
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
File: TG0zuIPIM699cikDd67c0LWjzdA.mft (raw, json)
Hash identifier: 298OZhTmf71MBcXTvsno4VzpLEQTapWme03h67EZHwQ=
Subject key identifier: 0B:20:DA:D3:25:37:99:4E:56:CE:D7:B5:D2:1B:4F:09:0E:DC:4A:63
Authority key identifier: 4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0
Certificate issuer: /CN=A9132C14/serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0
Certificate serial: 05F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
Manifest number: 05EA
Signing time: Sat 18 Apr 2026 22:51:09 +0000
Manifest this update: Sat 18 Apr 2026 22:51:09 +0000
Manifest next update: Sat 25 Apr 2026 22:51:09 +0000
Files and hashes: 1: TG0zuIPIM699cikDd67c0LWjzdA.crl (hash: CMsXKvPTAwkq2+hnzWfodLrsjcL6FZE+FIjp0UuV/fc=)
2: 46AF15AA9F6D11F09AF30234C4F9AE02.roa (hash: uOsTr6xLzZigtsgRTxsxpHDvdiof2oAZhPNX4njsoJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl
rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 22:51:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1527 (0x5f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132C14, serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0
Validity
Not Before: Apr 18 22:51:09 2026 GMT
Not After : Apr 25 22:51:09 2026 GMT
Subject: CN=69e40add-c4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:79:08:4a:1a:7f:0c:8b:96:28:9d:31:c5:
1f:e2:1b:f8:92:b9:e0:e6:1d:27:36:c3:3a:97:8a:
32:3b:44:30:7f:fd:78:4f:42:c0:3b:71:a4:c0:e0:
12:51:0b:eb:fb:9b:cc:ad:87:73:cf:df:aa:19:4b:
e4:6e:13:9f:7f:c9:1f:82:f5:70:08:7b:f3:bc:56:
80:48:b2:eb:1c:87:ad:17:22:e5:4e:b1:11:59:ee:
54:f2:e3:7e:34:89:e2:5c:70:87:b3:d0:20:ba:26:
32:47:bb:73:95:51:d4:fc:34:14:c1:3b:70:a6:d9:
d0:28:f0:b9:7b:3a:7a:49:02:d9:04:c2:65:ee:a9:
36:c5:be:1f:53:91:df:48:e5:1b:49:3b:da:e2:64:
dd:a6:8d:55:a7:9e:47:bc:92:9f:74:4d:ab:11:19:
4e:eb:0c:a8:cc:5c:c2:36:fa:cd:e5:1c:61:59:c1:
23:3b:e6:6c:3e:25:c8:e5:c2:3f:0a:2e:71:59:d3:
b7:92:7f:46:f9:78:18:2c:87:89:6e:a8:e7:d5:01:
d4:02:c5:07:15:50:f8:20:a3:4b:28:26:83:93:4e:
e6:17:c4:71:e4:94:80:32:8e:e2:fa:24:6d:e0:5c:
a3:67:87:95:95:a6:7e:84:c9:16:82:8d:0a:33:a5:
52:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:20:DA:D3:25:37:99:4E:56:CE:D7:B5:D2:1B:4F:09:0E:DC:4A:63
X509v3 Authority Key Identifier:
keyid:4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:f0:68:40:33:2b:25:c3:2a:dc:b3:3f:92:21:f8:17:8b:72:
4a:ce:92:cd:ca:7d:dd:1d:32:cc:3e:47:1b:23:89:53:52:be:
a5:c6:7f:40:80:e0:47:bc:0d:7f:3c:da:8c:b8:58:27:19:b7:
28:bb:e8:3d:35:31:f2:b5:9f:19:6a:7c:72:a6:70:81:27:e8:
f8:c1:59:3e:77:9e:20:4e:df:6d:cb:90:b9:f7:95:40:af:69:
02:f5:a2:a2:03:c4:26:5b:14:b5:ca:ce:0f:b0:08:65:ce:8b:
56:27:98:03:7b:ae:c3:82:7d:13:b7:0a:d0:77:3f:0e:fe:72:
68:02:7b:f8:05:c3:8b:c9:52:59:c0:02:ab:ae:c4:8b:39:96:
1d:87:d7:f6:35:14:d7:f5:ae:a4:6f:e3:53:f4:ab:52:a1:52:
9d:eb:21:de:64:ff:3b:7d:d0:e5:a4:0f:bc:35:b9:a4:82:9f:
56:5a:d7:aa:7d:7b:bc:90:dd:cc:6c:16:11:96:fd:6c:1c:8b:
72:fb:f7:1c:ee:4d:7a:74:6b:e0:71:a2:73:05:47:a5:33:41:
60:3e:a6:cd:af:e7:2f:cb:3a:c3:a5:3e:f9:40:90:94:29:6e:
ee:37:62:8a:2d:20:e8:43:8f:2a:7e:63:24:a3:d2:c2:49:38:
70:92:30:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:27:52 2026 by rpki-client