
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
File: T2scW0K2HdXigZOWenDRiiKP73Y.mft (raw, json)
Hash identifier: +796wQM2H7TTuu6IBowXGCJo3LprGRXs8sM+4CPv2Kk=
Subject key identifier: 92:E0:30:BC:21:CB:02:AC:CD:0E:77:71:4B:5C:1D:97:D7:E1:90:54
Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76
Certificate issuer: /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
Certificate serial: 0D17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
Manifest number: 0D0F
Signing time: Sat 28 Feb 2026 18:14:31 +0000
Manifest this update: Sat 28 Feb 2026 18:14:31 +0000
Manifest next update: Sat 07 Mar 2026 18:14:31 +0000
Files and hashes: 1: T2scW0K2HdXigZOWenDRiiKP73Y.crl (hash: 0MNWvy+JiK4Y3GsiDGGovvSH0qIjvx4zjIYf4gIblJg=)
2: 7DF47F46F95611E996377877C4F9AE02.roa (hash: TQudNrBg1tAuuiY/zVaf2qIyDj5AjTY8tAQkyrZyuYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl
rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:14:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3351 (0xd17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174DAD, serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
Validity
Not Before: Feb 28 18:14:31 2026 GMT
Not After : Mar 7 18:14:31 2026 GMT
Subject: CN=69a33087-0a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:47:4c:bc:6e:78:0d:97:0c:aa:40:2c:25:
db:ec:76:41:47:d7:09:23:41:54:3a:2c:f7:a7:8e:
51:2e:bd:8f:0b:bc:87:93:42:4b:ed:83:af:f0:08:
a4:cc:15:1d:3a:cd:2d:d6:44:16:84:79:54:6c:6f:
0b:bd:25:ba:40:e0:7c:4e:bd:3d:ff:11:8e:84:98:
42:f5:49:1b:61:37:61:d1:7c:83:29:d1:fb:d8:75:
b4:f3:f7:18:91:4d:7e:a5:25:5a:49:06:85:a7:83:
b7:1b:c0:c1:05:d6:0b:e8:b5:69:0e:35:5e:0a:e7:
7b:38:a3:b7:3b:75:c4:14:7d:a3:5c:d4:0b:5b:d4:
d0:f0:36:30:c6:88:81:c4:b3:9c:ea:7e:44:1e:ae:
40:8f:69:2d:fa:b9:58:2f:69:89:6a:9e:5b:af:bb:
8c:30:38:38:33:e9:29:28:64:23:5f:c3:10:16:f6:
8c:8d:d2:70:c0:ef:43:2f:12:0d:b7:cd:08:2f:a6:
08:80:c5:bc:2d:a7:e7:2b:66:b9:88:20:db:7f:29:
ab:f1:f0:b2:b1:01:75:d1:69:fa:86:2f:8d:fb:6a:
23:b7:3e:b5:3e:80:94:d6:d9:52:cc:22:a6:07:3e:
a8:bc:41:dc:99:60:57:63:90:35:75:89:7f:12:ad:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E0:30:BC:21:CB:02:AC:CD:0E:77:71:4B:5C:1D:97:D7:E1:90:54
X509v3 Authority Key Identifier:
keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:af:9d:19:31:da:f4:8c:ba:21:4d:2f:ba:d4:6d:ad:38:9b:
8b:2b:92:8e:d8:b4:be:06:69:09:95:43:66:95:ee:b6:f8:f8:
f8:3d:bf:e3:7e:bd:a9:2e:b7:89:05:9d:79:2e:01:dc:a2:d8:
27:55:49:32:45:87:7e:a0:4f:b1:69:0a:db:8c:3d:c0:51:51:
09:cf:75:ea:ff:56:b5:78:2c:26:30:b8:39:dc:ff:1c:91:9b:
08:33:b7:31:ba:66:40:f8:a3:45:65:c0:64:58:58:d7:96:f5:
96:9f:c7:15:43:b8:0d:a1:af:7f:01:3c:ac:5a:21:8c:2a:d4:
a5:67:47:63:70:f9:da:a7:67:c1:c1:25:a5:2b:0d:3d:d4:38:
20:2c:0f:41:d9:9c:c4:06:88:1d:97:c8:3e:f1:2d:85:de:f0:
db:a3:3d:41:39:49:e9:8d:cc:8b:46:1a:4f:c0:23:b9:cb:6d:
8b:5a:c6:10:64:da:c4:9e:d3:06:e6:6c:bc:ce:90:a1:d0:03:
82:12:22:fd:c1:32:9f:95:3c:44:c4:dc:0d:4c:99:a5:a1:93:
77:cd:2a:ed:ec:0a:0c:e6:1e:8b:89:56:00:8c:db:6f:e2:7a:
19:39:23:1e:e0:0a:84:1f:e8:b2:1a:1d:d4:39:25:3f:ff:53:
64:a1:85:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:28 2026 by rpki-client