:57:b9:ad:5c:36:c8:27:a1:
4d:37:95:f3:43:8f:77:7f:d1:0a:31:80:e9:fa:19:
57:44:53:65:7b:7e:13:f5:67:2a:a3:06:3e:9a:b7:
f5:b0:01:69:73:8c:7e:c7:db:39:f9:c0:a8:33:f7:
1c:b0:77:16:26:a9:c8:09:f2:9d:f7:47:66:58:58:
03:ec:67:e0:85:fe:39:43:70:7d:ce:bb:8a:d9:90:
9d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:27:A7:71:53:61:F0:29:0F:00:CF:83:9A:9C:B0:CE:1F:B8:A0:41
X509v3 Authority Key Identifier:
keyid:B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:f7:e3:f8:d2:e5:26:f2:d9:fd:10:96:b6:6f:ee:a8:c7:4d:
35:f9:9c:0d:9a:bd:bc:5d:c5:a2:d4:cf:cf:16:a8:c7:08:2c:
4a:b5:75:26:6d:8d:7b:bc:1f:5a:90:a8:50:6b:63:fc:f1:33:
73:47:94:06:31:25:8d:80:27:57:f9:ba:30:65:3d:9d:99:08:
61:c7:79:5c:cf:38:b7:fd:6f:f9:98:80:7c:b1:61:78:91:80:
83:37:ea:30:47:ba:1f:47:08:43:64:00:c5:94:b2:0a:53:3b:
bb:59:45:56:e0:a9:b8:f5:ca:59:c8:c0:fd:a3:75:f0:4b:da:
27:bd:e1:73:09:3b:15:a9:27:b5:b7:e4:83:38:ed:66:50:b4:
af:7a:2c:dd:79:6d:59:da:20:2c:c2:4e:07:af:63:80:ea:35:
a7:4a:f3:8c:c2:90:c1:5e:f5:b3:41:e5:fd:59:5f:b3:c3:bc:
02:80:39:29:57:5a:f1:60:e6:d0:77:2e:44:4a:d7:5f:5c:ba:
1b:a8:b5:9a:33:f2:fa:b7:cf:e9:e7:94:26:ba:47:f5:83:a0:
29:03:63:3d:0a:18:9f:bf:45:a7:5b:ef:27:40:53:ab:6b:b3:
fe:5c:c5:24:6b:18:d4:60:cd:c2:77:7c:f6:ed:c2:d0:9d:07:
22:c5:cd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:20 2026 by rpki-client