
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
File: tOfjRK3ONthPHzq8zRSyTBUSu6o.mft (raw, json)
Hash identifier: jYJrrucx/zD0fIW+muVmCHydipF3p8zbI1N9Cb9h7Zc=
Subject key identifier: 10:87:91:5F:2B:42:0C:96:27:F5:53:07:22:B8:00:F4:2D:AC:01:9A
Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Certificate serial: 0152
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
Manifest number: 014C
Signing time: Fri 17 Apr 2026 04:53:30 +0000
Manifest this update: Fri 17 Apr 2026 04:53:30 +0000
Manifest next update: Fri 24 Apr 2026 04:53:30 +0000
Files and hashes: 1: tOfjRK3ONthPHzq8zRSyTBUSu6o.crl (hash: b/hAI7snC2ksJh9zW5Q1BsqBLUFmo/uqqRffv5Gz/O8=)
2: 723720464ABE11EFA87EE85BC4F9AE02.roa (hash: /neZtyP8CB+i0xa/1UQQQx4y8u+LD3tIdTWWjj7eFPE=)
3: 6A5F29CED8A511F0B3F453F094D3641D.roa (hash: x8Gadu5mzZc6qu26lRbm5uUV5MWN8eTQq1KShULlErA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl
rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Validity
Not Before: Apr 17 04:53:30 2026 GMT
Not After : Apr 24 04:53:30 2026 GMT
Subject: CN=69e1bcca-92a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:2b:81:c9:47:0c:e4:8b:fc:96:d0:cf:a9:
8b:d2:65:2b:6d:d3:12:b8:0f:68:a7:ef:1f:6b:15:
ce:69:dc:2a:ea:b5:23:19:20:17:97:71:1b:87:de:
02:31:36:76:03:5d:7f:c2:17:f8:31:ef:1f:f0:ae:
e3:d4:42:38:ca:bc:6c:9d:fb:f7:60:5f:cb:83:00:
7a:df:be:ef:ae:14:33:41:64:8f:df:3e:0f:41:e8:
46:f1:0d:9a:e1:46:00:02:c3:d0:49:c4:ef:5c:1d:
05:7d:0e:9c:b7:7b:99:f8:4a:80:1f:20:55:26:f4:
6a:9a:18:3a:82:1c:d0:09:ca:88:88:34:08:f5:8a:
be:93:90:c2:9f:2d:43:7d:98:4a:16:69:f2:53:c5:
8c:fb:13:f5:18:cc:b1:c4:53:af:d2:27:3a:ed:26:
8f:b3:0c:90:38:a9:c2:ff:44:5f:90:f4:0a:d5:5a:
95:4e:12:e6:f9:35:6b:1e:79:ef:20:a9:5a:f6:a1:
0d:39:04:93:4f:40:ab:fe:6f:ad:93:5d:87:fd:9f:
47:43:39:d9:81:8a:4a:fe:36:09:fb:9f:e3:f9:cb:
bb:9a:e2:6a:53:05:97:be:da:7e:f6:59:43:58:64:
2e:4b:8c:39:e8:a3:1d:cb:09:48:37:f3:1e:9c:53:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:87:91:5F:2B:42:0C:96:27:F5:53:07:22:B8:00:F4:2D:AC:01:9A
X509v3 Authority Key Identifier:
keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:05:e9:3d:80:fb:85:af:42:4f:f2:43:87:8b:fb:38:30:e8:
90:7d:0f:d1:bd:4b:28:5d:a8:06:4f:45:89:88:dc:e7:a8:df:
72:46:6e:6e:73:60:92:67:2f:dd:6a:81:7e:26:4d:c4:ff:9b:
4e:75:eb:f3:41:6a:3f:65:79:c8:11:b3:df:ba:10:7b:83:7a:
f2:3d:18:07:ee:00:8b:53:14:27:62:3c:a3:43:c9:cd:36:58:
21:c4:3b:1f:2c:d2:ae:38:34:6c:69:9d:39:35:17:08:46:94:
53:c8:ed:c2:50:52:c7:df:c3:0a:cd:57:31:ce:06:b6:f5:55:
c9:b6:13:8d:fb:4e:91:6d:29:15:e5:c8:07:c4:56:21:24:fc:
15:6c:69:97:22:20:cc:42:8a:24:13:b3:86:ce:d2:6f:b4:6d:
ae:4c:14:61:67:96:fe:02:b9:64:1b:e0:76:b8:7b:f4:bd:44:
ee:9d:c6:88:27:67:ca:7f:3d:98:ad:b7:e7:78:29:c9:1d:e5:
c7:05:ad:04:fd:d4:97:11:de:be:1b:a1:59:e6:6a:85:57:ef:
2f:f2:87:31:87:a7:58:f0:fd:20:e8:91:fc:8b:d5:ed:ff:88:
91:24:82:b4:c9:1a:1d:fa:ac:eb:6b:7d:01:71:d2:bd:f7:14:
0d:13:00:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:27 2026 by rpki-client