
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
File: tGadMNIQ5JB80oiL50uJpt08tsg.mft (raw, json)
Hash identifier: Le8LUVjaa+VyeWTecEYyYY7+k8NImg+93Z1oqNedvdY=
Subject key identifier: 6C:5B:A7:E1:AF:37:4D:DB:DB:7A:56:C0:08:D5:70:65:61:E5:13:00
Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8
Certificate issuer: /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
Certificate serial: 09B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
Manifest number: 09A1
Signing time: Sun 01 Mar 2026 23:25:54 +0000
Manifest this update: Sun 01 Mar 2026 23:25:51 +0000
Manifest next update: Sun 08 Mar 2026 23:25:51 +0000
Files and hashes: 1: tGadMNIQ5JB80oiL50uJpt08tsg.crl (hash: Y4cbZRaVR6j2hyBBL3e2yFEnEB0Rd67T4/xZVo1uc7A=)
2: 6E6FFF6A92F911ED8A66E70CC4F9AE02.roa (hash: u7UReDbBhUIS75vFBgtwpT87KJJAUp7AZ+DWcKC1QwM=)
3: D7120558A7ED11EA95BED565C4F9AE02.roa (hash: v8/LA8iLDwEiTe0PXMCijlgf4PJo7BysQG01+COmlK0=)
4: B350B67E964611EDA10D8777C4F9AE02.roa (hash: rAwkR3CgIMkhVxrjkO6BBicjMZkAEBzOtpU7NjRngaY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl
rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:25:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2489 (0x9b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161A58, serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
Validity
Not Before: Mar 1 23:25:51 2026 GMT
Not After : Mar 8 23:25:51 2026 GMT
Subject: CN=69a4cb02-aa98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:10:f5:e7:cf:ad:58:a9:db:27:5b:bf:fe:91:
b7:67:96:e9:a3:d5:ae:29:a3:9f:8b:73:eb:ef:6a:
84:c5:96:47:03:68:4f:55:44:a6:80:4c:2b:d2:b3:
4e:49:70:9e:1e:1a:cf:0e:d8:b2:f3:2d:29:34:8b:
91:2a:eb:b5:2a:56:64:be:24:33:a5:6a:e3:d2:bf:
35:fe:72:c8:e0:1e:90:15:93:e7:db:cc:b9:0b:b3:
c9:96:8e:e8:17:e8:42:1a:08:aa:fb:da:7e:63:1f:
bb:52:fb:b7:54:a8:c4:f2:8f:57:18:68:19:f8:74:
55:6f:c5:c7:06:c5:51:7d:be:39:62:4a:4e:c4:97:
89:10:d0:a6:75:ad:f4:7a:d6:0d:1b:aa:4a:47:b8:
c2:16:10:08:a3:55:52:a7:16:ee:37:f7:9f:a7:06:
4b:52:05:58:d5:75:1e:cd:cd:f8:2c:1e:85:3b:09:
3d:b3:54:be:64:eb:58:7b:bd:2b:89:1b:68:2f:e1:
23:c0:ee:87:bc:79:67:e5:04:17:37:2c:fb:bf:8b:
c1:34:87:7b:3e:d5:0f:87:98:df:e4:e8:18:b6:b0:
1a:2a:70:a9:ce:f4:99:15:b0:fe:f0:e3:b3:7d:a3:
d9:6a:0e:94:ce:09:73:cc:49:d3:dd:f0:dc:b5:bc:
e4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5B:A7:E1:AF:37:4D:DB:DB:7A:56:C0:08:D5:70:65:61:E5:13:00
X509v3 Authority Key Identifier:
keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:5b:33:1c:01:34:06:e6:b7:1f:4a:5b:c6:90:8c:3d:d4:cc:
64:50:44:f1:36:0c:23:e1:de:8e:9e:ce:58:47:e8:a0:a4:84:
7f:93:da:e5:0d:00:f2:52:34:39:af:f1:c2:94:50:b0:bb:33:
09:47:c8:c0:5f:eb:ec:f0:17:e4:38:0d:ad:49:98:9e:d9:b1:
c6:a5:ca:dd:bf:46:e9:d3:3e:50:a5:69:35:ff:91:e7:9f:9d:
3d:ca:c0:11:6b:fa:0f:ef:1a:01:81:0c:4b:be:32:00:bc:23:
68:4c:80:d3:ba:3a:b2:5b:f8:60:9b:f0:7e:0c:e8:9a:1b:d4:
5b:17:90:39:e6:45:d8:b8:96:e3:36:c6:ca:49:ff:24:e6:32:
f3:41:76:65:71:da:68:ac:0d:92:3d:b5:49:f1:7d:e5:33:87:
46:8d:a7:b0:27:1a:6b:bc:c2:60:b9:5b:ef:f5:09:18:98:30:
0a:b7:5d:15:0e:a8:99:a1:66:db:5d:95:d3:81:7f:8b:ef:b0:
c1:0b:13:33:34:3c:eb:6f:95:ab:43:22:ac:8c:d5:39:f9:28:
4e:9e:e6:aa:50:0a:a2:38:b6:26:55:7f:b9:9e:9f:8d:8e:69:
ad:52:93:09:f3:c8:71:29:3c:1e:93:de:c7:f7:ab:72:37:d1:
e6:2a:b8:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjFBNTgxMTAvBgNVBAUTKEI0NjY5RDMwRDIxMEU0OTA3Q0QyODg4QkU3NEI4OUE2
REQzQ0I2QzgwHhcNMjYwMzAxMjMyNTUxWhcNMjYwMzA4MjMyNTUxWjAYMRYwFAYD
VQQDEw02OWE0Y2IwMi1hYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmBD158+tWKnbJ1u//pG3Z5bpo9WuKaOfi3Pr72qExZZHA2hPVUSmgEwr0rNO
SXCeHhrPDtiy8y0pNIuRKuu1KlZkviQzpWrj0r81/nLI4B6QFZPn28y5C7PJlo7o
F+hCGgiq+9p+Yx+7Uvu3VKjE8o9XGGgZ+HRVb8XHBsVRfb45YkpOxJeJENCmda30
etYNG6pKR7jCFhAIo1VSpxbuN/efpwZLUgVY1XUezc34LB6FOwk9s1S+ZOtYe70r
iRtoL+EjwO6HvHln5QQXNyz7v4vBNId7PtUPh5jf5OgYtrAaKnCpzvSZFbD+8OOz
faPZag6UzglzzEnT3fDctbzkmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGxbp+Gv
N03b23pWwAjVcGVh5RMAMB8GA1UdIwQYMBaAFLRmnTDSEOSQfNKIi+dLiabdPLbI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1OC9CMzg5MzA0RUE3
RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVKQjgwb2lMNTB1SnB0MDh0
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RHYWRNTklRNUpCODBvaUw1MHVKcHQwOHRzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MUE1OC9CMzg5MzA0RUE3RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVK
Qjgwb2lMNTB1SnB0MDh0c2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAklszHAE0Bua3H0pbxpCMPdTMZFBE8TYMI+Hejp7OWEfooKSEf5Pa5Q0A8lI0
Oa/xwpRQsLszCUfIwF/r7PAX5DgNrUmYntmxxqXK3b9G6dM+UKVpNf+R55+dPcrA
EWv6D+8aAYEMS74yALwjaEyA07o6slv4YJvwfgzomhvUWxeQOeZF2LiW4zbGykn/
JOYy80F2ZXHaaKwNkj21SfF95TOHRo2nsCcaa7zCYLlb7/UJGJgwCrddFQ6omaFm
212V04F/i++wwQsTMzQ862+Vq0MirIzVOfkoTp7mqlAKoji2JlV/uZ6fjY5prVKT
CfPIcSk8HpPex/ercjfR5iq4Uw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:12 2026 by rpki-client