
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft
File: tYgfusqd6_Rspghj0pd8U_3WwZA.mft (raw, json)
Hash identifier: YsT5K6tLm8PUb3ZUXiP+Ku3Qzp6o5B/fPLXQXNhm92U=
Subject key identifier: 23:82:5F:46:8B:CB:39:6E:DA:A6:95:FC:62:E5:C0:2F:D4:96:52:89
Authority key identifier: B5:88:1F:BA:CA:9D:EB:F4:6C:A6:08:63:D2:97:7C:53:FD:D6:C1:90
Certificate issuer: /CN=A9188D2D/serialNumber=B5881FBACA9DEBF46CA60863D2977C53FDD6C190
Certificate serial: 0269
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft
Manifest number: 0262
Signing time: Fri 17 Apr 2026 01:54:14 +0000
Manifest this update: Fri 17 Apr 2026 01:54:14 +0000
Manifest next update: Fri 24 Apr 2026 01:54:14 +0000
Files and hashes: 1: tYgfusqd6_Rspghj0pd8U_3WwZA.crl (hash: fW2q4zlIP1czOQkShKu2TAqbQQi7XEFjeUMZZcEXaw4=)
2: D9D943568FFC11ED9776CB38C4F9AE02.roa (hash: rS73wDlRVwn5DJgE8WmW3uKXkEx8a9vepjddqT6ugZ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.crl
rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188D2D, serialNumber=B5881FBACA9DEBF46CA60863D2977C53FDD6C190
Validity
Not Before: Apr 17 01:54:14 2026 GMT
Not After : Apr 24 01:54:14 2026 GMT
Subject: CN=69e192c6-480e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ce:f6:72:94:38:7a:cc:7d:13:92:89:01:94:
f5:7c:0a:80:e5:87:42:20:36:e1:0a:49:06:0d:c0:
0a:0b:38:2a:b7:3f:b4:32:2b:5f:d1:81:7c:c6:5f:
fd:1f:f4:da:1d:74:7a:29:a2:58:99:e8:42:16:c1:
45:b6:57:e2:e3:d4:fd:ed:43:cb:43:6e:a3:89:d1:
be:f6:a2:60:ef:73:45:48:19:ec:cf:06:82:80:9b:
12:b0:37:bd:5a:22:16:34:6e:94:ba:56:b2:d5:e1:
50:77:9d:29:33:bc:a5:1e:5d:b5:e2:68:c6:ac:30:
86:8c:97:07:3f:aa:5b:89:13:8a:b2:6c:e7:dd:1e:
7c:5f:f4:8b:57:b3:f6:eb:86:74:8a:10:b2:ad:21:
6c:d1:eb:01:0a:33:a1:09:a7:31:0c:18:1d:77:90:
3b:05:38:1c:96:50:de:51:5f:27:a6:16:0e:e9:d3:
2d:b5:b8:71:4a:d0:4d:f8:05:70:ab:f8:81:c9:8b:
8b:7e:3e:dc:14:7f:3b:40:89:85:1a:e2:a4:d5:c5:
14:3b:e8:fa:a7:0e:31:cc:68:93:32:27:8e:28:f0:
6d:71:2f:73:aa:00:b9:1a:26:f2:a9:f3:8d:13:a0:
4d:04:d9:62:1d:a8:50:f5:e7:b5:b1:75:14:f6:77:
d0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:82:5F:46:8B:CB:39:6E:DA:A6:95:FC:62:E5:C0:2F:D4:96:52:89
X509v3 Authority Key Identifier:
keyid:B5:88:1F:BA:CA:9D:EB:F4:6C:A6:08:63:D2:97:7C:53:FD:D6:C1:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:b8:78:e0:52:04:4a:be:06:04:31:69:59:37:50:43:06:06:
6f:73:50:cd:2a:38:1d:b8:fa:e1:e1:e4:77:a3:0c:7c:c9:54:
0d:f4:e7:3d:c2:82:0d:9d:ac:cc:d8:3f:a9:bf:8a:18:dc:6a:
2a:0b:27:6f:dd:b1:7c:3c:62:df:cb:93:8f:09:0b:71:b3:47:
9c:08:82:65:c3:9b:ae:a4:10:39:7f:54:c8:39:49:02:0f:83:
76:86:56:01:94:50:2f:bf:ee:d4:08:78:94:7d:d4:98:fe:5f:
3e:9a:19:55:87:07:6a:93:c3:77:d4:c3:fe:60:c5:59:7e:0e:
e7:29:6a:31:00:65:23:fe:62:a1:7e:ad:1b:f2:a7:8f:4b:77:
c1:1c:cb:74:85:3b:4e:52:83:b8:d0:b1:c3:2f:b3:e3:ed:29:
9d:9a:a2:87:20:37:af:76:12:f6:91:70:3f:cd:24:34:32:6e:
1d:10:fb:35:d6:ae:99:cf:15:1d:45:c1:b6:e8:7a:fe:d3:2a:
c6:c0:01:d9:5a:9c:0f:3d:2e:99:0e:e3:6d:68:fa:45:4c:ff:
c9:64:24:1b:e7:5e:f8:0f:49:48:3d:53:91:93:f5:42:43:d0:
90:4c:7c:30:44:a4:35:43:cc:85:ff:82:d4:64:39:d9:2e:e9:
7f:e2:9a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:52:45 2026 by rpki-client