
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
File: tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json)
Hash identifier: bV9FbBZRBaP5QGL2IBIUm049K0aV217Yeh9V7QyGzY4=
Subject key identifier: 77:32:45:45:65:37:2E:B7:5A:1E:30:49:EF:A8:A5:2C:2C:AB:5D:4C
Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF
Certificate issuer: /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF
Certificate serial: 037C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
Manifest number: 0374
Signing time: Fri 17 Apr 2026 00:45:49 +0000
Manifest this update: Fri 17 Apr 2026 00:45:48 +0000
Manifest next update: Fri 24 Apr 2026 00:45:48 +0000
Files and hashes: 1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: G24OYeQANyl8+KIozQIw0/ngcCIGsYTfajZSj+6xESI=)
2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: bL7OIrkXDLMggpL9N/pxg/g9qzrZatjb01uzVRx5kqw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl
rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 892 (0x37c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138E67, serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF
Validity
Not Before: Apr 17 00:45:48 2026 GMT
Not After : Apr 24 00:45:48 2026 GMT
Subject: CN=69e182bd-ec75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:6b:c6:ed:31:80:11:bb:7a:6b:7d:ee:1d:
4d:48:97:09:c1:0f:41:0d:2f:a9:49:36:58:cc:1a:
99:a1:b0:db:b7:b9:58:fd:5d:79:4f:18:93:f8:86:
c6:f9:69:62:a2:5e:1d:97:a3:13:0e:a5:4e:d5:f1:
86:75:9c:f5:04:c9:dc:bf:5b:f0:e5:51:08:0b:25:
2d:5d:5c:55:f6:9b:6d:47:18:89:96:a8:c9:a1:d8:
2b:4c:6b:24:f9:4a:21:a6:e3:9a:ee:ca:62:91:31:
11:3b:6f:ff:06:27:c8:38:d4:b8:66:48:0d:c9:29:
4b:0f:1c:11:5b:4f:96:a9:b1:d9:1c:88:0b:22:de:
dd:40:26:18:76:88:2b:bf:8b:2d:8b:d8:36:bc:0b:
cb:54:77:b8:fb:0e:04:93:90:ca:b3:47:10:85:75:
33:a6:a3:15:46:5b:a1:44:6e:de:3b:07:d5:6f:e7:
4e:69:4a:74:25:d5:a1:73:41:60:59:25:cd:1b:3b:
98:a1:2c:20:ed:9b:64:49:e2:5c:32:eb:ea:78:b8:
2b:2c:db:2a:15:55:3f:a7:de:e1:95:3e:f9:f8:6c:
d3:fe:2e:11:62:bb:14:0a:10:2b:b7:04:88:d9:25:
b4:27:7e:ff:db:bc:1c:ec:69:dd:60:32:c3:02:8d:
d5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:32:45:45:65:37:2E:B7:5A:1E:30:49:EF:A8:A5:2C:2C:AB:5D:4C
X509v3 Authority Key Identifier:
keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:90:e7:10:55:ba:dd:18:00:d2:f4:95:c5:a5:f0:58:44:17:
d1:32:b1:df:fd:ad:18:42:77:b7:65:5b:d2:d9:d0:06:c6:c3:
33:b7:98:35:f3:20:96:1d:f9:89:72:65:59:ff:3a:2d:34:33:
29:1f:b6:05:50:ba:89:4d:63:3b:35:12:2c:94:b1:a0:99:a3:
e1:e4:2d:ca:e2:60:40:34:f8:23:d0:2b:88:4e:e4:a5:19:2c:
e0:66:81:70:09:31:5c:fa:3d:29:6a:bc:1b:d9:e1:38:dc:b3:
3b:64:64:61:7d:f2:25:24:ad:af:41:2b:9b:bd:2d:5f:12:b2:
46:a6:88:5d:90:a5:3f:c6:4c:12:2f:7b:38:8c:ef:3f:92:f5:
b7:1d:43:39:35:30:07:73:61:a3:67:86:32:09:c6:8e:44:96:
44:e6:cd:24:c1:21:a8:1c:2a:0c:12:49:94:ce:54:93:86:7c:
84:c8:49:66:af:92:17:fb:4b:5a:cd:09:ee:72:76:93:ad:9e:
25:20:e6:fb:d8:68:b3:18:6f:4c:6b:33:90:fa:4d:40:2b:4f:
6b:a6:a5:57:65:ce:99:d4:5e:57:31:ef:73:c0:a3:41:83:e5:
2e:59:ed:e6:be:b9:b9:84:c7:0f:36:03:0d:13:bc:b6:74:98:
9b:94:49:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:37 2026 by rpki-client