
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
File: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft (raw, json)
Hash identifier: WyHYNyWiKEVeviUyG2cUTp50pNKFHu3BTgbL1XnjcKc=
Subject key identifier: EF:A2:24:20:CE:AB:79:A3:D3:05:16:1F:A5:BD:34:DB:7F:D8:21:3F
Authority key identifier: 4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E
Certificate issuer: /CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E
Certificate serial: 199B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
Manifest number: 198D
Signing time: Sat 28 Feb 2026 16:27:32 +0000
Manifest this update: Sat 28 Feb 2026 16:27:32 +0000
Manifest next update: Sat 07 Mar 2026 16:27:32 +0000
Files and hashes: 1: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl (hash: d95Sk7xeFhbC/3/U+KXjnsY5lr73S9NSR5uUU3t81Ls=)
2: 9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa (hash: 70xXWkwNQOqL2UEtMJ5SkT0IFNV0TQ+TXG3w2RYSHvQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl
rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:27:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6555 (0x199b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173C8A, serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E
Validity
Not Before: Feb 28 16:27:32 2026 GMT
Not After : Mar 7 16:27:32 2026 GMT
Subject: CN=69a31774-b111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:81:0c:2a:fb:19:3d:a0:3f:76:1c:e3:bf:
35:ad:da:a7:ec:b1:85:79:af:e8:49:30:6c:24:2a:
3b:39:b5:49:c2:67:34:75:df:b0:2f:54:83:bc:d9:
6b:ac:41:04:33:ad:aa:8a:7b:7c:48:e7:f1:43:db:
3b:2f:13:2f:09:71:01:4a:49:60:34:56:14:c6:af:
98:75:07:cc:c8:29:9f:88:03:cd:28:c4:a3:71:88:
7e:41:3f:bd:d2:82:a4:c6:94:6c:03:ac:54:cf:91:
e8:20:7e:7f:fa:9e:be:b8:d2:22:07:12:b3:bc:ec:
99:3c:31:fe:ac:2b:67:7b:8d:e3:0e:25:9a:91:36:
78:23:e8:29:45:8a:e2:3b:d7:a2:91:57:e1:9e:cd:
fa:28:d9:22:3e:66:a5:c5:b9:7e:4d:c2:72:d6:06:
67:ec:20:34:db:59:64:65:a7:b7:8d:a6:a8:0f:aa:
45:bc:48:00:3d:6e:6b:a2:87:e8:1c:f9:5b:f9:8d:
45:23:30:11:db:19:73:4f:2a:c8:5d:b6:df:2d:1c:
3d:d5:54:78:46:10:9e:61:5c:d3:d7:fe:f1:51:15:
9a:ef:04:73:3b:7b:fb:f5:ae:e8:db:ee:96:b2:04:
66:72:a9:d1:d8:a4:8e:47:c3:eb:85:40:ad:81:91:
d0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A2:24:20:CE:AB:79:A3:D3:05:16:1F:A5:BD:34:DB:7F:D8:21:3F
X509v3 Authority Key Identifier:
keyid:4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:9d:f4:73:4b:49:ed:d2:0e:28:98:fa:d6:b2:8b:ae:ef:9a:
8b:3a:28:24:ff:82:d1:e0:2c:59:0f:bf:1a:7f:a3:77:06:0b:
f9:ac:fc:72:ed:3b:55:be:0e:e7:fc:ca:45:bf:b9:be:77:50:
3b:f4:6f:62:45:93:d0:18:1c:d4:9c:98:6c:63:b5:8a:4c:75:
d1:85:7d:22:e5:d0:22:78:9b:64:1b:7f:08:3e:71:d6:c8:ab:
1f:b8:33:ac:79:12:99:17:ac:c7:22:91:61:f7:be:15:a2:f4:
0f:3f:74:3b:af:9d:b3:0e:54:05:68:da:f8:61:17:01:f7:54:
d8:44:94:d8:fa:26:54:40:09:4e:7e:47:b4:17:c9:5c:b3:d6:
70:22:3d:3c:9d:5e:4d:4b:f6:cf:7e:04:22:29:53:f3:ba:c8:
a7:b7:5a:22:72:f9:22:de:b6:39:f2:87:06:a8:c7:49:13:8c:
5e:14:df:14:9d:8f:98:63:92:9c:d6:68:d1:ca:b0:0b:4d:50:
a6:e8:08:c6:5c:50:98:9e:dd:87:51:c9:fb:0c:f8:31:76:26:
4e:a4:94:9b:06:42:26:c5:78:2b:08:4d:ff:92:5c:50:f7:7b:
a1:50:96:26:d5:4b:39:b1:9b:c9:f2:9f:ab:19:9c:6b:2a:32:
6f:de:5e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:44:06 2026 by rpki-client