
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
File: TDZeNqZHnY6wtQ2Q820dexnvhNM.mft (raw, json)
Hash identifier: 8ktTpHzltDSbCFuyF4B+M35tDNMyDD2ZBYnxEXoO2tM=
Subject key identifier: CC:AA:B2:53:B4:E9:70:7D:ED:26:EF:23:2A:CB:47:6A:65:09:30:0A
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial: 01BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
Manifest number: 0188
Signing time: Mon 02 Mar 2026 01:33:34 +0000
Manifest this update: Mon 02 Mar 2026 01:33:32 +0000
Manifest next update: Mon 09 Mar 2026 01:33:32 +0000
Files and hashes: 1: TDZeNqZHnY6wtQ2Q820dexnvhNM.crl (hash: gPjzAXsqA+E86lV2y3Q81KIwkrwNikCrHcbUijlQ51c=)
2: 26B79D64E9FE11EF8751AE17C4F9AE02.roa (hash: CSwNiNiHBOdBkX8QVfEy5RdNRxWDtIIzMJX3lDPz73I=)
3: ECDF4CE2DB0911F0B89EBE0382D3641D.roa (hash: +cfq+DBj705kE9pcPQ8fHhTnhcZwL0furcECRqclk3Y=)
4: CAF0BBBCDB0811F0A3EA0CD881D3641D.roa (hash: K6rhOjUE5MsA7iPT9OzT+5zbheWWIvW6req+7O+50Rk=)
5: 4699D9EADB0B11F0B7B5790A82D3641D.roa (hash: T2Foy9ASPzGFF0amgq/n/ifzed5ff9yCRwIVozmPQbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Validity
Not Before: Mar 2 01:33:32 2026 GMT
Not After : Mar 9 01:33:32 2026 GMT
Subject: CN=69a4e8ee-2413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:fc:19:23:5d:e7:fb:77:1b:e6:55:29:c3:
1d:33:88:30:06:cd:57:06:09:fe:0a:13:d4:71:81:
02:2e:3c:e6:ee:f1:59:43:75:b1:f9:c5:f0:3d:93:
e3:ca:84:e1:1d:db:f9:3e:0e:25:8b:97:e4:1c:61:
b8:2f:0b:f9:c3:2a:3a:47:eb:01:37:3c:f5:cb:37:
89:ea:3a:af:92:d2:d0:fa:21:04:0b:65:0c:c7:2f:
23:49:dc:10:41:61:9d:f1:88:c9:f3:13:57:7c:e4:
c7:2b:fd:9c:b8:29:ce:a1:1a:f0:38:db:90:6d:e1:
cf:87:8b:43:14:a1:d1:52:2d:35:46:ec:61:fa:e6:
f5:34:cf:3a:b4:d0:dc:e6:4f:38:2b:dc:0d:61:b4:
6e:b1:cc:e6:aa:b8:39:b2:cc:d2:70:2e:b2:db:5e:
8b:dc:bf:aa:0f:24:77:2c:78:b5:41:23:d7:2f:b0:
5a:ff:b2:c0:85:2c:6d:6b:95:68:4d:fc:1b:5f:35:
37:42:d7:c1:7c:bf:e7:e6:56:fc:fa:c3:64:0e:04:
aa:42:26:4b:9f:43:e6:de:8e:de:85:d8:1b:3b:b5:
8b:b2:7b:80:48:a4:74:d0:9d:e8:9a:b4:77:a4:63:
8b:07:ed:30:4a:d5:6a:f5:4c:81:5e:f5:ef:06:88:
63:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AA:B2:53:B4:E9:70:7D:ED:26:EF:23:2A:CB:47:6A:65:09:30:0A
X509v3 Authority Key Identifier:
keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:49:cd:0e:25:0b:f5:1f:c5:27:c5:ae:65:47:21:b6:fe:17:
bb:a4:9b:cc:89:3b:59:04:f0:21:f6:c6:77:96:f8:e3:1c:50:
