
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
File: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft (raw, json)
Hash identifier: vTxM791YQw6sXcYKlG45fyvoyYQsdvNN00EP3ic/r1o=
Subject key identifier: 1B:79:FA:7C:EC:8F:E2:6C:CA:64:26:5A:30:79:2B:E7:F2:C1:50:97
Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9
Certificate issuer: /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
Manifest number: EF
Signing time: Fri 17 Apr 2026 06:10:27 +0000
Manifest this update: Fri 17 Apr 2026 06:10:27 +0000
Manifest next update: Fri 24 Apr 2026 06:10:27 +0000
Files and hashes: 1: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl (hash: lJShkdlOWJ+O6zjDrCBpxnjgPNG1CyRK1ypH30Dp5Zo=)
2: 240B1914D90B11EF95020982C4F9AE02.roa (hash: 0gHNtWChBEUR4YEQpsBzxLagBwCzjHIiYU13EWlRZC8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl
rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:10:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9
Validity
Not Before: Apr 17 06:10:27 2026 GMT
Not After : Apr 24 06:10:27 2026 GMT
Subject: CN=69e1ced3-2a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:1f:fd:71:e0:bf:ae:1c:1d:bb:b4:0e:04:
46:fc:dd:4a:fa:a2:81:d9:c6:cb:11:aa:f0:f6:47:
b0:5d:44:2a:5f:4b:2d:96:d6:4f:dd:81:e4:02:e7:
a1:92:66:02:96:c9:27:9d:0c:32:bf:63:e8:11:35:
9d:3a:48:a2:c1:8e:4f:d3:18:fc:6d:58:91:ab:d9:
a3:c0:ab:db:ac:f0:17:b6:78:14:41:2a:20:62:84:
a0:b4:cf:83:f3:04:59:5c:02:5b:27:74:ad:96:90:
78:90:91:9f:0d:c4:26:27:31:04:47:9d:f4:80:24:
b5:48:dc:c5:f0:25:a3:52:a3:55:56:cb:72:75:1c:
7a:2f:32:47:f3:50:43:ad:98:ba:7a:06:09:d4:06:
60:b4:09:9e:4f:73:49:d1:db:03:1a:fe:16:d8:eb:
14:86:d9:bf:d2:9b:ff:ec:cf:a6:89:4e:92:c2:58:
bf:e5:c1:2c:4c:c4:27:f9:9e:e3:1b:f8:8e:ca:08:
1c:50:c5:a1:ee:4c:c2:e7:72:c7:30:04:b8:54:5e:
f3:b3:e5:00:78:a2:b9:f1:c1:e0:14:3d:4b:23:d0:
cd:06:1e:d8:e2:b1:e0:5b:c6:45:9d:9c:05:21:44:
f7:c3:99:a6:43:8a:a8:89:cf:9c:4e:71:5d:5a:88:
33:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:79:FA:7C:EC:8F:E2:6C:CA:64:26:5A:30:79:2B:E7:F2:C1:50:97
X509v3 Authority Key Identifier:
keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:23:db:4b:38:fc:75:7c:f9:e0:1d:c1:d3:94:15:2f:a4:d0:
64:1d:4e:d6:92:01:1b:4e:f0:c5:45:b5:82:9e:09:bf:4c:fb:
0a:fc:37:53:bd:4e:4b:63:1e:c9:1a:72:cf:8a:74:ee:8e:ec:
68:c4:07:18:ae:a9:8b:00:35:af:c5:56:9a:ca:b4:fb:e3:d4:
82:5b:cd:d6:b6:f9:a6:bc:67:62:1b:e3:66:a4:bd:2f:d8:44:
2e:cb:a7:68:9c:c3:8a:86:e6:cd:fa:0c:f7:6e:f9:15:b3:f0:
f2:21:61:ae:3c:f6:f0:92:d2:8f:f5:28:1e:97:6d:cf:8a:a2:
33:e1:d0:ff:e4:dc:48:33:e9:65:26:37:1e:fb:64:26:13:59:
39:84:7e:42:5d:66:fc:ef:53:a7:73:5c:14:d8:16:dd:61:69:
95:aa:6d:d7:4b:a4:94:58:05:c3:56:9c:dd:14:4d:66:c9:7b:
af:d0:4f:35:d9:ad:78:37:f7:65:ae:ce:bb:5c:a0:21:08:11:
a6:36:b4:e6:01:68:c3:74:e7:c0:c5:63:67:ef:14:fa:34:50:
75:c7:8d:de:e7:42:b9:b6:10:6e:25:77:f3:c4:33:48:1b:73:
a6:3f:5a:65:58:e3:e9:b0:ac:f4:69:18:51:b3:ce:d3:13:2d:
4f:fb:a7:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMxNjExMTAvBgNVBAUTKEI0OUIyQjExRDM4NzZERUNERTEzRjVFOEY1OUU2NDFB
N0QwOTNGQjkwHhcNMjYwNDE3MDYxMDI3WhcNMjYwNDI0MDYxMDI3WjAYMRYwFAYD
VQQDEw02OWUxY2VkMy0yYTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuC0f/XHgv64cHbu0DgRG/N1K+qKB2cbLEarw9kewXUQqX0stltZP3YHkAueh
kmYClsknnQwyv2PoETWdOkiiwY5P0xj8bViRq9mjwKvbrPAXtngUQSogYoSgtM+D
8wRZXAJbJ3StlpB4kJGfDcQmJzEER530gCS1SNzF8CWjUqNVVstydRx6LzJH81BD
rZi6egYJ1AZgtAmeT3NJ0dsDGv4W2OsUhtm/0pv/7M+miU6Swli/5cEsTMQn+Z7j
G/iOyggcUMWh7kzC53LHMAS4VF7zs+UAeKK58cHgFD1LI9DNBh7Y4rHgW8ZFnZwF
IUT3w5mmQ4qoic+cTnFdWogzTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBt5+nzs
j+JsymQmWjB5K+fywVCXMB8GA1UdIwQYMBaAFLSbKxHTh23s3hP16PWeZBp9CT+5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE2MS83MTMyRUY5QUQ5
MDcxMUVGQjI3Rjc4NTdDNEY5QUUwMi90SnNyRWRPSGJlemVFX1hvOVo1a0duMEpQ
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3RKc3JFZE9IYmV6ZUVfWG85WjVrR24wSlA3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzE2MS83MTMyRUY5QUQ5MDcxMUVGQjI3Rjc4NTdDNEY5QUUwMi90SnNyRWRPSGJl
emVFX1hvOVo1a0duMEpQN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHSPbSzj8dXz54B3B05QVL6TQZB1O1pIBG07wxUW1gp4Jv0z7Cvw3U71OS2Me
yRpyz4p07o7saMQHGK6piwA1r8VWmsq0++PUglvN1rb5prxnYhvjZqS9L9hELsun
aJzDiobmzfoM9275FbPw8iFhrjz28JLSj/UoHpdtz4qiM+HQ/+TcSDPpZSY3Hvtk
JhNZOYR+Ql1m/O9Tp3NcFNgW3WFplapt10uklFgFw1ac3RRNZsl7r9BPNdmteDf3
Za7Ou1ygIQgRpja05gFow3TnwMVjZ+8U+jRQdceN3udCubYQbiV388QzSBtzpj9a
ZVjj6bCs9GkYUbPO0xMtT/unCA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:02 2026 by rpki-client