
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
File: TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft (raw, json)
Hash identifier: 0SKsq7Ax1v+efaAntaAiebLWrq+pcRk+DtRSh6SrbBc=
Subject key identifier: BE:BD:B4:3A:6F:BA:1C:3E:4F:21:5C:33:1A:27:40:94:A9:C2:76:43
Authority key identifier: 4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46
Certificate issuer: /CN=A9129023/serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
Manifest number: 0146
Signing time: Sun 01 Mar 2026 06:14:01 +0000
Manifest this update: Sun 01 Mar 2026 06:14:01 +0000
Manifest next update: Sun 08 Mar 2026 06:14:01 +0000
Files and hashes: 1: TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl (hash: 1Gfg/DMq9XRWvMGwSU71oJy0jHCbtqUnbXx0vgTJZwc=)
2: FFE6CB36228111EFA702E016C4F9AE02.roa (hash: iyVM1h+Ep3e3RRmXJiIJW8+nb71UCnekaP7xnKvCLmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl
rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:14:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129023, serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546
Validity
Not Before: Mar 1 06:14:01 2026 GMT
Not After : Mar 8 06:14:01 2026 GMT
Subject: CN=69a3d929-c44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:f9:c6:65:a6:b9:75:d5:cf:7e:33:f8:20:
5f:24:36:7d:32:fc:b7:e3:1d:ea:aa:84:5a:41:6d:
d1:09:5c:e0:c5:3c:58:00:96:23:e9:5b:a6:79:e5:
1a:97:67:8f:b3:dc:62:de:51:d5:87:52:23:6f:9c:
90:76:e1:9f:ca:83:30:a2:58:af:96:82:13:2e:22:
03:98:69:59:d0:89:04:a0:ec:99:18:31:87:2e:2d:
ca:15:1f:ba:9c:3b:00:8a:d8:7f:42:c2:47:86:d5:
f5:71:6d:b9:a6:7f:09:e2:fa:6d:ac:9d:9e:a6:86:
96:1a:31:83:31:d0:62:33:fd:65:84:70:ab:bd:b6:
1a:36:dc:c5:26:d4:03:ea:f3:c6:55:37:7a:60:5e:
7b:49:76:6a:94:20:95:eb:df:02:1a:ac:fe:20:44:
ce:e6:c6:c7:d6:b1:8c:e7:e8:3a:84:78:5e:4f:2a:
76:c9:b4:1d:97:25:95:f5:25:56:04:22:b7:c6:96:
f8:fe:14:a7:a4:75:36:4c:db:75:e4:c8:65:e5:35:
2c:7b:a6:b2:77:77:a2:96:ba:30:4a:c2:b7:67:12:
b8:2d:e5:b6:c8:1f:bf:b5:44:99:c7:53:89:fb:80:
7c:f3:3a:c4:c1:34:6e:b3:8f:44:b6:85:87:00:e3:
fe:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BD:B4:3A:6F:BA:1C:3E:4F:21:5C:33:1A:27:40:94:A9:C2:76:43
X509v3 Authority Key Identifier:
keyid:4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:34:e4:82:65:69:43:8c:6f:bc:4e:92:fb:b2:45:94:88:d2:
41:79:14:d4:db:e1:65:f4:47:ff:f5:26:42:cd:b3:5a:67:84:
d6:74:ad:b8:0a:22:34:c1:ed:7c:d9:28:1c:ed:cb:b3:f6:f9:
89:b0:10:24:90:ce:e0:3b:17:5a:65:ed:51:7a:15:f7:fb:65:
e3:70:ea:e7:aa:13:dc:e7:20:5f:cd:d5:9a:3f:64:2c:23:70:
15:df:1b:0f:d9:1a:12:ba:1c:58:fd:c0:b9:e3:90:a5:35:16:
5f:d0:64:2f:73:ab:af:19:1c:67:75:aa:f8:bb:d8:78:56:7e:
ab:5b:e1:a2:a8:0d:28:bc:41:34:16:8d:e6:5d:f0:5e:09:73:
c0:7d:09:7d:aa:91:c8:5d:98:13:bd:e7:91:14:2d:f0:9f:23:
e7:c3:4d:36:71:0b:cd:f0:a7:85:ce:bf:d0:8c:f6:ae:1a:8d:
e2:48:46:92:2f:63:77:3d:52:f1:17:a1:1b:a8:e6:47:0d:9d:
ba:d4:fd:21:7f:5f:06:df:8b:69:f4:c4:15:7f:9c:1e:b1:96:
2e:ae:c0:82:e8:f9:b9:c5:64:20:e0:35:e4:5c:36:36:2c:cd:
71:20:66:5b:af:4a:69:3d:0f:72:48:c7:b3:49:a4:8b:9c:e9:
75:c8:25:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:49 2026 by rpki-client