
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
File: tsp04BddZ-Guvoa_44xciY8mK4w.mft (raw, json)
Hash identifier: W4u8TOUeavPgucL9xarx1F6fLtaCtymDNhwPbm8s0S4=
Subject key identifier: 69:41:BA:F3:C2:E0:BF:A9:E3:F1:F0:26:D4:59:87:16:67:4C:C3:CD
Authority key identifier: B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
Certificate issuer: /CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
Certificate serial: 0284
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
Manifest number: 0270
Signing time: Fri 17 Apr 2026 01:49:01 +0000
Manifest this update: Fri 17 Apr 2026 01:49:00 +0000
Manifest next update: Fri 24 Apr 2026 01:49:00 +0000
Files and hashes: 1: tsp04BddZ-Guvoa_44xciY8mK4w.crl (hash: MboIBODT9i7tSnoG/9hfZxtCtzOFlUnUtqhl3AaKLME=)
2: 158B72F480FB11ED9B35954DC4F9AE02.roa (hash: vCFJH0y2zLT6RtNl1fKrvOFGF6otZx/dSySN5y76muE=)
3: 1627927480FB11ED9B35954DC4F9AE02.roa (hash: JGThLscl6gYWty7onPVj55tcNOzgZj9wzjYyxf+XyoM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl
rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 644 (0x284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EA40, serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
Validity
Not Before: Apr 17 01:49:00 2026 GMT
Not After : Apr 24 01:49:00 2026 GMT
Subject: CN=69e1918d-0c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e8:e8:e6:73:d1:ca:d6:33:7a:6e:57:f2:11:
52:a7:b6:9e:f7:4f:a8:69:75:97:f9:5a:96:0c:65:
3d:92:8f:0d:a0:bb:bc:22:c3:64:45:d5:01:66:f1:
3a:7b:e9:1a:5a:4e:ae:18:1f:7f:4f:b0:39:c7:29:
90:5e:94:c4:d9:7b:89:50:50:ff:88:b0:6f:0c:2f:
ab:c4:29:d7:7d:5a:8d:d5:c4:83:5c:67:2d:0d:ef:
bf:b2:e1:d1:4e:22:80:a2:cd:cc:03:00:17:c8:46:
b2:3f:2e:35:eb:c3:9e:f7:f6:f2:ce:d3:2a:53:90:
0e:ba:6c:46:56:36:c4:e4:7b:4c:3f:ee:6e:53:9e:
7a:49:30:9b:b2:bd:18:0b:ab:51:b8:a6:a9:66:58:
29:cb:18:b9:5f:da:de:46:bf:2a:9f:14:1d:61:a7:
89:d2:99:1d:a9:56:66:78:55:e5:c0:90:8c:2c:16:
84:68:85:17:42:fd:ab:48:5b:ef:82:d4:e7:1f:77:
dc:6c:bc:bc:0b:f5:a7:ea:46:5c:2e:22:84:02:5b:
0f:fb:ca:fd:a0:44:da:29:2a:be:e3:e3:98:d2:d5:
cc:df:dc:f3:77:de:c5:55:2e:54:23:94:35:fe:c6:
0e:72:26:d7:59:77:3c:7d:ba:54:63:8c:f7:4e:bc:
e1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:41:BA:F3:C2:E0:BF:A9:E3:F1:F0:26:D4:59:87:16:67:4C:C3:CD
X509v3 Authority Key Identifier:
keyid:B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:4f:ed:c4:2a:91:13:0f:f6:86:15:d5:1b:04:1f:cd:c8:0d:
ab:a5:b5:b3:ad:4b:89:de:79:c7:a8:7e:d9:46:69:e6:4c:0f:
b1:52:95:44:8c:16:0f:95:4c:47:0a:bf:cf:aa:01:a8:d5:db:
95:95:65:79:0f:87:0b:e9:c4:4c:04:f8:f1:26:8e:d0:7a:72:
b8:49:42:ac:c4:ec:0a:26:80:31:51:10:8e:14:26:61:bd:84:
df:1c:8a:7f:11:6c:7d:5f:55:e9:ef:df:0d:15:1b:fb:0b:d9:
e0:1c:5f:56:b2:15:d7:d9:64:32:6f:ca:5c:6f:96:d9:20:fe:
b9:65:fd:07:42:43:62:59:3e:a2:5f:59:ef:15:0a:4e:68:d5:
fd:85:92:81:b6:7d:01:64:9b:c6:39:20:fe:06:36:58:52:fd:
73:81:30:2d:4b:90:c0:62:7f:fc:64:cc:af:df:11:80:07:cc:
c5:5a:50:71:c7:49:c0:52:76:8a:73:d1:e9:01:2f:b1:d9:ee:
b8:87:f6:1f:bd:00:f7:4a:ca:c6:7e:c8:7e:44:22:3b:70:ed:
4d:42:14:8d:c8:b4:3f:57:7b:94:89:cc:c0:02:02:28:68:ff:
08:98:fb:8e:59:73:cf:fc:ae:13:16:3d:52:2d:04:63:5b:63:
99:0f:b3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:32:06 2026 by rpki-client