
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
File: tdRsD3W7vyQRKYrr0rVitaqV7Go.mft (raw, json)
Hash identifier: mH72DGYrOgl4nlcoHpgtZoGkNZTvk06BCmVj9jCnIKQ=
Subject key identifier: 9B:C5:3A:9A:32:7C:22:AE:F5:96:FB:9B:05:DC:0D:A0:D8:E0:58:23
Authority key identifier: B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A
Certificate issuer: /CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A
Certificate serial: 0B1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
Manifest number: 0B0A
Signing time: Thu 16 Apr 2026 19:16:21 +0000
Manifest this update: Thu 16 Apr 2026 19:16:20 +0000
Manifest next update: Thu 23 Apr 2026 19:16:20 +0000
Files and hashes: 1: tdRsD3W7vyQRKYrr0rVitaqV7Go.crl (hash: bY4YWGt2X8ebUU8fT77flswMXbA4+ZnKAyfWlULx8r4=)
2: 1429DACC099B11ED8A62781AC4F9AE02.roa (hash: Fanpld4VVwaoYG94GzGbb0OhM2Vk2NZntXiUdQVh2c4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl
rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2844 (0xb1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C230, serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A
Validity
Not Before: Apr 16 19:16:20 2026 GMT
Not After : Apr 23 19:16:20 2026 GMT
Subject: CN=69e13584-1307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5a:9e:bc:d1:c1:f0:7f:c0:4b:11:b6:80:15:
bf:55:f0:8a:73:31:fa:c7:58:2e:d4:d3:e8:95:f4:
7e:ca:da:e2:15:1b:2b:e6:82:f5:2b:ef:7f:dc:f6:
83:12:d9:8f:58:5f:e1:3b:97:0a:11:c2:b1:3e:fc:
9d:de:9c:a2:1c:a7:42:f3:93:5a:c4:1c:ab:02:f7:
cb:2d:a3:35:5f:00:b8:f0:59:3b:bb:46:d1:6f:22:
4a:0d:79:12:54:91:1b:72:ac:e4:ac:21:e2:9e:1b:
5a:da:14:d4:da:cf:86:a1:f5:9f:78:b7:fe:5f:3c:
6a:aa:80:40:5b:07:47:ea:43:3b:c8:75:fb:53:69:
d2:23:96:3d:16:72:03:9d:28:70:13:2a:e4:77:87:
14:54:3b:2d:b7:0b:8a:ce:86:77:bc:28:4c:f1:34:
4b:97:52:b7:48:95:88:52:71:c8:35:9b:47:0e:92:
a3:0b:d8:c9:f4:ed:9d:72:c2:d4:70:2a:30:1e:8f:
c5:4c:2d:78:cf:03:a8:28:94:51:92:c9:d9:7c:f1:
af:0e:9d:31:92:77:db:7e:59:d8:cc:ce:66:d2:bb:
d9:48:1d:5a:64:0d:3f:8b:21:48:49:ee:54:4d:be:
26:a2:e6:7b:68:20:30:e7:6d:3f:ca:c0:75:04:1a:
b0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C5:3A:9A:32:7C:22:AE:F5:96:FB:9B:05:DC:0D:A0:D8:E0:58:23
X509v3 Authority Key Identifier:
keyid:B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:4f:d7:8e:8b:00:46:4b:a6:66:51:97:6b:f0:06:d8:31:08:
37:a9:99:3a:5a:dc:53:df:16:61:ae:1e:84:bf:7e:97:ad:cd:
93:70:d7:13:76:b7:72:2b:8d:3e:39:c4:e9:8b:bd:15:be:a7:
7f:26:15:41:cd:d9:8c:6a:69:c2:27:30:ac:43:39:89:ff:ff:
4b:32:5f:cb:9b:d3:08:66:fd:5c:d5:9c:ff:5f:0f:d0:84:fd:
43:cc:65:2d:1e:d0:ab:a9:b8:f3:74:76:36:54:c6:bc:dc:e3:
14:13:bb:ae:d5:a7:ad:32:73:b0:40:bf:d5:ef:ff:cd:3e:c1:
2d:1f:c9:13:65:94:78:62:df:1e:45:93:de:f9:c4:a3:02:60:
ba:3b:2a:d0:61:bf:21:2a:7e:01:73:43:97:ca:82:fe:99:c4:
c0:d6:7e:f2:5e:33:51:8e:86:cf:27:2e:f5:67:e9:53:9d:15:
f7:c3:1d:00:a5:17:bf:6b:54:25:16:a7:d4:0a:b4:bc:65:57:
c8:dc:62:dd:7e:e8:01:8c:6b:1d:13:78:72:09:69:88:be:80:
bc:5e:25:76:d9:93:d0:c2:b6:67:8c:d5:e3:14:5c:be:4b:66:
e9:bd:21:2c:65:99:eb:61:cd:71:39:5c:70:03:39:0e:36:08:
39:ce:52:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:57 2026 by rpki-client