
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
File: tDxOPTL5W1BV0E_cAfhRljfImm8.mft (raw, json)
Hash identifier: sjCivqUFJv2BWWzNrRr1BbAprV69yw/ILDrdojb2WgM=
Subject key identifier: 9E:44:81:A8:2B:CD:A4:BB:3C:06:22:56:67:5F:76:F9:93:97:33:16
Authority key identifier: B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F
Certificate issuer: /CN=A9161F73/serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F
Certificate serial: 013A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
Manifest number: 0136
Signing time: Sun 01 Mar 2026 06:27:32 +0000
Manifest this update: Sun 01 Mar 2026 06:27:31 +0000
Manifest next update: Sun 08 Mar 2026 06:27:31 +0000
Files and hashes: 1: tDxOPTL5W1BV0E_cAfhRljfImm8.crl (hash: 0f9Gqih2vKycGU2kW6R16Q4VeLzkmKuHn4zIvMC5FC4=)
2: 858870583D0A11EF829DCE39C4F9AE02.roa (hash: RTDmiAUTa+6e7BNeD1q7cr5hG3t1MJJWblXaDUXHJew=)
3: 38BDA87E3D0A11EF9EEE4439C4F9AE02.roa (hash: ZlBqKGquKmDZSHNnRJSZITSYuAIz8r1LwmFTYmRFcj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl
rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:27:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161F73, serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F
Validity
Not Before: Mar 1 06:27:31 2026 GMT
Not After : Mar 8 06:27:31 2026 GMT
Subject: CN=69a3dc54-eae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:08:19:75:3e:50:15:6f:6b:28:b5:76:38:
88:77:ad:05:c2:9e:bd:cb:5f:63:d3:a3:89:df:d4:
9e:b5:3a:17:5b:7f:96:5b:11:70:3d:64:d3:ef:2b:
a6:a2:11:dc:17:9e:f3:6a:56:09:3f:57:ba:c3:b3:
6b:cc:2f:a8:0f:5c:69:be:9d:b7:b1:e9:c8:f6:16:
b0:cc:7a:bd:73:5e:bd:99:0a:f0:3a:8b:1e:a8:6e:
18:5e:4f:94:a2:76:3a:6c:66:b9:03:9c:01:76:b5:
87:32:a6:b5:97:ef:1d:3d:11:a6:23:43:09:c7:2d:
60:6f:b5:db:72:b7:4c:be:8d:ff:75:2a:76:29:98:
36:d6:1b:2a:b7:9b:41:4a:fd:f2:9c:80:00:38:57:
ca:32:05:9e:48:a6:45:17:2c:3c:53:44:a5:6b:a4:
b1:c7:0b:97:d2:08:0f:6b:84:16:1b:9e:55:1e:5c:
fa:22:34:a8:a7:4f:79:38:9c:43:c8:a1:a7:15:50:
40:af:86:b2:54:9a:f3:cf:6a:f5:5e:bb:be:53:76:
ba:28:67:d2:f8:e4:55:cb:fa:28:ba:92:c6:7a:2e:
16:7a:b3:97:67:af:c0:46:73:ca:d5:d9:0b:bc:64:
b2:ea:3d:15:f0:94:b4:17:e1:79:13:f3:1f:91:a6:
00:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:44:81:A8:2B:CD:A4:BB:3C:06:22:56:67:5F:76:F9:93:97:33:16
X509v3 Authority Key Identifier:
keyid:B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:25:72:fd:a9:1b:2d:4c:74:9f:49:8f:78:45:33:19:64:37:
