
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
File: tLhVi-xUNiD-bqkv68XoqSchTDk.mft (raw, json)
Hash identifier: GA3ayaSyxkuQuCeD+s9ftR04fpmaq6QV0Ps45hCV68k=
Subject key identifier: F7:A1:87:3E:8E:8F:C3:66:FA:31:04:78:42:56:B2:A0:FB:B7:BD:E1
Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39
Certificate issuer: /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39
Certificate serial: 0AB7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
Manifest number: 0AAC
Signing time: Sat 28 Feb 2026 19:44:58 +0000
Manifest this update: Sat 28 Feb 2026 19:44:58 +0000
Manifest next update: Sat 07 Mar 2026 19:44:58 +0000
Files and hashes: 1: tLhVi-xUNiD-bqkv68XoqSchTDk.crl (hash: tXZk9x51t3MV0Kausbx1yl8UUV2kFn3dPXYgWBNX3es=)
2: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (hash: Rn+12EEMKi6aXzl8gBx8ZdWOx7AcWAcDoiEgWgJE5kw=)
3: FC46090E9C2611F093B6FA57C4F9AE02.roa (hash: EY2YgAR4GfjyWASL8nRreRhbB7Hh9715I3btKYVEIis=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl
rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2743 (0xab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110BA6, serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39
Validity
Not Before: Feb 28 19:44:58 2026 GMT
Not After : Mar 7 19:44:58 2026 GMT
Subject: CN=69a345ba-f611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:78:1d:31:73:74:51:16:bf:05:ef:8b:ec:3b:
d2:7b:3d:3b:86:ee:49:cb:26:b1:aa:7d:62:97:cc:
3f:93:4d:98:6b:d1:57:c9:5e:28:0d:da:ac:77:3c:
cb:41:bf:83:71:f9:9a:a0:09:b4:70:45:fa:0b:59:
43:41:6f:f3:bb:cd:0c:3f:f7:2a:9b:ca:2e:24:d2:
71:34:04:71:1b:7e:17:b9:55:eb:b8:c0:e2:a7:12:
d2:7d:84:d7:cd:2a:2e:a5:ee:8c:15:68:c0:1d:6d:
8c:2a:fc:95:92:0e:ee:c4:69:82:3a:26:fb:99:b5:
93:4f:84:e0:93:e3:5a:62:51:4b:35:31:7a:e3:e2:
80:be:f9:25:86:65:90:0d:37:f3:f5:40:24:90:a1:
de:01:98:07:6f:db:37:38:5c:e2:11:ba:33:99:c2:
d8:23:46:c5:0b:85:76:a7:b5:15:12:d1:c2:88:a2:
80:7c:95:e0:c7:77:f3:df:64:a5:64:bc:93:be:35:
eb:da:f6:bf:5e:ad:00:95:34:ab:9c:91:90:fa:17:
1e:a7:2c:c3:64:5b:7a:91:96:24:3c:a9:c6:cd:77:
60:6a:95:f6:25:cd:40:ee:b4:c3:17:0e:06:8a:c7:
fd:c1:44:4d:7d:9e:06:bc:c7:c0:d2:0d:74:d4:97:
64:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A1:87:3E:8E:8F:C3:66:FA:31:04:78:42:56:B2:A0:FB:B7:BD:E1
X509v3 Authority Key Identifier:
keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b1:08:f1:84:77:26:89:ce:4e:0b:6f:bd:4c:87:8b:2c:94:
03:e4:3d:9f:e4:38:9b:05:35:ee:a5:02:af:72:a6:b9:78:c1:
5c:6b:b8:19:df:86:d9:25:f9:79:7f:ea:5b:6c:ff:0b:ed:39:
24:2c:c0:4b:e5:fb:82:4c:62:be:c4:38:87:e2:ba:08:08:e1:
4a:af:11:65:6a:b1:f9:bc:97:79:72:ae:ca:04:fe:84:0c:26:
a6:74:73:26:f4:9b:e9:1a:2e:b6:23:78:87:47:de:0b:f0:d2:
1d:75:0c:92:27:53:55:23:f2:f7:32:77:1a:f2:35:4a:5d:ce:
a7:14:79:d8:07:48:97:e7:94:29:c0:32:3a:ae:e0:7a:12:5d:
75:6a:2c:a3:b8:a4:c7:34:56:06:83:72:6c:86:ce:cb:a8:10:
1d:b1:ea:70:a9:3a:d6:03:48:e0:44:51:fe:d5:61:a6:c2:61:
f5:98:e1:08:e0:ff:d9:49:e6:af:27:f8:07:a3:61:9c:16:c4:
cd:bb:c5:6d:fd:9a:e3:ce:71:9e:3f:89:86:33:12:76:9f:39:
1f:18:5d:ad:61:05:cf:11:90:4a:01:d1:6d:e3:b3:38:98:fc:
66:07:62:ef:24:66:a3:e5:f9:0f:f8:5b:7c:a1:01:45:de:1f:
3e:79:72:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:37 2026 by rpki-client