
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
File: tkVWXJMbKETS92DqqrDirkvjFBQ.mft (raw, json)
Hash identifier: foY0QY/ZIay9ckZ/aR4nXnHQB5Zo9htgoHNIxS7qKkA=
Subject key identifier: EC:6E:55:3C:9F:40:9F:E8:3B:E2:31:41:7B:66:5A:F9:9C:97:AA:90
Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14
Certificate issuer: /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414
Certificate serial: 04DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
Manifest number: 04D8
Signing time: Sun 01 Mar 2026 00:26:26 +0000
Manifest this update: Sun 01 Mar 2026 00:26:26 +0000
Manifest next update: Sun 08 Mar 2026 00:26:26 +0000
Files and hashes: 1: tkVWXJMbKETS92DqqrDirkvjFBQ.crl (hash: IKDdraFAB5v3snSxMJ5VQc23SLIV1n2VwWC4YuOR/Sw=)
2: 838DF1B0572011EC905C770CC4F9AE02.roa (hash: iL8DbZfU13LX2Ap/5AtahLEn5kXxcngJgS8iYsEF4yY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl
rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1246 (0x4de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170187, serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414
Validity
Not Before: Mar 1 00:26:26 2026 GMT
Not After : Mar 8 00:26:26 2026 GMT
Subject: CN=69a387b2-cdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0e:5f:40:8d:38:fb:a1:ad:99:ba:63:e1:f7:
25:8b:6a:06:61:82:bb:31:c6:bc:31:61:97:d3:1b:
e7:4f:de:37:7c:08:c3:00:ce:05:2b:a5:a1:74:f0:
3f:5e:d1:3d:c4:e0:3f:f5:c0:eb:ba:09:83:67:51:
8b:46:a5:90:25:39:29:93:4b:a7:99:d2:46:70:15:
be:02:f2:1b:8d:12:05:6a:6b:30:23:c5:f0:42:a4:
be:90:cb:01:80:12:ef:af:9a:8e:51:c2:54:ae:c1:
1a:d4:22:f8:e3:14:86:40:24:bb:27:5d:43:dc:a8:
4b:89:09:65:4b:67:a7:c0:73:d6:f3:8b:64:7d:18:
8b:79:83:2b:3f:d2:fb:e5:64:57:52:a0:a6:0c:32:
7a:65:9e:e9:80:ac:1a:4e:aa:3d:f7:76:83:18:cb:
dd:8a:78:60:43:c9:9d:2e:fd:f0:19:b9:65:a0:4b:
94:21:98:a2:01:e5:20:28:e8:7c:0d:eb:0a:fc:54:
eb:e2:69:58:61:39:83:4b:14:3e:b6:18:e2:3a:80:
8b:fb:28:15:4f:dd:3d:86:d9:54:ff:4b:22:cf:9f:
69:dd:28:be:dc:78:25:26:4a:3b:bc:e6:15:7b:bc:
83:47:d5:68:e9:f2:7a:f3:8d:70:e5:88:7a:11:06:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6E:55:3C:9F:40:9F:E8:3B:E2:31:41:7B:66:5A:F9:9C:97:AA:90
X509v3 Authority Key Identifier:
keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:14:b7:5c:0b:b9:71:50:fb:77:65:dd:0b:d5:c2:cd:be:28:
fd:cd:8c:97:d0:9f:42:f2:8a:72:ff:03:42:67:8d:a1:95:20:
c5:03:b2:1e:bd:c2:70:4b:88:58:04:1d:f3:53:4f:ca:5f:29:
1a:53:c3:5f:90:c9:69:12:2c:99:e0:7b:7a:fc:fc:94:55:40:
8d:21:af:9d:96:cd:22:55:3c:2f:3e:89:22:75:8a:cc:7c:fe:
62:d2:06:1e:d0:b5:ac:71:53:b7:2c:47:c7:54:df:ec:6e:98:
9a:8c:af:14:e8:af:c1:eb:87:af:1a:70:18:cf:6a:60:8e:17:
d7:f8:5b:4e:b3:f1:d9:1a:cf:be:eb:b6:46:c2:7f:a1:23:ab:
1c:08:e6:f0:5e:9d:29:59:d0:69:d8:93:d1:78:b4:da:a8:64:
d7:f6:a2:cc:a1:49:16:89:87:65:5b:0c:99:6d:ee:ab:ec:ee:
09:44:3e:5a:29:82:19:ec:d3:cd:a5:4b:8c:0a:83:99:38:c0:
1f:2e:43:0f:c0:4f:5a:ee:eb:82:22:09:3f:a6:ce:73:78:fb:
78:8a:5d:82:dc:a9:5d:4c:da:f6:e5:a2:fb:8e:09:f1:7c:19:
3e:ba:a8:7f:1c:4b:22:74:18:7d:9c:da:ce:b5:d2:df:b4:9d:
2f:8d:2c:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzAxODcxMTAvBgNVBAUTKEI2NDU1NjVDOTMxQjI4NDREMkY3NjBFQUFBQjBFMkFF
NEJFMzE0MTQwHhcNMjYwMzAxMDAyNjI2WhcNMjYwMzA4MDAyNjI2WjAYMRYwFAYD
VQQDDA02OWEzODdiMi1jZGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoA5fQI04+6Gtmbpj4fcli2oGYYK7Mca8MWGX0xvnT943fAjDAM4FK6WhdPA/
XtE9xOA/9cDrugmDZ1GLRqWQJTkpk0unmdJGcBW+AvIbjRIFamswI8XwQqS+kMsB
gBLvr5qOUcJUrsEa1CL44xSGQCS7J11D3KhLiQllS2enwHPW84tkfRiLeYMrP9L7
5WRXUqCmDDJ6ZZ7pgKwaTqo993aDGMvdinhgQ8mdLv3wGblloEuUIZiiAeUgKOh8
DesK/FTr4mlYYTmDSxQ+thjiOoCL+ygVT909htlU/0siz59p3Si+3HglJko7vOYV
e7yDR9Vo6fJ6841w5Yh6EQZ2SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOxuVTyf
QJ/oO+IxQXtmWvmcl6qQMB8GA1UdIwQYMBaAFLZFVlyTGyhE0vdg6qqw4q5L4xQU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDE4Ny9GMUUyQTNGODU3
MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktFVFM5MkRxcXJEaXJrdmpG
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RrVldYSk1iS0VUUzkyRHFxckRpcmt2akZCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDE4Ny9GMUUyQTNGODU3MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktF
VFM5MkRxcXJEaXJrdmpGQlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjxS3XAu5cVD7d2XdC9XCzb4o/c2Ml9CfQvKKcv8DQmeNoZUgxQOyHr3CcEuI
WAQd81NPyl8pGlPDX5DJaRIsmeB7evz8lFVAjSGvnZbNIlU8Lz6JInWKzHz+YtIG
HtC1rHFTtyxHx1Tf7G6YmoyvFOivweuHrxpwGM9qYI4X1/hbTrPx2RrPvuu2RsJ/
oSOrHAjm8F6dKVnQadiT0Xi02qhk1/aizKFJFomHZVsMmW3uq+zuCUQ+WimCGezT
zaVLjAqDmTjAHy5DD8BPWu7rgiIJP6bOc3j7eIpdgtypXUza9uWi+44J8XwZPrqo
fxxLInQYfZzazrXS37SdL40s5Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:57 2026 by rpki-client