
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
File: TSkgNoEWBfjziJgBUhslcnoc12U.mft (raw, json)
Hash identifier: Jw5xrQABl/MhQoo29J/CiRIW39OSsBP3l1afLIkEcFk=
Subject key identifier: 2C:81:27:2D:BA:A1:D0:4C:1D:F7:E2:B2:3A:DD:58:EE:B2:22:82:C9
Authority key identifier: 4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65
Certificate issuer: /CN=A9154DE2/serialNumber=4D292036811605F8F3889801521B25727A1CD765
Certificate serial: 0398
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
Manifest number: 0392
Signing time: Mon 02 Mar 2026 01:30:34 +0000
Manifest this update: Mon 02 Mar 2026 01:30:32 +0000
Manifest next update: Mon 09 Mar 2026 01:30:32 +0000
Files and hashes: 1: TSkgNoEWBfjziJgBUhslcnoc12U.crl (hash: avDA45d0URMIHTVdRtjJBSRXhqpR5TAhgie1lPvljGI=)
2: EB4F77B8D5E411ECB31AC843C4F9AE02.roa (hash: PgJ9XNDU/ajrVdWQinUWewn6SR1kOOmwJgma6udOIns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl
rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 920 (0x398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154DE2, serialNumber=4D292036811605F8F3889801521B25727A1CD765
Validity
Not Before: Mar 2 01:30:32 2026 GMT
Not After : Mar 9 01:30:32 2026 GMT
Subject: CN=69a4e83a-dabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:a7:54:de:41:de:30:80:c6:ac:88:f7:4c:
c4:4c:89:a3:92:08:30:76:29:c9:0f:92:f5:12:2d:
9a:45:0b:00:08:81:5a:e7:05:d8:fd:e4:14:61:b0:
20:0e:61:d7:fe:19:89:af:90:3a:71:bf:d8:24:81:
9a:d7:84:c1:2b:b9:df:f1:6a:65:5f:78:91:3b:5d:
4e:f9:4a:d2:be:0b:da:d1:97:72:25:f7:75:67:01:
a6:54:d4:e0:53:ef:12:39:17:11:50:88:a5:e7:11:
ff:50:2b:86:96:18:7d:6d:fd:0c:68:a4:c4:1b:a5:
7f:e6:17:a4:87:15:bc:3e:03:84:d6:86:fd:9e:c5:
cf:28:3c:3c:a2:03:0f:05:32:b0:40:b8:1d:19:98:
48:64:89:71:ee:cb:25:5e:66:9d:c7:3c:fd:c3:93:
63:2e:58:92:a5:f6:83:f6:99:11:71:35:ca:5e:24:
19:ae:44:7e:48:4c:1e:35:ed:b0:b4:3e:5d:66:eb:
7f:75:de:94:45:d8:e7:2b:b1:98:d5:16:f6:93:98:
89:c2:b3:ea:4f:87:a7:5c:76:a2:36:db:fc:8c:ba:
f2:34:a0:7c:ec:54:50:c0:1c:9c:ec:c8:04:0d:90:
8a:dd:c3:24:c4:e8:e7:9b:9b:81:c0:45:58:b8:ed:
73:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:81:27:2D:BA:A1:D0:4C:1D:F7:E2:B2:3A:DD:58:EE:B2:22:82:C9
X509v3 Authority Key Identifier:
keyid:4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:fd:9c:1b:9f:a2:ff:67:6a:d6:a2:a3:8e:1c:35:b4:b8:8e:
5a:9b:89:04:32:c2:64:35:a0:fe:ba:f0:34:b0:df:ab:23:95:
b9:88:62:b5:2f:55:d4:27:41:3d:56:32:59:a3:00:5b:88:5f:
c0:43:ac:4c:8b:eb:e1:09:76:a4:a5:d5:19:83:a0:fc:cb:fa:
c2:0e:99:ed:3b:f0:16:47:b3:d1:b6:3b:04:d3:04:37:73:39:
6d:94:93:6b:d8:63:04:8b:47:d2:18:70:4d:0b:83:ce:8d:f2:
10:03:4d:ef:fa:22:f0:7e:78:83:bb:50:47:7a:92:71:49:9a:
b6:f0:14:e5:91:f7:e8:c4:92:fc:cd:63:6f:58:c2:a4:fc:21:
74:bc:b3:32:65:bc:b0:e0:1f:34:07:7f:63:19:25:89:e8:2b:
4c:35:2d:03:36:11:8e:14:1b:d5:f3:e5:7e:25:83:b7:00:d6:
d6:83:ec:86:37:c1:c6:9f:0c:9f:51:e2:0f:72:4c:c9:d5:b5:
ca:e4:5c:d9:4f:a3:65:58:04:0f:50:3e:3f:40:28:7d:4b:f4:
25:de:f9:77:59:f0:2d:c5:33:62:f8:3c:50:b8:94:fb:1e:29:
5b:8a:72:5d:a3:d8:3a:0a:69:6f:42:10:e3:ea:5c:4e:8a:1c:
a1:d8:19:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:21:49 2026 by rpki-client