
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
File: Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft (raw, json)
Hash identifier: DaWnNCeDshH9acAiHqVgYjejXyt/SXEqZVEb2EC1+S0=
Subject key identifier: EE:CA:A1:B8:94:CD:74:4A:EB:E7:EB:A9:D4:E1:5C:3D:10:86:24:AA
Authority key identifier: 4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98
Certificate issuer: /CN=A9148CCE/serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098
Certificate serial: A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
Manifest number: 9F
Signing time: Fri 17 Apr 2026 07:04:31 +0000
Manifest this update: Fri 17 Apr 2026 07:04:31 +0000
Manifest next update: Fri 24 Apr 2026 07:04:31 +0000
Files and hashes: 1: Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl (hash: OJ/KjD+7JnxXmHlbxem4fFlrrxHF/IvcgdEzlfMGMIs=)
2: 8FD5A938522911F0AECD911AC4F9AE02.roa (hash: 9yyOlJOhdq5a9n8HjUs77Doecig0wOxCg0TdaMSwGMQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl
rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148CCE, serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098
Validity
Not Before: Apr 17 07:04:31 2026 GMT
Not After : Apr 24 07:04:31 2026 GMT
Subject: CN=69e1db7f-e2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:de:07:bc:55:73:c0:e2:47:9b:6d:10:b8:
af:1a:fa:4e:59:93:b0:96:f8:84:c8:17:2a:1d:cf:
d4:2c:4e:09:5b:b5:73:8b:e7:ac:e1:58:33:ad:51:
d2:31:0d:6a:81:0f:22:ea:12:0d:9c:09:7f:bc:67:
e2:4c:4f:6d:a9:25:31:f8:35:62:3b:17:d4:c5:86:
07:34:d6:e6:a2:d0:d1:cf:58:67:eb:20:11:36:20:
36:53:c7:d1:ca:93:b5:e0:8f:58:c3:0e:31:1c:8f:
af:d7:8b:1e:05:f3:79:d1:00:64:c2:6e:b1:08:50:
04:c7:c1:c2:14:97:5a:97:fa:68:31:aa:f3:7a:fe:
b5:ef:f1:70:a3:d8:33:49:f4:84:d8:0d:e9:7b:de:
fd:e2:a0:f1:52:ff:93:fe:32:a5:3e:51:75:7f:48:
73:d8:98:3b:b6:7a:08:39:b7:5b:07:84:ba:e1:02:
8e:97:6b:96:b4:94:54:a8:1b:d8:5c:e7:ae:62:0d:
e3:76:5f:91:2e:c2:4a:b8:be:78:89:02:15:98:54:
8d:09:49:17:ad:32:6c:ab:f2:a4:a6:65:24:24:eb:
76:a0:85:ab:35:95:24:aa:44:16:92:cb:de:55:26:
c6:32:b2:c3:92:cd:c3:b5:fc:20:3e:bd:c1:d6:a4:
87:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CA:A1:B8:94:CD:74:4A:EB:E7:EB:A9:D4:E1:5C:3D:10:86:24:AA
X509v3 Authority Key Identifier:
keyid:4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:a7:8e:a4:d2:97:8b:11:50:20:6b:9e:3e:7d:28:90:48:1f:
63:f2:10:a3:ee:99:cc:03:88:9f:35:db:4a:b4:c0:b0:c8:67:
05:b8:88:f0:cd:cf:c9:3a:0b:c0:1f:b2:07:4e:1a:6d:73:0d:
0b:cb:51:10:70:f5:63:55:12:43:aa:8a:b2:05:40:4d:18:f4:
36:34:2b:5a:12:25:6b:57:81:55:57:bb:3e:fc:e5:6d:d0:26:
0a:60:32:06:84:2e:99:ac:3f:1e:79:8f:11:b4:8b:56:36:af:
47:60:e8:c6:bf:1e:85:24:45:f1:37:95:ad:15:b0:e6:5d:1e:
e6:f8:9f:4b:bd:44:8d:f7:d7:49:d2:8a:ed:60:7f:2b:56:de:
e6:b9:0e:9f:57:9f:96:94:7d:1c:7e:ad:ea:59:6d:61:6f:97:
c3:34:41:cf:d2:a2:06:c7:24:e1:0d:65:02:65:dc:25:ef:37:
e4:fc:bf:55:f7:b3:0f:bf:1f:98:36:37:c9:6f:db:7a:a1:d7:
23:86:f0:f5:55:e6:cd:cb:91:4b:3a:52:d5:6a:27:bc:ba:49:
4e:90:f1:87:15:80:dc:ac:ae:e7:50:5e:e6:8a:36:ce:e9:7c:
05:5b:14:06:1f:8b:14:07:79:45:c3:d7:29:4e:5c:50:21:45:
0b:01:90:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:10 2026 by rpki-client