a7:3d:61:9b:3a:e5:d8:5a:d9:ee:38:3b:bc:33:3a:32:76:46:
c3:61:25:e7:08:21:98:4b:db:d0:54:aa:a6:a5:0c:71:2e:d7:
fe:cb:77:c2:53:aa:1b:ed:55:b3:7b:7b:82:36:1e:e9:3a:ed:
31:06:a3:01:44:ec:3a:89:90:dc:74:eb:06:0d:64:4e:9f:aa:
c8:cc:d0:9f:64:7f:9e:06:15:38:80:fb:40:e5:46:7d:3d:90:
38:b8:97:66:e6:a0:af:4e:ee:b6:02:f5:74:8f:3d:af:70:be:
4b:5b:7d:99:90:4c:ab:54:bc:a4:03:74:92:2f:b7:b5:1b:df:
a2:83:87:a5:5e:74:07:65:d1:b2:c6:e2:40:a6:a5:d3:67:d8:
11:39:f0:1d:2d:d3:15:3c:e5:9f:c6:24:6c:ec:91:66:fc:05:
00:f8:13:4f:5b:fe:d1:27:f8:e4:0d:20:9a:22:21:cf:bb:cd:
73:ec:af:b1:37:2b:86:38:39:ce:bd:0f:40:cf:f4:af:a7:01:
68:3a:c4:da:f6:dc:68:52:de:2d:36:65:63:ab:1d:55:0c:9a:
3f:6b:2e:b2:e2:40:43:9a:88:5a:6f:7d:bd:bd:a6:dc:13:dd:
b6:95:45:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjFGNzMxMTAvBgNVBAUTKEI0M0M0RTNEMzJGOTVCNTA1NUQwNEZEQzAxRjg1MTk2
MzdDODlBNkYwHhcNMjYwMzAxMDYyNzMxWhcNMjYwMzA4MDYyNzMxWjAYMRYwFAYD
VQQDEw02OWEzZGM1NC1lYWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2zoIGXU+UBVvayi1djiId60Fwp69y19j06OJ39SetToXW3+WWxFwPWTT7yum
ohHcF57zalYJP1e6w7NrzC+oD1xpvp23senI9hawzHq9c169mQrwOoseqG4YXk+U
onY6bGa5A5wBdrWHMqa1l+8dPRGmI0MJxy1gb7XbcrdMvo3/dSp2KZg21hsqt5tB
Sv3ynIAAOFfKMgWeSKZFFyw8U0Sla6SxxwuX0ggPa4QWG55VHlz6IjSop095OJxD
yKGnFVBAr4ayVJrzz2r1Xru+U3a6KGfS+ORVy/ooupLGei4WerOXZ6/ARnPK1dkL
vGSy6j0V8JS0F+F5E/MfkaYAuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5Egagr
zaS7PAYiVmdfdvmTlzMWMB8GA1UdIwQYMBaAFLQ8Tj0y+VtQVdBP3AH4UZY3yJpv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUY3My82REYwRTEwODNE
MDcxMUVGQjVDOUVDMjRDNEY5QUUwMi90RHhPUFRMNVcxQlYwRV9jQWZoUmxqZklt
bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3REeE9QVEw1VzFCVjBFX2NBZmhSbGpmSW1tOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MUY3My82REYwRTEwODNEMDcxMUVGQjVDOUVDMjRDNEY5QUUwMi90RHhPUFRMNVcx
QlYwRV9jQWZoUmxqZkltbTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqSVy/akbLUx0n0mPeEUzGWQ3pz1hmzrl2FrZ7jg7vDM6MnZGw2El5wghmEvb
0FSqpqUMcS7X/st3wlOqG+1Vs3t7gjYe6TrtMQajAUTsOomQ3HTrBg1kTp+qyMzQ
n2R/ngYVOID7QOVGfT2QOLiXZuagr07utgL1dI89r3C+S1t9mZBMq1S8pAN0ki+3
tRvfooOHpV50B2XRssbiQKal02fYETnwHS3TFTzln8YkbOyRZvwFAPgTT1v+0Sf4
5A0gmiIhz7vNc+yvsTcrhjg5zr0PQM/0r6cBaDrE2vbcaFLeLTZlY6sdVQyaP2su
suJAQ5qIWm99vb2m3BPdtpVFvQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:29 2026 by rpki-client