
$ rpki-client -vvf rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft
File: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft (raw, json)
Hash identifier: 4QVerQnkXPkDZmmEjN+PNAdKTymC7UnGDMofmA+7tlU=
Subject key identifier: 9E:99:7C:7A:19:30:EC:F9:BA:BF:A2:A1:02:3A:CD:6A:70:B3:1E:AA
Authority key identifier: 4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40
Certificate issuer: /CN=A91834AD/serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040
Certificate serial: 0CE1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft
Manifest number: 0CCB
Signing time: Mon 02 Mar 2026 01:11:31 +0000
Manifest this update: Mon 02 Mar 2026 01:11:29 +0000
Manifest next update: Mon 09 Mar 2026 01:11:29 +0000
Files and hashes: 1: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl (hash: lsS0yrzh4H0bDeabYtgYBV1i3MwNS6SLSdSgNQu9Cus=)
2: 6C3D5766692F11EF9E22F029C4F9AE02.roa (hash: DfEb8YlsjclJ0EYnxu7RhPWpVEUZS3PESB0dUVbX1H4=)
3: 6FFF14F0695E11EFAF2AF785C4F9AE02.roa (hash: TKxcs+BXUFiyDLVeeKpTCfJIMBeNCNlPXKLFC4ZDecY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl
rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3297 (0xce1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91834AD, serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040
Validity
Not Before: Mar 2 01:11:29 2026 GMT
Not After : Mar 9 01:11:29 2026 GMT
Subject: CN=69a4e3c2-84ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:5a:46:38:91:42:4c:fa:f8:56:95:3b:26:
e7:b2:9e:5a:9d:dd:ff:5e:da:5e:25:1a:32:21:96:
36:6f:ca:cc:50:c3:e8:41:6a:91:fa:f0:29:f3:bd:
bf:d3:5f:01:e4:d9:45:4a:86:86:94:d3:30:42:af:
a1:65:69:b0:2c:2f:c9:3d:89:68:fc:9a:f0:5a:dd:
1f:64:7e:44:89:41:eb:b3:3c:eb:58:1a:72:fb:d1:
27:4e:49:38:6f:6d:26:4e:35:b0:6d:00:38:f1:31:
a3:51:77:ce:2f:51:c9:01:79:88:2c:76:a2:74:38:
e1:32:1f:74:3b:37:4e:f3:ac:c3:5c:07:28:36:fd:
cc:e9:37:45:b6:57:33:7a:0b:bf:4d:52:21:63:46:
49:9c:d8:78:20:ae:25:c0:99:d0:e6:15:12:90:f7:
4d:4e:fe:d5:e5:d5:65:ca:d8:12:f7:23:0d:87:4a:
68:22:e6:a7:99:17:2e:38:09:b0:c0:fa:8c:ff:bd:
ce:35:0f:ba:2f:4e:48:bf:f4:54:61:f5:33:45:29:
ed:64:51:1a:28:8b:5a:7a:88:cf:b4:79:1c:06:e7:
35:9f:a1:73:57:eb:cd:ee:30:84:de:38:14:c6:28:
2b:6f:fa:8d:3a:4e:0b:6d:17:26:40:fb:bd:2f:4b:
ce:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:99:7C:7A:19:30:EC:F9:BA:BF:A2:A1:02:3A:CD:6A:70:B3:1E:AA
X509v3 Authority Key Identifier:
keyid:4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:c8:90:6f:44:f4:b4:7c:06:98:cd:43:55:e1:04:18:09:ab:
41:63:c3:7b:f4:b7:3f:17:83:ee:65:bf:53:79:df:03:7d:c7:
53:d5:7c:31:1b:ef:42:8a:da:43:7f:09:d8:10:d3:45:9b:d4:
2d:65:41:29:51:b2:9d:45:af:81:1f:d2:a0:ec:14:d1:51:65:
21:e6:64:54:cd:df:4c:b3:95:7a:eb:d7:c2:49:96:f8:e7:3b:
87:8a:cc:0c:a0:02:8a:2e:78:a3:8e:1f:4d:9f:ca:ac:63:54:
70:94:8e:01:1a:d5:cd:0f:34:fe:29:ad:7d:1b:28:12:db:61:
e8:8b:2e:36:0f:3f:9d:cd:6e:57:d9:59:90:6f:97:bf:79:8c:
55:05:d7:12:98:d2:58:c1:9d:7a:7c:69:e9:73:03:78:43:21:
87:c8:fa:f1:26:04:30:36:12:b3:18:4b:13:f5:7e:a6:53:ee:
21:bb:d7:75:2e:57:87:23:0d:70:01:23:af:3d:ab:a6:1a:4a:
fc:dd:ff:10:ac:35:80:46:b5:24:32:dc:0e:5f:a7:dd:a7:81:
1d:be:38:60:aa:93:e1:39:05:94:fd:33:de:e1:5c:5d:e0:51:
81:da:64:d0:05:c9:f3:77:fa:8a:3f:6b:f7:c8:9d:84:df:8b:
3a:61:f9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:33 2026 by rpki-client