
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
File: tJhXdJtDHfMjL417C4OVpy_9GEk.mft (raw, json)
Hash identifier: xDgU8+R2pcdaVHmYA28nLT3JKt8uGMD4FI0IlXbcjkI=
Subject key identifier: 5E:60:70:EF:C4:9E:E4:8C:15:E6:3B:54:00:37:A9:E9:73:A5:71:15
Authority key identifier: B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49
Certificate issuer: /CN=A918E293/serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849
Certificate serial: 01F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
Manifest number: 01F3
Signing time: Sun 01 Mar 2026 03:58:28 +0000
Manifest this update: Sun 01 Mar 2026 03:58:28 +0000
Manifest next update: Sun 08 Mar 2026 03:58:28 +0000
Files and hashes: 1: tJhXdJtDHfMjL417C4OVpy_9GEk.crl (hash: 8Nmau+ZWR4v55UazKL7RDuJjDplPb2vx9uiPuURfzX0=)
2: D865F69A233111EE813C5D26C4F9AE02.roa (hash: Lb0hJu9MZe6wLWtHrKtqcwpP08rypBWIlAZybLR4Lp0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl
rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E293, serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849
Validity
Not Before: Mar 1 03:58:28 2026 GMT
Not After : Mar 8 03:58:28 2026 GMT
Subject: CN=69a3b964-9997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:de:a5:b0:39:d2:97:50:ec:00:e4:e6:fb:95:
28:95:2c:57:89:05:06:26:01:c1:f5:dd:e3:71:69:
bd:db:dc:45:c0:24:60:cd:48:30:a2:44:d3:39:2c:
c0:9c:04:c5:d8:ad:16:22:80:fa:57:45:7a:68:2a:
b9:37:96:27:1e:1e:1b:09:75:47:b2:39:8d:ef:3f:
61:c9:b9:94:d0:3c:13:5b:50:75:19:9d:c8:40:a0:
4b:95:fb:95:bd:fb:a6:01:c6:bd:5b:1d:aa:32:1c:
f8:a1:43:3f:fd:3f:f2:4d:47:d3:2b:2f:ab:89:52:
45:50:f3:22:4e:91:d1:ea:2b:b1:c1:7c:6a:59:1f:
c7:47:8b:f8:56:12:2e:a1:06:95:85:d6:5a:b3:c4:
8c:ae:9c:35:20:20:32:16:5f:df:c1:aa:5c:e3:bb:
aa:81:19:67:19:ed:51:06:9b:01:46:85:3f:0b:1b:
58:b7:aa:dc:69:f6:4b:d9:89:fe:05:be:ab:b7:24:
7a:5f:d5:da:4c:bb:d0:13:30:8e:cc:a6:a4:ed:04:
65:84:6c:5f:65:fb:21:0c:53:15:4a:d4:03:d5:3e:
4c:19:19:87:61:f9:71:cb:cb:aa:ad:6e:36:40:fb:
be:4b:d9:9b:4b:fe:c5:bc:24:ff:1f:73:04:80:8a:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:60:70:EF:C4:9E:E4:8C:15:E6:3B:54:00:37:A9:E9:73:A5:71:15
X509v3 Authority Key Identifier:
keyid:B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ef:35:63:1b:70:3d:02:c8:e0:cd:28:bb:80:ce:9f:68:9e:
51:8c:c5:16:09:98:44:2b:03:f8:55:85:04:e9:0b:ca:58:d8:
5a:20:e2:07:77:d2:b0:7f:8c:c6:e2:8e:f5:4a:9a:f7:6c:32:
65:ff:da:2b:03:1b:18:e5:b5:64:bd:46:89:66:f0:26:98:7d:
79:f9:f6:a6:b0:92:c0:5a:d6:ba:3a:fc:d7:58:cc:04:c2:42:
29:d1:82:38:df:1b:a6:24:75:d1:a6:fd:29:75:f7:09:44:63:
99:cf:21:53:99:8d:48:aa:1c:e6:e0:c4:e7:f6:b7:94:4f:35:
a5:13:60:ae:6d:7e:1d:23:13:2c:67:09:74:72:60:fe:e0:c9:
09:e5:db:f9:e5:af:fe:7d:54:ee:6e:a8:a0:f4:86:49:4c:d9:
51:e0:fb:46:44:f9:41:2d:d0:25:73:3e:42:70:53:31:f9:33:
3f:a2:a4:2d:95:80:2d:1b:34:05:96:9f:76:49:67:db:38:05:
7d:38:82:7b:90:01:f2:72:fb:b2:07:d5:ac:80:b9:07:4e:6a:
cf:c6:d9:b9:0b:dd:eb:42:cf:33:c9:c9:37:35:1f:f3:b2:33:
fd:27:92:95:68:65:72:83:fe:b8:0f:34:45:06:db:9f:3b:de:
81:1c:25:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUyOTMxMTAvBgNVBAUTKEI0OTg1Nzc0OUI0MzFERjMyMzJGOEQ3QjBCODM5NUE3
MkZGRDE4NDkwHhcNMjYwMzAxMDM1ODI4WhcNMjYwMzA4MDM1ODI4WjAYMRYwFAYD
VQQDDA02OWEzYjk2NC05OTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzd6lsDnSl1DsAOTm+5UolSxXiQUGJgHB9d3jcWm929xFwCRgzUgwokTTOSzA
nATF2K0WIoD6V0V6aCq5N5YnHh4bCXVHsjmN7z9hybmU0DwTW1B1GZ3IQKBLlfuV
vfumAca9Wx2qMhz4oUM//T/yTUfTKy+riVJFUPMiTpHR6iuxwXxqWR/HR4v4VhIu
oQaVhdZas8SMrpw1ICAyFl/fwapc47uqgRlnGe1RBpsBRoU/CxtYt6rcafZL2Yn+
Bb6rtyR6X9XaTLvQEzCOzKak7QRlhGxfZfshDFMVStQD1T5MGRmHYflxy8uqrW42
QPu+S9mbS/7FvCT/H3MEgIpTGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF5gcO/E
nuSMFeY7VAA3qelzpXEVMB8GA1UdIwQYMBaAFLSYV3SbQx3zIy+NewuDlacv/RhJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTI5My8yODQxRDkyRTE3
REMxMUVFODg4MDRBNzFDNEY5QUUwMi90SmhYZEp0REhmTWpMNDE3QzRPVnB5XzlH
RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RKaFhkSnRESGZNakw0MTdDNE9WcHlfOUdFay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTI5My8yODQxRDkyRTE3REMxMUVFODg4MDRBNzFDNEY5QUUwMi90SmhYZEp0REhm
TWpMNDE3QzRPVnB5XzlHRWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWu81YxtwPQLI4M0ou4DOn2ieUYzFFgmYRCsD+FWFBOkLyljYWiDiB3fSsH+M
xuKO9Uqa92wyZf/aKwMbGOW1ZL1GiWbwJph9efn2prCSwFrWujr811jMBMJCKdGC
ON8bpiR10ab9KXX3CURjmc8hU5mNSKoc5uDE5/a3lE81pRNgrm1+HSMTLGcJdHJg
/uDJCeXb+eWv/n1U7m6ooPSGSUzZUeD7RkT5QS3QJXM+QnBTMfkzP6KkLZWALRs0
BZafdkln2zgFfTiCe5AB8nL7sgfVrIC5B05qz8bZuQvd60LPM8nJNzUf87Iz/SeS
lWhlcoP+uA80RQbbnzvegRwltg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:36:22 2026 by rpki-client