
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
File: TiWbqHpAtm2EKsjOCup4TkvXOC4.mft (raw, json)
Hash identifier: h7wYNQlRuZFyRIKyo6+CvA53+HBkshYFtKlx3aLhtic=
Subject key identifier: A5:A6:52:98:67:A4:43:67:62:BA:6A:28:7A:CD:09:85:C2:5E:F1:D9
Authority key identifier: 4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E
Certificate issuer: /CN=A91E57A9/serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
Manifest number: 0155
Signing time: Wed 25 Mar 2026 04:17:41 +0000
Manifest this update: Wed 25 Mar 2026 04:17:41 +0000
Manifest next update: Wed 01 Apr 2026 04:17:41 +0000
Files and hashes: 1: TiWbqHpAtm2EKsjOCup4TkvXOC4.crl (hash: ldxmz1Db2/N3e74SpHavFtAOO+B1jimAOUOYNPdx+3Y=)
2: 4647BCD66E7F11EF9223EA62C4F9AE02.roa (hash: FxWk3CYoUsmOWP3BThgvkKbLGxzzM1P6yOk19JYKyZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl
rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:17:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57A9, serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
Validity
Not Before: Mar 25 04:17:41 2026 GMT
Not After : Apr 1 04:17:41 2026 GMT
Subject: CN=69c361e5-1921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:25:42:96:de:fc:5c:4e:e8:5c:20:48:58:
2b:15:10:d1:81:86:81:53:3e:25:e8:ee:36:17:44:
0c:8b:b2:84:17:30:5c:27:b2:dd:1b:28:96:d4:34:
8d:f9:4f:e5:98:94:f8:1f:2c:57:6a:ae:cb:c0:d7:
c0:6b:bc:62:af:2b:22:2a:e7:61:64:b6:9d:dd:ae:
c1:12:1e:15:0a:99:bd:21:0d:5b:95:31:29:92:9e:
9b:d0:36:3a:05:34:96:79:c0:ba:86:2d:26:4c:4f:
e4:7b:82:2e:ab:ba:2f:d3:46:cc:e9:1b:b0:c2:27:
fe:6c:57:17:57:d3:bb:f8:77:53:cc:b1:60:ab:6d:
d7:25:81:5e:e1:93:7b:66:19:d0:b5:60:58:2f:a8:
a8:72:15:ea:6d:e4:d1:1d:6c:54:77:fd:50:02:a6:
93:75:b8:73:8f:18:6c:4a:32:29:2b:dc:56:8d:b7:
34:af:4f:1e:a3:f2:98:8b:2e:6c:a3:44:e2:cc:48:
07:0d:93:46:0e:93:e0:e9:ca:45:22:50:ee:02:65:
b4:84:3f:1e:75:80:38:e0:f1:1c:13:1e:17:96:0a:
da:5f:b3:f2:13:62:11:e6:a6:da:db:a8:ac:96:d6:
a2:b7:b8:a5:e1:88:ec:4e:87:8a:0d:92:6f:a4:44:
bc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A6:52:98:67:A4:43:67:62:BA:6A:28:7A:CD:09:85:C2:5E:F1:D9
X509v3 Authority Key Identifier:
keyid:4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a3:83:23:5f:35:0a:c0:d8:8b:a6:36:b1:f0:a1:41:18:b0:
f8:b1:e1:89:ce:a4:d8:9e:59:97:6e:9f:61:eb:d0:f7:70:41:
8c:6f:45:01:ba:58:44:4a:4a:73:4c:15:20:c4:83:9c:47:95:
be:94:bf:bb:29:53:2a:89:ad:9f:9d:26:ca:2f:61:94:cb:71:
2f:54:89:9e:d5:9f:27:32:99:82:39:6d:a6:3a:51:87:a5:35:
ae:f4:ca:e8:71:eb:00:2e:28:dd:16:65:89:9c:af:14:4f:c6:
68:4b:9f:6a:7c:1a:7b:8f:1c:1d:23:1a:0c:d0:5e:57:49:47:
84:0e:92:b1:9e:f4:34:04:a9:a4:81:7c:60:04:f8:44:19:ac:
75:bb:eb:0d:72:c6:cf:7f:ac:ff:b7:c5:fc:aa:2d:2a:e4:04:
83:df:80:c4:7a:27:85:24:52:1c:ea:34:7f:f8:fc:e1:07:24:
8b:22:2f:3c:b1:26:70:25:7e:0c:99:c1:f2:97:ac:bf:38:f7:
71:b2:aa:18:ae:a7:4e:26:2c:56:0f:76:ee:83:b4:a5:91:1f:
8d:e6:6a:e3:0a:b4:3b:bc:a9:3d:1b:9a:b2:0b:f8:32:72:c8:
eb:a6:9d:16:6f:36:9c:8c:2b:3a:62:04:43:41:b5:09:38:1c:
65:f2:3b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:45 2026 by rpki-client