
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json)
Hash identifier: Pwl1Rhvubgl7/PU8xrlC7lWJGzBwZO2r+PzDPJM1IyQ=
Subject key identifier: B4:A0:D7:61:4E:98:26:7F:CB:AF:AF:FA:71:6D:6C:10:CD:6A:6F:B8
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial: 04E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
Manifest number: 04AB
Signing time: Sun 01 Mar 2026 23:27:48 +0000
Manifest this update: Sun 01 Mar 2026 23:27:46 +0000
Manifest next update: Sun 08 Mar 2026 23:27:46 +0000
Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: RoaoLQhtCAY8N4aah73ctIyWh8W6n7T9CrxPO+PB4JU=)
2: C3CDE52C01D611F1B315EDD8366F56BC.roa (hash: 3d/B1cImc/RFP7X2DoDqV9LtQ79OxGVpr8nJEv4LRf4=)
3: 98CF37B28F0E11F0880D4780C4F9AE02.roa (hash: uKQ3Os5h8Ciy1ALccS2eT5zdXu6OgoHV6FkwnLjZ7Y0=)
4: A6E8B05401D611F1A42696D7366F56BC.roa (hash: YEAiHBQjv0Zqw7hAyBqvx7s0VzUV/cItMf0F3kX5g2g=)
5: E9616980121B11F19EC23EC11C3D8C67.roa (hash: KFfs3jutC9rYjrXOHZ8eYzPy4meG6duo+32x4C1iZzc=)
6: 942DCEF2FC0B11F0BEECCDA4756F56BC.roa (hash: J5KApiO82LjzqeOhyJKbcpqwAb46zG+PlR5LTK867CE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1250 (0x4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Validity
Not Before: Mar 1 23:27:46 2026 GMT
Not After : Mar 8 23:27:46 2026 GMT
Subject: CN=69a4cb74-2ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:37:81:12:01:52:fe:b2:5f:10:e7:28:1e:
ea:6b:a0:93:1b:d6:45:a3:85:af:72:bd:a5:c8:4d:
c9:75:5b:3e:83:e7:ca:63:c8:ed:bd:c0:ea:55:19:
74:db:67:fe:df:2c:80:78:72:7c:0b:c2:25:3d:9d:
b3:6d:2c:be:16:7b:e5:61:57:6d:0c:b0:3d:a8:a9:
7d:60:9f:c9:16:92:69:62:fe:ae:40:48:b5:a5:a0:
6c:99:30:b4:33:1f:4a:8b:27:48:7f:ee:dd:0c:14:
de:bc:74:58:a9:d0:79:fc:2f:93:70:d8:db:b8:19:
3f:b7:8f:51:3b:f7:0c:6b:27:8e:a8:bf:5c:cd:fc:
54:9d:58:1e:b0:e1:9c:19:fe:fb:4c:f3:0b:95:24:
af:9e:4f:81:69:c7:46:19:af:f5:22:24:9a:40:04:
7e:46:ce:bc:68:9b:9c:0d:e4:4f:96:f1:75:b0:9d:
5b:4c:4f:08:63:5c:71:72:83:aa:48:07:1f:5b:cf:
03:7b:f1:3a:e9:e6:7d:fa:f0:bf:21:da:25:cf:c3:
a9:dd:ca:15:71:d8:e1:6f:42:6f:99:00:4f:72:7b:
8b:c6:50:24:5a:5c:2e:b0:37:b9:29:0e:f6:59:70:
ae:ac:e7:20:8a:eb:5d:98:ba:db:89:c1:c5:bc:ef:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A0:D7:61:4E:98:26:7F:CB:AF:AF:FA:71:6D:6C:10:CD:6A:6F:B8
X509v3 Authority Key Identifier:
keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c1:bf:86:00:84:f7:71:9b:c2:15:4e:03:15:0c:f8:b5:4a:
b1:5a:1a:1e:c3:00:a6:06:5e:1a:1a:24:2c:f0:aa:2f:54:99:
2b:97:e2:1e:4e:a4:96:c7:0b:0f:2d:7a:16:16:a2:86:5c:7a:
03:3a:0a:8c:03:18:a9:a5:c7:6a:5e:d3:87:81:ab:ae:7a:6d:
30:54:7b:a5:7d:10:c9:e0:b3:55:ad:a7:ec:80:85:cc:4c:0f:
f8:09:83:82:79:e8:94:9a:de:ec:b7:7c:c7:11:1b:23:e4:31:
fd:ad:0a:b2:a0:c4:1c:e1:18:ff:27:c0:4f:ae:10:a6:ee:8a:
dd:c2:35:34:5c:aa:99:92:b0:ae:a3:9c:b4:66:4d:4f:75:e6:
66:cb:e2:37:6e:45:a3:a1:86:9f:84:5c:bb:ca:e6:98:c9:da:
bb:22:b6:2f:c2:db:41:79:00:f1:cb:44:d5:9f:33:89:2e:0b:
3d:60:5e:1d:0a:d3:a5:a8:54:89:ab:64:3f:a1:a2:be:a1:10:
e9:10:d0:bc:70:11:06:a6:58:3a:51:2f:7a:87:9b:2e:c7:3e:
3e:58:e5:fa:3c:88:c3:0d:7f:b2:62:36:8d:55:d3:ce:32:34:
d9:d8:93:98:4d:d9:62:74:d5:64:92:a1:fd:dd:d8:5e:ae:cf:
ab:4f:53:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:55 2026 by rpki-client