
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
File: _tgXL4qVo1IC1RxvdfqUfehE9M0.mft (raw, json)
Hash identifier: 0m7cSPwGKb/jC1/7vHPUfr1I8yWwmc3lhwOzsExvM14=
Subject key identifier: 94:60:DD:3E:8B:AF:2E:35:46:27:44:6C:F7:65:4D:74:DC:C9:28:02
Authority key identifier: FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD
Certificate issuer: /CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
Certificate serial: 0193
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
Manifest number: 018A
Signing time: Fri 17 Apr 2026 04:09:32 +0000
Manifest this update: Fri 17 Apr 2026 04:09:31 +0000
Manifest next update: Fri 24 Apr 2026 04:09:31 +0000
Files and hashes: 1: _tgXL4qVo1IC1RxvdfqUfehE9M0.crl (hash: SNmbkZvf6dZm1bDLyvG+GxsKQtj/swEPIKFdAfInHrM=)
2: 994A883AE06511EEA8CEC61EC4F9AE02.roa (hash: iAJ7bJgPc3fvc0VT2Ih64KNDwG9PjNk9khGO+aQcVnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl
rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198D95, serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
Validity
Not Before: Apr 17 04:09:31 2026 GMT
Not After : Apr 24 04:09:31 2026 GMT
Subject: CN=69e1b27c-97a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:d1:d7:a2:c0:5a:af:42:7b:1e:a7:e8:39:
8b:a6:8c:33:33:85:70:88:37:b0:19:86:2e:e2:91:
8b:b3:33:16:28:cd:2b:70:7c:46:28:3b:ad:e0:ba:
4c:36:11:9a:ca:a8:73:50:f9:ce:46:88:4b:fa:f4:
5a:3c:f5:35:b1:fa:28:0a:5c:a0:ee:9b:42:39:36:
ab:8a:26:ba:46:dc:24:e6:9b:47:75:a7:08:be:8c:
27:cd:05:69:26:f8:94:55:83:12:6d:9b:ea:fc:e6:
a1:4e:41:f0:b0:49:16:f5:8a:2b:3f:15:d9:f5:25:
69:2f:28:be:63:36:28:8c:9f:d0:51:3c:22:76:21:
ee:b9:27:2c:88:79:f0:62:af:bd:bf:d5:9f:53:90:
d4:01:d4:84:ab:36:9b:09:b3:bc:aa:16:50:97:c0:
11:52:c3:72:db:ca:99:15:25:26:6f:ab:a1:b8:50:
06:d9:e9:cf:09:29:64:bb:d9:69:3b:82:cb:98:08:
9c:fb:b1:62:be:d5:8d:1d:30:09:14:2f:77:e2:a1:
cf:8d:5a:ff:70:d2:74:f8:a4:d8:6c:3e:1f:a0:1e:
87:54:d8:8f:68:61:62:60:50:69:0f:dd:b9:94:30:
43:6a:5b:80:27:ab:ea:c6:61:48:41:be:c1:00:0e:
10:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:60:DD:3E:8B:AF:2E:35:46:27:44:6C:F7:65:4D:74:DC:C9:28:02
X509v3 Authority Key Identifier:
keyid:FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:91:eb:90:cd:c3:45:31:99:a8:b9:dd:44:d5:0a:cb:89:02:
cc:59:09:b0:32:22:34:9f:b2:fe:be:15:9e:b1:aa:d8:38:3d:
b6:e0:50:32:6a:33:be:20:18:7a:fb:e7:04:c2:4d:b7:ae:a5:
5e:10:ae:08:06:0c:98:85:cb:ed:15:38:28:82:35:ad:91:cc:
45:e1:ef:10:42:97:59:2a:bd:f1:5f:02:74:b4:02:15:41:9a:
1b:14:17:17:3c:0d:3f:98:32:ec:20:e8:a6:de:7f:59:90:7b:
76:82:8d:1a:57:59:8c:8a:c9:58:0d:6b:91:c7:7a:8c:05:50:
37:e7:76:12:1d:e0:90:66:db:70:dc:0a:c4:b0:2f:9e:90:2c:
14:96:d4:07:69:84:1f:c7:3a:66:00:5b:03:77:a1:89:20:d7:
6a:c4:96:31:40:a3:b1:a6:68:53:88:44:11:e9:1e:6d:84:53:
4d:4c:2c:ac:9f:83:c5:af:25:49:d9:03:29:8c:26:61:0e:7b:
7f:1b:46:dd:cc:67:36:78:c0:bd:57:8a:73:d9:89:09:1c:65:
12:92:f1:8f:b1:26:3b:08:00:cf:19:bd:18:d1:dc:ac:73:ae:
ba:a4:1e:5a:44:d4:8b:87:04:ab:a7:12:38:51:59:e3:00:0b:
be:3c:5b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:58:31 2026 by rpki-client