
$ rpki-client -vvf rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
File: tsJDxjmzEemHjsBr8kf3reVLCT4.mft (raw, json)
Hash identifier: A9K7ZYSRHBO6tZksFfFbiPoH8nJ86wsfm+vL/LfyEEY=
Subject key identifier: 67:83:4F:C0:76:95:7D:88:15:04:AA:FE:65:D4:E4:B1:13:12:61:76
Authority key identifier: B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E
Certificate issuer: /CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
Certificate serial: 159E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
Manifest number: 1565
Signing time: Sun 01 Mar 2026 23:03:31 +0000
Manifest this update: Sun 01 Mar 2026 23:03:31 +0000
Manifest next update: Sun 08 Mar 2026 23:03:31 +0000
Files and hashes: 1: tsJDxjmzEemHjsBr8kf3reVLCT4.crl (hash: wazj3kVLKAsb1AneRcPuCfXGidHOPu0iF86qo9qWZk4=)
2: E944914AF0F111E999D61615C4F9AE02.roa (hash: c2ADsvP/ue89PrwzdfQ8AIFJq77Uj0DDTO3n+w1NTsw=)
3: 81DC5974F86611F0A7041971496F56BC.roa (hash: ssQ9BW5dy2boBuORT5QxuakKe2D1nievijkZGHdu+Es=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl
rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5534 (0x159e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91549E0, serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
Validity
Not Before: Mar 1 23:03:31 2026 GMT
Not After : Mar 8 23:03:31 2026 GMT
Subject: CN=69a4c5c3-111e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:c3:c9:73:39:29:10:be:50:ef:69:c1:22:
a0:7e:a3:9d:61:de:5b:e8:33:79:bd:95:06:42:4b:
ca:14:ed:49:20:2a:88:66:e2:b7:be:38:22:5b:5d:
4a:20:43:7c:4f:26:62:19:ed:c2:9c:22:86:84:25:
17:77:a1:fc:3b:9f:86:57:23:bd:19:61:aa:86:16:
e0:d8:70:0f:e4:11:11:ba:23:04:67:94:d4:67:78:
84:35:75:f6:f0:72:6f:65:ed:ac:98:9b:9c:3f:26:
e6:c6:91:51:63:b3:8a:e5:1c:d8:62:f7:b3:72:9b:
88:1a:1c:a5:68:43:70:33:bd:6a:9e:85:e4:8e:43:
72:3a:fa:c1:b9:0c:10:ea:90:68:e9:e4:e2:eb:c0:
a7:3c:0d:1b:b3:df:97:84:2d:aa:67:15:57:28:c3:
6e:f5:84:cc:2b:d3:b8:23:5a:ae:b0:8c:08:30:cc:
8f:6c:9d:30:59:72:a2:73:36:97:f1:dc:bf:a6:93:
0d:fd:3c:f2:f4:73:97:91:92:4e:98:22:14:09:4e:
ee:e8:17:19:ae:93:46:50:dc:80:92:30:40:4f:f8:
23:13:5a:f1:ac:3c:6d:71:0e:2b:de:ad:92:0b:de:
10:86:4c:2f:af:61:ea:d7:27:70:db:8b:af:88:66:
ac:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:83:4F:C0:76:95:7D:88:15:04:AA:FE:65:D4:E4:B1:13:12:61:76
X509v3 Authority Key Identifier:
keyid:B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:87:0b:d6:aa:bf:26:88:da:fe:87:8b:f1:8d:49:fe:65:f8:
