
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft
File: ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft (raw, json)
Hash identifier: QLihIllm+XpvNysQZZcV1tmfn28s7ahaahH4eFwQoLc=
Subject key identifier: 15:E8:9A:2E:CE:26:EF:FA:44:32:7D:DF:3A:8B:17:1D:DB:7E:63:A2
Authority key identifier: B5:AE:47:DA:D0:4A:46:59:3A:3A:D0:82:52:06:E1:0B:CF:96:F8:CA
Certificate issuer: /CN=A916C016/serialNumber=B5AE47DAD04A46593A3AD0825206E10BCF96F8CA
Certificate serial: 0A25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft
Manifest number: 0A17
Signing time: Mon 02 Mar 2026 00:19:17 +0000
Manifest this update: Mon 02 Mar 2026 00:19:16 +0000
Manifest next update: Mon 09 Mar 2026 00:19:16 +0000
Files and hashes: 1: ta5H2tBKRlk6OtCCUgbhC8-W-Mo.crl (hash: 9L2u1hqyJRE4X4JHxqE7XG4U3TlNOiMbstKaRDpjWOM=)
2: A7FF3E74AD2511EFB6717A1CC4F9AE02.roa (hash: MBWptOiHw039qMWGr8L9ysuKH1yp5fIYlw7a4TTE+JQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.crl
rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2597 (0xa25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C016, serialNumber=B5AE47DAD04A46593A3AD0825206E10BCF96F8CA
Validity
Not Before: Mar 2 00:19:16 2026 GMT
Not After : Mar 9 00:19:16 2026 GMT
Subject: CN=69a4d785-25b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:6d:b0:2c:34:c5:4c:73:56:32:20:6a:6a:
1a:a1:de:49:0b:be:bf:b6:69:8d:f7:dd:6e:d7:98:
b1:ea:2c:87:68:ef:a1:79:3d:1a:d0:e3:9f:52:7d:
6f:74:22:25:d0:88:83:13:ca:7b:ef:94:9a:a9:6f:
ca:49:73:2f:39:ce:83:1b:c6:2d:12:e7:f4:5a:73:
b6:70:8d:58:2f:4a:09:ba:87:e2:17:91:98:b4:dd:
61:a1:a0:5f:32:f7:8c:0a:f4:c3:f2:cf:0e:20:9a:
a3:6f:a0:56:58:eb:08:af:66:fb:6b:9c:2a:10:85:
2d:d7:cf:b6:bf:b0:02:a6:20:1a:f7:b3:42:b0:02:
6a:70:d5:85:d0:d7:7e:a7:af:58:e7:e6:e2:2a:aa:
d2:ab:04:56:70:26:cb:a3:1f:63:0b:83:59:73:02:
2f:bb:0b:0f:87:0f:b3:d4:46:49:49:7d:4e:04:64:
53:20:65:aa:7f:6a:aa:01:fc:e3:58:95:a6:32:a5:
3f:38:ef:86:e8:22:f5:2e:88:f5:75:a9:15:cd:ae:
e1:30:ab:c5:80:04:c1:45:d0:60:0e:6c:6a:28:c5:
ba:3d:db:7c:5a:94:5c:a3:53:03:e3:19:ae:3a:6b:
f0:58:a4:df:9b:21:59:0a:0f:2f:02:d0:37:89:b8:
bb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E8:9A:2E:CE:26:EF:FA:44:32:7D:DF:3A:8B:17:1D:DB:7E:63:A2
X509v3 Authority Key Identifier:
keyid:B5:AE:47:DA:D0:4A:46:59:3A:3A:D0:82:52:06:E1:0B:CF:96:F8:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:21:97:6b:ed:05:1e:d6:f2:91:e9:06:28:d9:f7:b8:e0:72:
51:54:51:fa:95:6f:a7:80:2b:5c:c0:7b:af:ca:fb:64:43:2d:
ef:16:8e:2a:96:9f:af:86:a8:88:e8:f2:14:b7:b9:8d:77:c9:
35:f0:4b:20:a1:18:f7:36:d1:16:05:af:73:1f:46:b6:65:5a:
2d:bb:78:c5:4d:05:80:68:01:53:d5:ab:d8:59:28:f6:78:5b:
58:93:65:67:fd:a3:ec:8e:e1:e6:09:94:4b:cf:75:3e:25:27:
4e:5b:b2:03:35:62:69:06:06:c7:af:36:a7:3b:e9:9b:b3:83:
df:4f:94:ef:20:dd:ee:4d:2e:58:a1:b4:53:a4:bd:1c:55:79:
3d:67:dc:a5:88:e7:06:3d:7e:4b:a8:cf:6a:02:17:81:7e:f7:
5e:a9:9c:76:6a:e0:7c:5a:76:94:69:d2:dc:83:0f:65:aa:3e:
5e:ab:91:7c:7c:0f:07:42:28:6b:c2:60:7e:31:dc:1c:57:29:
89:36:19:b3:32:95:60:e3:f1:a0:fc:0e:b4:0a:97:b3:8d:38:
c2:6c:b1:9a:ab:1c:d8:71:7a:02:43:be:75:0d:86:6c:2c:74:
df:75:19:bf:b0:3f:cb:50:88:be:de:b6:ea:ae:e9:7b:0d:70:
84:07:53:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:00 2026 by rpki-client