c5:78:d9:d6:cb:0b:5b:eb:e3:ac:47:99:98:15:1b:f4:6c:5e:
7e:a9:97:8f:6b:28:29:0a:9e:0e:4f:ee:6b:56:83:48:a1:04:
c5:a6:40:c6:29:54:e1:5e:8f:88:a5:43:be:21:c2:5a:ff:10:
7b:3b:20:79:bf:6e:9a:b0:17:b7:16:cb:a8:34:39:e2:4a:e0:
f7:31:39:ff:e3:50:32:3e:f9:5a:76:48:38:0c:8e:30:85:69:
d3:66:f5:df:ea:72:8c:6c:46:e6:7c:62:b3:77:82:80:c2:e1:
e6:b3:94:5c:c9:05:c3:f1:90:f8:d5:64:ee:8f:72:a3:5b:61:
b7:6d:5d:4b:65:5c:ad:ee:5f:c9:04:41:1f:bc:b8:ca:2f:d2:
27:8e:f2:8d:e7:4f:8d:c8:ca:1d:09:51:d5:46:70:28:34:00:
ca:d7:a6:4f:8d:73:96:c6:da:0c:63:8b:15:1e:6e:e5:cd:f3:
19:b1:32:c8:68:59:fa:4d:c2:9b:b4:90:da:21:92:bb:d5:a0:
83:4b:89:30:4a:69:51:d4:f9:da:be:9f:64:27:14:4f:59:01:
db:e6:8c:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVCNDkxMTAvBgNVBAUTKDRDMzY1RTM2QTY0NzlEOEVCMEI1MEQ5MEYzNkQxRDdC
MTlFRjg0RDMwHhcNMjYwMzAyMDEzMzMyWhcNMjYwMzA5MDEzMzMyWjAYMRYwFAYD
VQQDEw02OWE0ZThlZS0yNDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw0n8GSNd5/t3G+ZVKcMdM4gwBs1XBgn+ChPUcYECLjzm7vFZQ3Wx+cXwPZPj
yoThHdv5Pg4li5fkHGG4Lwv5wyo6R+sBNzz1yzeJ6jqvktLQ+iEEC2UMxy8jSdwQ
QWGd8YjJ8xNXfOTHK/2cuCnOoRrwONuQbeHPh4tDFKHRUi01Ruxh+ub1NM86tNDc
5k84K9wNYbRusczmqrg5sszScC6y216L3L+qDyR3LHi1QSPXL7Ba/7LAhSxta5Vo
TfwbXzU3QtfBfL/n5lb8+sNkDgSqQiZLn0Pm3o7ehdgbO7WLsnuASKR00J3omrR3
pGOLB+0wStVq9UyBXvXvBohjewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMyqslO0
6XB97SbvIyrLR2plCTAKMB8GA1UdIwQYMBaAFEw2XjamR52OsLUNkPNtHXsZ74TT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0OS81MzE4QTEwODEy
MDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5ZNnd0UTJRODIwZGV4bnZo
Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1REWmVOcVpIblk2d3RRMlE4MjBkZXhudmhOTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUI0OS81MzE4QTEwODEyMDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5Z
Nnd0UTJRODIwZGV4bnZoTk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnknNDiUL9R/FJ8WuZUchtv4Xu6SbzIk7WQTwIfbGd5b44xxQxXjZ1ssLW+vj
rEeZmBUb9GxefqmXj2soKQqeDk/ua1aDSKEExaZAxilU4V6PiKVDviHCWv8Qezsg
eb9umrAXtxbLqDQ54krg9zE5/+NQMj75WnZIOAyOMIVp02b13+pyjGxG5nxis3eC
gMLh5rOUXMkFw/GQ+NVk7o9yo1tht21dS2Vcre5fyQRBH7y4yi/SJ47yjedPjcjK
HQlR1UZwKDQAytemT41zlsbaDGOLFR5u5c3zGbEyyGhZ+k3Cm7SQ2iGSu9Wgg0uJ
MEppUdT52r6fZCcUT1kB2+aM2w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:42 2026 by rpki-client