
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
File: t0SkTltlPmx6kM9gNOANz9iUfWA.mft (raw, json)
Hash identifier: zFO3hKBt9K2Z46VEU/OAPdZIVsGF0GEs39TiQiTaSDI=
Subject key identifier: 96:00:52:D3:EC:7E:66:45:A1:78:8F:A0:EE:FC:4D:7F:60:E1:88:1E
Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
Certificate issuer: /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Certificate serial: 190D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
Manifest number: 18F9
Signing time: Thu 16 Apr 2026 16:23:43 +0000
Manifest this update: Thu 16 Apr 2026 16:23:42 +0000
Manifest next update: Thu 23 Apr 2026 16:23:42 +0000
Files and hashes: 1: t0SkTltlPmx6kM9gNOANz9iUfWA.crl (hash: YO8DLGivKPRbxNSDo1XRSfbxQqAIQcasZ6CcpCjsfF0=)
2: 253B1382106C11F08D824C19C4F9AE02.roa (hash: eo5Er8iuxT75wLcKVzFBlRXEOJUUc8Rit00G+PSlQNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl
rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6413 (0x190d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBE5, serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Validity
Not Before: Apr 16 16:23:42 2026 GMT
Not After : Apr 23 16:23:42 2026 GMT
Subject: CN=69e10d0e-6724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:1c:06:56:74:f3:16:af:df:93:f3:79:3c:
e0:f3:f2:81:bb:85:85:a0:f3:9c:16:d8:dc:19:11:
2d:ac:01:0b:96:0e:b3:b6:6e:36:68:94:07:40:17:
3f:6c:0a:7b:95:b7:5b:43:15:77:06:0e:d7:e7:1e:
d3:c0:05:73:58:7b:77:7a:78:22:78:43:b2:5e:31:
1c:94:45:5f:37:08:43:14:8d:c0:18:2d:81:ea:72:
99:6e:56:57:c2:77:5f:c8:ab:96:02:cf:59:34:cd:
94:ec:b8:40:15:fe:88:75:4d:5d:dd:e6:a7:79:b0:
33:45:8b:5f:9c:6c:cd:99:13:6a:ff:60:34:19:3e:
c3:2a:45:f0:e8:cc:fd:e9:ca:2c:a4:d8:74:2a:1b:
e8:d8:43:94:b7:d4:a3:b9:50:a6:04:6b:ef:f2:8c:
f2:94:a4:3d:74:2a:f1:6c:0e:1f:ab:65:32:d8:87:
87:ab:ce:c6:58:23:2a:a7:b3:73:f0:1a:c7:6e:1d:
8f:a8:e0:8b:62:15:35:7f:e2:5b:ac:1c:68:75:29:
db:ac:9c:92:56:28:c1:94:d9:72:56:fe:13:2a:d5:
44:a2:36:f8:26:11:86:80:af:07:79:97:18:99:15:
83:b9:6b:f8:c1:2e:87:17:64:10:2e:2e:8a:aa:c8:
1a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:00:52:D3:EC:7E:66:45:A1:78:8F:A0:EE:FC:4D:7F:60:E1:88:1E
X509v3 Authority Key Identifier:
keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d9:3c:0e:8c:7d:eb:f1:0c:c9:1c:a5:f1:0b:c9:55:d0:6b:
17:fc:7f:3b:5c:6f:bb:8a:24:ab:1c:35:99:24:b7:bb:50:87:
08:25:35:55:cd:9a:0a:f4:42:a0:50:53:ef:c7:f5:77:29:b1:
26:51:cc:90:18:a0:64:9b:12:68:c4:47:85:1e:aa:d1:12:c9:
66:a6:8e:78:fb:1a:39:db:73:0c:b1:dd:77:a4:26:b0:27:60:
bd:77:8b:e1:fa:9b:68:72:7b:5d:78:f3:73:3f:ee:ae:a2:23:
f6:0c:ae:2d:46:f5:f8:90:53:10:60:65:2d:57:e5:e5:d3:15:
41:1d:7b:04:57:63:a0:6e:72:2b:b8:2a:f1:83:60:fd:51:92:
c1:52:f6:94:e8:34:4b:c6:e0:d6:1a:5e:41:f3:7a:8e:ac:db:
f1:27:f6:9b:ce:a9:80:0c:67:91:1b:d8:67:bd:bb:07:74:7b:
69:79:a7:a5:90:2c:6d:25:3e:fe:ba:f6:b9:41:3e:55:7b:e2:
77:51:51:34:45:cf:3a:d4:a0:ae:ed:d7:29:0e:77:ad:77:46:
bb:85:ba:13:eb:dc:79:ca:6d:e4:eb:ef:b7:a3:f2:da:c8:2b:
3f:c2:3e:cc:f1:e0:6f:c9:25:8b:71:60:84:d1:aa:53:9f:99:
92:c9:26:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:53:04 2026 by rpki-client