
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
File: TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft (raw, json)
Hash identifier: 1tM9JawFyPtjTUDtB/kKL09+/cwpnGoea/THQfGNjb0=
Subject key identifier: 0D:F3:98:44:54:F4:A9:D6:F7:27:78:F3:53:6B:6D:92:A9:19:A8:DF
Authority key identifier: 4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46
Certificate issuer: /CN=A9129023/serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546
Certificate serial: 01BE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
Manifest number: 01B4
Signing time: Sun 27 Sep 2026 04:25:00 +0000
Manifest this update: Sun 27 Sep 2026 04:25:00 +0000
Manifest next update: Sun 04 Oct 2026 04:25:00 +0000
Files and hashes: 1: TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl (hash: N81Ykb8S2U+vbR9UlRfMST1YRJa5liYTLcUVzXtzIN8=)
2: FFE6CB36228111EFA702E016C4F9AE02.roa (hash: LWLPDEv7RUMRJMl4Bmz6X6FEvG0pqY80ldWBL6Y3d3s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl
rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129023, serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546
Validity
Not Before: Sep 27 04:25:00 2026 GMT
Not After : Oct 4 04:25:00 2026 GMT
Subject: CN=6ab89a9c-fe09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2a:b5:6b:b9:6d:86:01:df:4a:4a:d4:c2:4e:
ce:ee:75:d7:85:71:61:d6:3a:d3:3b:58:5f:e9:83:
a6:90:9a:56:dd:9d:59:2b:cd:7d:79:79:ef:f9:27:
80:1d:18:bb:61:fd:30:2e:c7:c3:0f:a5:9d:b2:5c:
a8:ff:39:b4:4e:6c:08:5e:13:dc:e4:08:dd:87:20:
de:1a:4a:69:f8:b5:47:9f:fa:8a:49:47:78:23:fd:
3b:38:d0:72:5c:ca:2e:9f:13:f9:94:d2:d9:f2:ec:
62:51:0a:31:a9:bd:f8:2d:76:6a:32:ae:2e:51:1f:
d8:de:87:e6:d1:8e:25:9a:70:1a:a9:7c:21:1a:1d:
9a:76:36:46:2e:ea:ec:a7:40:fd:f2:ea:18:bb:5b:
83:1d:3d:9b:5d:d2:df:6b:43:99:ae:3b:c0:23:5f:
41:b8:fc:54:42:6e:9a:99:da:53:06:de:ff:bb:90:
8c:ad:a7:c4:df:7e:20:f3:ac:03:50:ec:97:84:cb:
03:c1:dd:81:46:65:33:7d:cf:3e:b3:37:ae:33:a0:
71:78:f0:9b:52:9c:c9:ae:3e:96:d9:96:06:1e:79:
6f:6f:73:69:c4:95:9a:5b:27:45:23:e6:9a:26:39:
92:aa:c7:c4:d5:46:6a:db:2e:18:fd:64:6e:8d:e6:
67:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F3:98:44:54:F4:A9:D6:F7:27:78:F3:53:6B:6D:92:A9:19:A8:DF
X509v3 Authority Key Identifier:
keyid:4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:85:03:cd:8f:3f:06:cc:f7:65:f6:73:89:ff:37:ef:1a:e5:
60:46:45:85:4b:a5:c1:fa:9d:87:be:63:e6:4a:c2:6d:57:29:
d8:d3:97:58:9b:cf:48:06:3b:31:dd:80:14:73:df:e8:f9:bd:
65:31:98:98:b0:0d:e5:ca:8d:82:8f:32:75:64:b2:77:2e:2f:
77:19:31:1e:e1:1c:44:c9:da:23:31:cb:8d:fd:5e:34:fa:7d:
bb:60:c9:5c:4f:19:a1:3f:12:ac:30:df:18:89:59:89:30:61:
25:34:74:50:b2:64:b1:bf:b8:54:ad:69:d0:b3:cf:6d:ec:c0:
46:de:20:e1:01:a1:1b:ca:cb:e9:81:51:89:84:ab:95:c8:74:
bc:f4:d7:cf:78:33:1f:ac:8c:bd:74:91:bd:70:40:d4:d3:eb:
27:76:30:bc:d0:14:39:5d:fd:66:c8:76:01:2b:61:34:a0:02:
ec:01:e2:8a:1e:ea:0f:bb:0a:b8:0e:d5:51:a0:56:39:cb:74:
fd:d5:f2:53:09:f7:ac:06:6f:1f:93:3a:70:75:1f:07:84:24:
39:10:ea:3d:1e:8d:fa:64:64:0d:2c:0c:9c:1e:a5:e1:13:f1:
68:a7:b1:c6:a5:f2:c8:64:75:08:3e:0d:87:d4:f6:da:07:8a:
e4:da:10:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:46:10 2026 by rpki-client