
$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
File: tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json)
Hash identifier: gzHf0mPx/raIZ9Pm9k/deyBX1J5VV9fGQc9tVT7Wqi8=
Subject key identifier: E0:F2:96:70:5D:87:DB:81:2E:02:51:15:D2:A6:55:98:91:7C:F1:9E
Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
Certificate issuer: /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Certificate serial: 02FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
Manifest number: 02ED
Signing time: Fri 17 Apr 2026 01:11:53 +0000
Manifest this update: Fri 17 Apr 2026 01:11:52 +0000
Manifest next update: Fri 24 Apr 2026 01:11:52 +0000
Files and hashes: 1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: LnjMZ+FY1PpAr6uF4m6bGnq3CW8r/+n4HVvmgLyKH2c=)
2: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: k7oa0gyVDVstpxNJdtdSBjaevXmXY8KxLGB4YjxHPeM=)
3: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: zLRwlyYQoMCNATwicvYcavIJagOdRZfxbGUFbhuhVoc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:11:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 763 (0x2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Validity
Not Before: Apr 17 01:11:52 2026 GMT
Not After : Apr 24 01:11:52 2026 GMT
Subject: CN=69e188d9-0c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4d:72:63:00:20:4a:66:94:46:ef:b5:3e:d0:
9f:dc:97:ac:bf:ce:ab:fe:ca:ab:f7:55:ba:fa:aa:
f5:90:6b:b5:fd:a2:2f:ef:4f:c3:11:0c:c7:ca:d2:
73:ac:a8:ec:4f:c1:e7:e4:e3:a2:36:0c:b2:15:31:
8c:51:ae:0d:10:17:ea:74:4b:dd:15:33:b0:0f:7b:
e2:c3:8d:b4:24:c5:bc:f7:d2:6f:95:44:5c:84:c8:
25:7c:6c:9e:b7:f5:9b:76:8c:ef:92:06:5e:31:c0:
1a:a2:3e:cc:ca:34:cd:26:3a:67:59:da:9a:35:11:
97:75:50:8b:7d:69:30:7d:d7:d0:a4:89:23:96:fe:
e9:d8:95:84:ae:bb:57:e3:a1:42:f5:66:6e:28:6b:
e3:ed:f3:66:e8:8d:9a:2b:0e:64:7c:92:3f:96:6f:
3d:fd:d8:7d:d4:98:3f:bf:d6:bf:50:0f:9b:11:e9:
a4:2f:9a:d5:87:05:8f:8b:f7:53:23:c8:b6:22:0e:
19:23:2e:8c:8d:2a:13:50:d5:3b:28:ed:d5:63:31:
40:aa:25:04:ae:5e:4b:9f:77:b6:fd:e7:26:e6:25:
cd:fb:e1:01:05:5a:25:89:89:98:b2:5a:84:0a:9a:
ce:b2:57:32:d6:24:c9:8e:ac:72:95:02:e5:74:d8:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F2:96:70:5D:87:DB:81:2E:02:51:15:D2:A6:55:98:91:7C:F1:9E
X509v3 Authority Key Identifier:
keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:77:86:da:53:59:5c:1b:86:8e:7e:a7:8d:41:fe:05:9c:72:
78:93:38:64:1a:21:55:bb:99:53:d5:74:9a:d0:b8:6c:8d:9e:
a5:eb:8e:0f:cc:be:c7:27:83:c3:d1:8e:b0:5e:c7:29:fd:93:
6c:47:71:e1:3e:f1:88:a3:ae:56:7a:50:77:f5:00:99:5a:8f:
ea:82:25:8c:ee:d6:ea:83:ab:61:e9:43:ae:13:25:4a:1d:1d:
53:50:5e:f8:4b:4c:05:ea:32:51:8c:8c:ad:52:93:0c:b7:73:
cf:6c:fd:74:63:96:c3:23:73:88:94:3e:16:f1:12:48:19:0a:
ac:bb:59:82:23:2a:98:7c:cb:cd:9d:e7:6d:91:c1:57:05:08:
3b:03:ab:9e:b8:05:26:7a:be:b5:b8:2b:df:e3:73:0d:10:57:
01:44:e0:10:19:48:8c:21:a8:e7:c6:c5:10:46:73:b0:fe:b3:
59:7e:9a:f9:b3:f1:f6:c6:90:72:a8:99:8d:b4:fc:8d:be:cf:
e1:a8:fe:5a:bd:b1:fe:b5:a8:e9:e7:50:0d:0f:35:db:c8:a3:
d6:48:23:14:3e:7d:ae:9d:64:fa:70:e1:e9:cc:06:25:9b:23:
e6:7f:de:25:21:51:f7:06:25:ac:50:8e:be:38:24:27:a9:1b:
26:13:4b:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU0NEYxMTAvBgNVBAUTKEI2MDEyMTRDOTYyOEM5RjQyMUQzNjczNEIzODFDREVD
OTI4OTQ3NDgwHhcNMjYwNDE3MDExMTUyWhcNMjYwNDI0MDExMTUyWjAYMRYwFAYD
VQQDEw02OWUxODhkOS0wYzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2k1yYwAgSmaURu+1PtCf3Jesv86r/sqr91W6+qr1kGu1/aIv70/DEQzHytJz
rKjsT8Hn5OOiNgyyFTGMUa4NEBfqdEvdFTOwD3viw420JMW899JvlURchMglfGye
t/WbdozvkgZeMcAaoj7MyjTNJjpnWdqaNRGXdVCLfWkwfdfQpIkjlv7p2JWErrtX
46FC9WZuKGvj7fNm6I2aKw5kfJI/lm89/dh91Jg/v9a/UA+bEemkL5rVhwWPi/dT
I8i2Ig4ZIy6MjSoTUNU7KO3VYzFAqiUErl5Ln3e2/ecm5iXN++EBBVoliYmYslqE
CprOslcy1iTJjqxylQLldNgZYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODylnBd
h9uBLgJRFdKmVZiRfPGeMB8GA1UdIwQYMBaAFLYBIUyWKMn0IdNnNLOBzeySiUdI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTQ0Ri85MDEyQ0E0NDIy
ODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lmUWgwMmMwczRITjdKS0pS
MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RnRWhUSllveWZRaDAyYzBzNEhON0pLSlIwZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTQ0Ri85MDEyQ0E0NDIyODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lm
UWgwMmMwczRITjdKS0pSMGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe3eG2lNZXBuGjn6njUH+BZxyeJM4ZBohVbuZU9V0mtC4bI2epeuOD8y+xyeD
w9GOsF7HKf2TbEdx4T7xiKOuVnpQd/UAmVqP6oIljO7W6oOrYelDrhMlSh0dU1Be
+EtMBeoyUYyMrVKTDLdzz2z9dGOWwyNziJQ+FvESSBkKrLtZgiMqmHzLzZ3nbZHB
VwUIOwOrnrgFJnq+tbgr3+NzDRBXAUTgEBlIjCGo58bFEEZzsP6zWX6a+bPx9saQ
cqiZjbT8jb7P4aj+Wr2x/rWo6edQDQ8128ij1kgjFD59rp1k+nDh6cwGJZsj5n/e
JSFR9wYlrFCOvjgkJ6kbJhNLsA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:01:41 2026 by rpki-client