
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
File: T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json)
Hash identifier: 5JC5gDhUGlG41Wq3UJf4fxbC3TI6gjAWt5MZlPtSSV0=
Subject key identifier: F2:4B:79:6C:88:54:F0:05:7E:83:B6:28:51:ED:D6:CA:94:FC:7E:33
Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
Certificate issuer: /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Certificate serial: 019A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
Manifest number: 0194
Signing time: Sun 01 Mar 2026 05:13:15 +0000
Manifest this update: Sun 01 Mar 2026 05:13:14 +0000
Manifest next update: Sun 08 Mar 2026 05:13:14 +0000
Files and hashes: 1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: /EpSwt6uB/G+a8p8bwPmhTgd4Y8VhHhXJ3UdnWssfqA=)
2: 2546725EA92811F0A138DF72C4F9AE02.roa (hash: Ib7fTmO0DlL97ByyuiR3JCCf1yE7SdDuVBHu70Sgc/g=)
3: D2FF8C06A92711F08CEB6934C4F9AE02.roa (hash: qAr8+eF3m1/+xQOCjkXgrrM7DV3AkwRNFgQRWQnfxo8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:13:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410 (0x19a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Validity
Not Before: Mar 1 05:13:14 2026 GMT
Not After : Mar 8 05:13:14 2026 GMT
Subject: CN=69a3caeb-3dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:98:0d:0c:66:c9:40:ae:42:27:03:df:c4:44:
05:b9:e0:33:cd:d9:d6:1e:4b:d8:ba:53:a6:34:73:
1a:b6:7c:95:ff:55:88:fe:48:db:a4:be:fc:b1:c7:
49:4f:f5:be:2a:d4:95:ac:fb:1b:4c:23:c3:e1:a0:
65:83:95:71:a0:75:eb:d7:97:86:29:54:4f:79:38:
86:78:21:e0:4d:e6:3e:4a:f3:fb:65:77:1e:44:05:
0d:6e:5a:cd:59:74:33:77:12:77:f6:e7:25:9b:0e:
bb:21:65:3d:3a:53:1b:9b:13:d5:60:e1:7d:44:85:
81:73:e9:3f:41:a6:f8:cd:83:8d:7b:37:28:93:5c:
6e:a0:19:7f:c8:b6:4a:98:36:96:08:23:e5:5d:44:
cc:b2:e4:bf:a9:fa:4d:cf:d8:48:1e:3d:1f:d6:ca:
0f:91:f3:d5:de:5a:17:91:2f:09:76:3b:0c:69:dd:
d1:7c:1a:a4:80:a7:40:16:1e:d2:e4:a8:07:83:f5:
db:f0:4c:36:c7:76:ec:94:9e:65:58:f2:b1:d2:2d:
17:45:8a:7a:8c:bc:22:2e:e0:fc:3d:8b:6d:25:3f:
c3:87:1e:4b:18:f7:49:b2:25:11:0f:28:27:13:62:
77:d7:a7:11:9a:c9:f1:bb:ec:dd:29:93:74:21:0b:
ff:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4B:79:6C:88:54:F0:05:7E:83:B6:28:51:ED:D6:CA:94:FC:7E:33
X509v3 Authority Key Identifier:
keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:91:43:be:23:a9:6e:bc:23:62:10:8a:62:bb:f8:6a:02:5f:
7a:79:d7:bf:7a:02:23:9e:f9:c3:6f:28:33:bd:2b:ec:de:23:
bd:83:34:6b:18:7b:00:7e:d1:3c:0f:ff:16:b5:02:b7:42:dd:
a0:a3:fa:92:9d:dc:bf:da:42:dd:a4:62:d5:41:8d:23:61:94:
65:3a:a6:29:4f:8e:46:ba:99:b5:1a:f3:db:99:f7:ca:33:ae:
e2:29:93:92:00:59:bd:de:1a:4a:20:8d:64:91:5f:aa:84:c7:
b6:bf:b0:cc:78:10:1d:15:4c:10:08:de:1e:c7:8c:63:4e:c8:
ea:2d:af:06:28:91:bc:a9:e9:63:cf:dd:2e:bf:c5:26:02:92:
b3:db:ef:68:d4:f5:1b:6c:9c:dc:cd:9e:42:37:76:ba:50:71:
01:8e:d7:91:cc:c6:a4:cb:b6:47:bb:aa:48:d0:c1:9f:58:90:
4c:d6:8e:ff:d0:26:fc:68:d5:23:7b:ae:c6:68:6b:88:e6:b4:
86:37:1f:a6:f7:83:32:07:d1:3e:e2:c5:54:86:6f:ef:00:6c:
8a:de:3b:ab:c2:c4:8b:96:dc:e2:a8:82:9c:e3:7d:85:72:a0:
73:7b:3d:76:4c:50:5a:aa:c7:9b:6e:48:46:0b:04:62:73:38:
eb:cc:68:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:25:12 2026 by rpki-client