
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
File: tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft (raw, json)
Hash identifier: 6K004peWcCokouN4PWlpo2R761kbl1+j4YL1X7Q6Oek=
Subject key identifier: 5B:CC:C9:B6:FE:CF:9D:ED:42:12:83:E9:79:61:0F:48:DD:CC:8E:A6
Authority key identifier: B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C
Certificate issuer: /CN=A9131711/serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C
Certificate serial: 0188
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
Manifest number: 0183
Signing time: Sun 01 Mar 2026 05:32:28 +0000
Manifest this update: Sun 01 Mar 2026 05:32:28 +0000
Manifest next update: Sun 08 Mar 2026 05:32:28 +0000
Files and hashes: 1: tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl (hash: Tu+C/hhOPwW8v+tgRRS7iW/1pOvccROqKR83DYz/TS0=)
2: B2B006BAE3E911EEB845B268C4F9AE02.roa (hash: fj5an6uMsWFMPTZr6PrKep91XRX3rQER6UmH0deptJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl
rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131711, serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C
Validity
Not Before: Mar 1 05:32:28 2026 GMT
Not After : Mar 8 05:32:28 2026 GMT
Subject: CN=69a3cf6c-f5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:8e:bb:2e:37:9c:d6:3d:0f:b1:26:e5:8a:
cd:73:85:91:ef:99:56:37:a8:e6:80:eb:2e:ee:87:
77:fd:12:85:2d:f4:9d:4c:71:42:55:84:a6:c3:b0:
29:3b:94:af:7c:b2:c8:13:d9:17:c7:4a:1d:9d:0d:
24:e8:62:db:e7:20:b7:d2:cc:fc:85:ed:25:01:dc:
65:11:1f:af:57:c4:c0:ef:4f:e4:a3:4a:ce:a4:79:
ad:9c:b6:45:ae:27:03:e7:fc:4b:11:53:df:3a:80:
76:de:b8:31:ad:3a:2e:d7:15:04:ea:e3:99:da:08:
ff:36:71:7a:a9:b9:58:9f:8d:bd:cd:3e:75:f8:2c:
69:bc:ec:8d:28:a6:c5:21:92:91:78:03:b7:92:2f:
86:03:0a:13:70:9d:28:28:7e:7b:ca:ff:e0:2d:32:
59:4e:f3:31:62:1c:9b:e1:c9:6e:b7:0d:15:4a:ef:
36:57:ca:2b:43:0d:1b:7c:fd:b6:4b:df:22:98:53:
93:3d:b2:7d:aa:39:a3:ab:59:7e:5c:ca:20:77:ac:
1d:8f:f2:f5:5f:1f:b4:3a:af:89:d1:18:cb:45:9e:
2a:c6:53:0a:dc:8d:b7:f4:fc:39:2e:5d:a8:59:26:
c1:f4:05:2d:1b:4d:fe:0c:75:b6:73:49:2b:2c:04:
55:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CC:C9:B6:FE:CF:9D:ED:42:12:83:E9:79:61:0F:48:DD:CC:8E:A6
X509v3 Authority Key Identifier:
keyid:B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:44:57:3b:ee:ef:ef:5b:0e:67:d4:17:31:10:2e:06:3f:a0:
c8:31:a8:54:52:e3:56:35:c0:8b:27:a7:b4:5e:c5:be:40:c8:
91:cc:e6:9b:f8:d8:2c:51:d1:52:5e:89:c7:1e:08:81:c3:86:
1e:29:15:df:3d:e9:58:4a:b2:08:9f:37:81:fd:7d:16:7c:85:
7d:00:83:53:5b:c9:e2:cf:6d:10:35:dc:b4:a6:83:24:c2:22:
2f:4a:2d:f2:14:1c:3e:9b:33:c5:86:97:50:90:c2:cd:3b:61:
ab:89:81:5a:b3:bc:8b:f9:fb:85:16:34:15:2c:0e:21:37:04:
47:7a:43:89:1a:c5:62:e3:d5:6f:16:b3:c3:c8:f8:fc:2e:45:
ad:47:f1:dd:a7:71:6a:f8:ad:2d:bb:38:34:3d:22:af:9b:ec:
42:b3:00:56:58:e1:6f:21:94:35:04:7c:35:8b:3a:f6:cc:4c:
61:ce:34:f2:d0:8f:fc:a6:c1:e9:ab:96:d3:19:2b:04:47:14:
7f:95:66:42:d2:c7:60:2b:03:ab:94:95:93:8f:59:74:62:c7:
90:0e:2b:3d:4c:1a:fb:72:ff:f2:8f:a9:1a:e3:67:13:15:20:
8d:02:78:28:e4:38:db:25:0a:d5:70:f5:8b:bb:7d:01:80:3e:
d4:b4:97:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:28 2026 by rpki-client