
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft
File: tkKboemiWuSuEg8IEuf8LjYjLS8.mft (raw, json)
Hash identifier: 56qVKkmsJHElEnaKpbsV84tpeALOChDfdwsQkKhhkIU=
Subject key identifier: E4:0C:B8:1F:FB:87:11:99:12:7F:AB:B2:FA:5E:4F:73:2B:ED:1D:2B
Authority key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F
Certificate issuer: /CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F
Certificate serial: 0AA5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft
Manifest number: 0A9D
Signing time: Sat 28 Feb 2026 19:45:31 +0000
Manifest this update: Sat 28 Feb 2026 19:45:31 +0000
Manifest next update: Sat 07 Mar 2026 19:45:31 +0000
Files and hashes: 1: tkKboemiWuSuEg8IEuf8LjYjLS8.crl (hash: c2SIzpdCm6CZm+vYF3hKVEb0v1b4EVLIdSqtFnFo3r4=)
2: F6179D9E736011EA9EDED344C4F9AE02.roa (hash: ojzFvMsiRonOZ+xCsta/hhoUMpbqKKfUmVfepQYjpIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl
rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2725 (0xaa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194156, serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F
Validity
Not Before: Feb 28 19:45:31 2026 GMT
Not After : Mar 7 19:45:31 2026 GMT
Subject: CN=69a345db-7f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:d9:e2:eb:ee:10:5f:b0:ac:c9:51:c5:c8:
82:ff:22:56:e2:b7:2a:ea:a6:22:dc:ca:f9:d6:5b:
e6:2a:1a:cd:d9:e1:00:11:a6:c1:02:f8:f4:e1:b2:
e7:53:4a:cb:bc:0f:ff:96:6b:dc:4b:01:4e:52:d6:
c4:0b:77:d5:56:7e:e4:81:e1:13:93:e4:50:28:29:
f7:37:83:4a:21:f4:b8:23:71:b3:df:2f:69:5e:dd:
63:fd:59:a1:fb:8f:21:1b:ba:10:6a:08:91:84:40:
44:ec:33:fa:52:57:e1:72:8e:53:81:a1:0d:ba:88:
9d:6e:06:d2:4e:50:36:16:81:88:61:9d:3d:73:d2:
43:a0:9d:ae:2e:20:ed:6b:05:e5:c1:2b:e0:93:6e:
54:6e:42:d6:11:07:b4:7e:6f:a2:5b:bc:f5:0f:bb:
39:63:32:9f:04:92:83:fb:f7:05:01:31:e7:d3:22:
36:61:30:c2:97:ba:9b:91:bf:e3:2b:66:0e:eb:f0:
f3:4e:e1:34:f1:16:50:45:af:3e:c9:7f:5e:5d:ec:
6e:72:05:c2:f2:2c:14:cd:c0:5e:68:f3:fb:56:77:
6b:fe:e8:18:58:a6:2b:d1:96:4e:ab:3a:9f:08:1b:
85:a1:aa:6a:0e:3d:11:25:86:84:27:23:4a:64:ad:
25:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0C:B8:1F:FB:87:11:99:12:7F:AB:B2:FA:5E:4F:73:2B:ED:1D:2B
X509v3 Authority Key Identifier:
keyid:B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a9:b9:5e:d5:a7:23:6d:c8:a6:be:28:c7:d4:44:52:ed:02:
e1:e3:5b:7f:5e:7c:b7:f3:db:0c:da:c2:8f:de:16:26:2c:7f:
e3:25:85:f8:26:f8:f6:33:2f:81:4d:91:cb:9e:76:43:d8:9f:
0f:b0:da:82:c2:cb:ce:3d:37:2f:1e:64:b9:54:20:94:ab:0e:
41:59:ef:84:6c:a1:92:e0:4b:b5:56:f0:0f:32:71:0b:89:98:
aa:30:42:56:53:5c:10:09:5f:8c:79:d9:a9:64:d9:dc:2c:eb:
55:2e:ac:f2:f3:14:40:2f:87:81:08:e6:be:fc:ee:e4:5d:27:
ae:af:86:2a:40:b7:38:c0:62:a6:4b:04:49:be:82:69:01:b4:
eb:13:2c:57:7f:6d:04:45:7c:ea:06:54:9c:b8:77:9c:6f:24:
fb:aa:1e:4c:94:09:6c:f1:28:29:bc:b1:89:d6:6a:cc:c0:d0:
7b:9c:a5:8d:3c:17:63:41:77:b6:43:4e:f3:06:55:04:f6:cd:
9e:fb:aa:95:21:db:84:27:7a:fe:e3:e8:8f:c0:cf:ef:59:44:
b2:a6:32:46:db:40:ba:ca:09:04:79:c9:11:6f:c4:8a:9c:f7:
f3:a5:a6:af:7f:7f:07:91:51:da:be:ba:93:f5:f1:d4:ae:24:
09:ee:a3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:15 2026 by rpki-client