
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
File: TiH1qoySjAtnV8A-VbClkjxOSKs.mft (raw, json)
Hash identifier: /Nqa6eHkCyubWa7RvNaW5fbvEAt6yHXIVYLrrAuYqPE=
Subject key identifier: 43:AC:99:00:D1:8B:5E:6C:1F:CC:19:1B:00:F5:79:9B:3C:77:04:65
Authority key identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB
Certificate issuer: /CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB
Certificate serial: 01CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
Manifest number: 01C2
Signing time: Sun 01 Mar 2026 04:37:22 +0000
Manifest this update: Sun 01 Mar 2026 04:37:22 +0000
Manifest next update: Sun 08 Mar 2026 04:37:22 +0000
Files and hashes: 1: TiH1qoySjAtnV8A-VbClkjxOSKs.crl (hash: RR4GkR/+S3wiBo0Bk0sTnnTOiepBY45DxbFh56WAFjI=)
2: E586278C29A111F0BA1F4E63C4F9AE02.roa (hash: b4SLVAUnbqCe1KbDRVFMh4aQOBLAbqbSRgJNk8aPOZ0=)
3: F97DB5F229A111F090BC8163C4F9AE02.roa (hash: 3een9y7QYXPUAanRr23KUG0CVwN0O03Dxs8PdOWYvII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl
rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:37:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458 (0x1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180D79, serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB
Validity
Not Before: Mar 1 04:37:22 2026 GMT
Not After : Mar 8 04:37:22 2026 GMT
Subject: CN=69a3c282-b86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2e:f0:9e:a0:03:48:a9:5d:6a:11:b5:fc:fe:
7c:73:1f:bd:45:ed:9b:1d:f9:80:27:19:4f:a9:6b:
2b:b6:2f:1d:c4:d7:f2:65:d3:11:cf:fa:78:13:7c:
b1:85:e0:31:3d:40:76:4b:31:9b:d3:6d:4a:0b:76:
04:35:61:fa:9b:06:81:5f:d0:7f:34:9c:55:96:ce:
8e:33:d1:3c:f1:d9:ce:ae:33:08:43:b9:06:b3:4e:
cb:55:30:04:42:25:0c:c7:ab:d0:6d:73:e5:df:8e:
ad:6c:9e:de:1b:cb:05:af:6d:0b:dc:b0:bc:76:45:
4a:9b:eb:12:64:c3:23:65:1d:0f:27:51:bd:c5:9b:
4e:1b:c8:db:e5:26:89:c8:e0:d9:81:83:62:b6:3c:
c4:66:d6:4d:60:30:9c:53:8a:51:4d:d4:f3:23:ab:
99:a6:6a:62:c9:9e:6c:b9:ba:07:a0:39:8a:b2:6d:
d7:57:4c:99:53:a6:9d:cd:7f:a7:24:c7:f3:30:e3:
18:2d:d7:16:7c:ab:c2:20:74:cb:34:1f:0f:5c:27:
1b:85:9d:af:f1:09:c9:a8:dc:98:79:4f:05:a5:fe:
3b:93:9c:c8:ea:3c:2a:bb:48:46:bd:d4:c2:31:cd:
5c:77:83:1f:bd:9a:9a:3f:8c:f6:b3:f5:f1:a8:d6:
29:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AC:99:00:D1:8B:5E:6C:1F:CC:19:1B:00:F5:79:9B:3C:77:04:65
X509v3 Authority Key Identifier:
keyid:4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:da:24:d0:61:e1:15:21:7a:0d:73:c0:59:23:a4:4b:40:af:
44:ea:43:18:5a:61:4a:e9:ab:d6:8e:a1:28:00:ce:2e:1c:2b:
f2:76:50:ea:c0:22:e6:00:48:ef:85:cf:80:af:c8:c3:8c:7e:
ea:3c:51:a5:9d:f4:9e:5c:c8:f6:29:cc:69:b6:19:90:64:3f:
1e:89:ef:bd:45:f1:5c:15:fe:0a:4e:59:c3:99:47:44:17:ad:
b1:df:e4:30:a2:2f:ab:74:7a:cb:cf:d2:28:c0:8f:fb:7e:d2:
ab:da:d4:c1:5c:e2:d7:ab:32:7b:1c:f8:15:6a:a2:a2:7f:87:
73:1e:6b:79:6a:d2:dd:94:ac:ac:90:35:52:dd:91:a2:fc:3e:
bc:ed:80:f9:34:0c:3d:fb:49:5e:bb:58:6b:c3:c6:e9:1a:a5:
51:19:a8:4f:a9:08:31:55:0f:bb:da:d8:53:f8:ff:15:ce:f9:
62:52:68:24:3e:d6:0a:42:5e:86:3c:88:c9:e1:15:09:75:23:
de:19:67:52:77:11:4d:ce:68:87:36:78:e1:27:72:9f:cb:91:
f9:40:27:5d:93:33:69:43:98:16:9d:c2:c6:6d:8e:bc:7b:d9:
c4:96:77:bf:d2:a8:ea:f6:8a:df:ce:27:a9:94:91:5e:14:ae:
98:8b:cd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:35:13 2026 by rpki-client