34:d3:f6:71:1d:2c:55:23:a7:d5:bf:86:f9:3c:5e:0b:a9:ee:
04:32:bb:52:d8:16:e1:8c:8a:a2:a7:9f:b4:06:5d:a2:3a:2d:
eb:29:57:3f:03:f5:0d:0d:20:e5:35:af:db:8b:14:19:04:6d:
ca:50:f0:42:c7:c2:13:de:2c:33:83:47:b1:5a:96:f8:7b:6a:
f8:bf:6d:54:c4:0e:4c:ae:d0:c3:d5:2a:49:ec:6a:08:b2:f1:
6e:90:c2:07:49:90:bf:46:52:18:13:a5:98:e2:fb:a4:e6:2b:
d4:e5:f9:72:11:d3:53:b0:22:5f:9c:75:af:6d:cd:19:4f:7b:
b1:21:97:64:17:30:dd:7d:fd:ee:2a:3f:e4:be:85:b3:85:5f:
0f:35:61:56:fb:71:b5:03:18:61:b7:d1:e9:d0:10:a7:b2:39:
6f:55:83:11:0b:db:19:ce:13:a3:4f:bd:e3:ce:b7:66:10:37:
36:49:97:51:4a:ab:80:8d:3c:08:69:6e:54:88:45:eb:91:b6:
e6:71:eb:73:ac:5d:f8:4d:20:c9:4c:6e:fb:be:f5:36:51:d1:
ea:53:71:85:32:04:cb:2e:e6:8c:d2:0a:3c:69:b3:0a:1c:ca:
32:fd:c5:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ5RTAxMTAvBgNVBAUTKEI2QzI0M0M2MzlCMzExRTk4NzhFQzA2QkYyNDdGN0FE
RTU0QjA5M0UwHhcNMjYwMzAxMjMwMzMxWhcNMjYwMzA4MjMwMzMxWjAYMRYwFAYD
VQQDEw02OWE0YzVjMy0xMTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqqDDyXM5KRC+UO9pwSKgfqOdYd5b6DN5vZUGQkvKFO1JICqIZuK3vjgiW11K
IEN8TyZiGe3CnCKGhCUXd6H8O5+GVyO9GWGqhhbg2HAP5BERuiMEZ5TUZ3iENXX2
8HJvZe2smJucPybmxpFRY7OK5RzYYvezcpuIGhylaENwM71qnoXkjkNyOvrBuQwQ
6pBo6eTi68CnPA0bs9+XhC2qZxVXKMNu9YTMK9O4I1qusIwIMMyPbJ0wWXKiczaX
8dy/ppMN/Tzy9HOXkZJOmCIUCU7u6BcZrpNGUNyAkjBAT/gjE1rxrDxtcQ4r3q2S
C94Qhkwvr2Hq1ydw24uviGasnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGeDT8B2
lX2IFQSq/mXU5LETEmF2MB8GA1UdIwQYMBaAFLbCQ8Y5sxHph47Aa/JH963lSwk+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDlFMC81MTU0QTExMDVG
RkExMUU4ODdCNTY5NDJDNEY5QUUwMi90c0pEeGptekVlbUhqc0JyOGtmM3JlVkxD
VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RzSkR4am16RWVtSGpzQnI4a2YzcmVWTENUNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDlFMC81MTU0QTExMDVGRkExMUU4ODdCNTY5NDJDNEY5QUUwMi90c0pEeGptekVl
bUhqc0JyOGtmM3JlVkxDVDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGIcL1qq/Joja/oeL8Y1J/mX4NNP2cR0sVSOn1b+G+TxeC6nuBDK7UtgW4YyK
oqeftAZdojot6ylXPwP1DQ0g5TWv24sUGQRtylDwQsfCE94sM4NHsVqW+Htq+L9t
VMQOTK7Qw9UqSexqCLLxbpDCB0mQv0ZSGBOlmOL7pOYr1OX5chHTU7AiX5x1r23N
GU97sSGXZBcw3X397io/5L6Fs4VfDzVhVvtxtQMYYbfR6dAQp7I5b1WDEQvbGc4T
o0+94863ZhA3NkmXUUqrgI08CGluVIhF65G25nHrc6xd+E0gyUxu+771NlHR6lNx
hTIEyy7mjNIKPGmzChzKMv3Fbw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:00 2026 by rpki-client