
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
File: tUdigfNZTThknMz_UvWLtJtHXwk.mft (raw, json)
Hash identifier: 0jqnElC2GeF8DqOK721MjW0MQ8WB2Q1AzfkBU8tvlOs=
Subject key identifier: 18:66:AA:BD:B6:2F:FA:AE:49:5B:EB:4B:E0:0D:69:B4:69:A3:66:A5
Authority key identifier: B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09
Certificate issuer: /CN=A9169351/serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09
Certificate serial: 01B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
Manifest number: 01AD
Signing time: Mon 02 Mar 2026 02:54:51 +0000
Manifest this update: Mon 02 Mar 2026 02:54:50 +0000
Manifest next update: Mon 09 Mar 2026 02:54:50 +0000
Files and hashes: 1: tUdigfNZTThknMz_UvWLtJtHXwk.crl (hash: 4+tI7OALdF3msHdA1NhHy6r2I2uZ10RtOUXXYEMCXyQ=)
2: 86080D8A940511EE8A83F00DC4F9AE02.roa (hash: Vbr5tSAUt1o9rWvWC45nwleB9ODJmGpA18ZNisnMw58=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl
rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169351, serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09
Validity
Not Before: Mar 2 02:54:50 2026 GMT
Not After : Mar 9 02:54:50 2026 GMT
Subject: CN=69a4fbfb-0dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:7a:c6:5e:d6:da:0f:f4:02:92:dd:8a:9a:
6f:00:7b:2f:eb:39:22:17:a3:a5:78:98:bd:1d:1c:
2d:67:43:21:ba:ec:56:f6:1a:87:3c:41:43:c8:43:
5b:ec:6d:5e:e3:ea:bb:0d:32:25:de:2f:15:89:4b:
ea:61:34:49:e3:52:09:fc:d9:85:0e:79:21:06:0d:
40:60:ad:1f:32:36:2e:39:14:bd:cf:79:b4:97:c0:
8c:b8:f0:b2:70:ce:f0:c0:e4:63:a6:3b:9c:a0:13:
60:74:78:2e:bf:36:99:13:c7:99:2e:a7:cf:1b:6b:
22:4e:6d:85:44:da:05:98:bb:6d:86:cc:99:20:01:
4c:a2:8a:07:18:e8:db:34:5b:99:37:b9:b8:f2:ad:
84:14:50:c3:1f:ff:a8:72:7f:54:da:8f:0c:df:be:
ad:c1:27:69:4c:c6:4e:7c:29:f3:cf:18:c5:a5:b2:
49:e3:3c:87:0d:a6:2f:63:cd:1d:e0:97:61:eb:f3:
be:1f:d0:a8:02:d2:34:20:8b:d3:12:9b:df:ef:2f:
9a:d9:03:64:d7:9e:14:57:b6:14:ef:d4:04:c9:e0:
16:01:2f:89:cb:4a:aa:c5:cd:41:71:d9:a6:53:16:
3b:ee:3f:52:ee:cb:48:96:d4:0a:56:c9:a3:41:0e:
2f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:66:AA:BD:B6:2F:FA:AE:49:5B:EB:4B:E0:0D:69:B4:69:A3:66:A5
X509v3 Authority Key Identifier:
keyid:B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:52:1a:8f:6e:d4:6c:01:3d:23:50:37:9e:23:9e:e8:9a:70:
c3:2e:56:2d:0f:df:bc:00:da:a5:4f:31:2c:0a:fd:8d:a0:41:
f8:1e:1c:94:39:37:54:de:79:2a:9b:18:42:fe:32:17:3a:17:
be:13:bd:43:9c:c5:01:5b:b6:e6:fe:3d:c6:07:70:64:66:89:
b9:f7:8c:7a:8e:cd:ed:e2:c5:94:57:d5:84:3e:b9:cd:96:3b:
64:f0:95:43:14:ec:cf:fd:c2:e8:09:6b:fa:15:34:84:a9:d6:
4d:28:62:e1:aa:2f:4d:72:8a:97:21:8e:33:ef:d8:3f:12:4e:
25:b6:49:dc:5f:b0:17:d1:08:ac:e8:1a:73:e1:5b:3c:03:8e:
1e:45:26:80:33:f3:ae:1a:e0:36:fd:4f:aa:7f:9f:fa:b0:d5:
ff:f8:16:85:39:11:76:45:41:6f:ea:6b:cb:3c:a5:57:9a:ea:
c0:cf:b8:60:eb:69:b7:b2:50:65:3d:72:3e:47:3e:95:d9:36:
d7:f7:8e:91:d7:8a:5d:b8:30:a8:f8:31:da:15:e6:e6:f1:db:
6d:2e:74:0c:dc:9c:c6:c9:e4:3a:7d:6e:59:b9:ed:e7:4b:02:
0c:86:b8:b2:0b:4f:de:9b:8c:ec:2c:0b:87:ac:e5:da:e9:28:
2b:b7:72:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:42 2026 by rpki-client