
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
File: tPJi-ZhX4SDMnLxL_BftVKur4rs.mft (raw, json)
Hash identifier: ui7dWwchy7NW7oVBl9i7sFVFgF08opeumuX4m8+9/js=
Subject key identifier: C1:EC:34:F5:03:C7:CC:E9:2B:A2:4D:CC:9C:B1:65:92:C3:A2:9E:98
Authority key identifier: B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB
Certificate issuer: /CN=A91D2ADD/serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB
Certificate serial: 03AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
Manifest number: 03A2
Signing time: Sun 01 Mar 2026 01:35:04 +0000
Manifest this update: Sun 01 Mar 2026 01:35:04 +0000
Manifest next update: Sun 08 Mar 2026 01:35:04 +0000
Files and hashes: 1: tPJi-ZhX4SDMnLxL_BftVKur4rs.crl (hash: zH3ek/MIUQx0A3StZkXkFCBYdqoyNVUAX8fuyAAy4V0=)
2: 3DBB9F0C97EC11EE95979D63C4F9AE02.roa (hash: IR9NDV3s6nVBqEN4pn9ElTet8vYTjGUIWmOXsyvq9Aw=)
3: 950791DAD0D811EC8DF4377FC4F9AE02.roa (hash: zdS6UJyOMrd7sf5VOERZBIPIuQqnE9ZtKbgVQwDnTWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl
rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940 (0x3ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2ADD, serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB
Validity
Not Before: Mar 1 01:35:04 2026 GMT
Not After : Mar 8 01:35:04 2026 GMT
Subject: CN=69a397c8-ecdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:d3:c2:76:e8:b8:df:ab:0f:22:75:30:f9:
d7:43:c1:4f:29:2f:0b:1b:bf:e9:1e:15:7b:a8:8c:
5b:97:a9:39:15:7a:21:76:81:77:19:8f:55:33:79:
dc:82:fa:8e:8c:ec:10:c5:5b:ea:3d:7d:9b:35:42:
df:e4:fa:50:29:3e:a7:dc:c3:9b:a0:81:52:5f:d6:
1b:56:fa:42:b3:9f:cb:41:1e:86:e5:c4:ef:fb:17:
4a:8c:5e:90:64:1f:20:d6:a7:54:d3:1e:2e:5f:9c:
a8:1d:14:6e:22:31:c0:17:ef:58:4d:81:2d:e2:be:
90:2b:00:2d:a0:59:0a:40:ea:e9:59:89:af:14:c6:
3f:9d:d6:23:96:44:9d:b9:c1:ba:d4:55:8f:e2:1e:
19:97:d3:d5:6b:77:9b:4b:47:e9:64:84:68:a6:c3:
22:b7:4b:15:e0:73:f6:10:be:59:d9:93:e8:67:31:
5d:3f:24:28:57:fc:d1:71:01:f0:d3:fd:b2:6c:2a:
42:d7:49:ba:02:89:9b:fd:fe:f6:09:ea:93:b2:57:
d4:13:d2:65:74:bb:2c:42:dc:76:7e:f7:3b:e6:2e:
ad:c0:15:86:08:43:81:7b:ce:4e:c0:1c:93:84:30:
5f:6b:1b:f4:ee:6e:e5:73:fb:d7:ff:0b:9c:ad:ab:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EC:34:F5:03:C7:CC:E9:2B:A2:4D:CC:9C:B1:65:92:C3:A2:9E:98
X509v3 Authority Key Identifier:
keyid:B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:13:e4:5a:53:b5:f1:e8:a9:50:c0:e1:34:15:11:be:65:1f:
3b:36:9b:48:32:e0:32:f1:4a:5d:fb:38:2d:1c:cc:5b:72:8e:
5c:fd:0e:11:99:33:64:99:cc:51:c2:31:8d:86:82:47:0a:1e:
0d:57:aa:02:0f:be:c3:5f:5d:86:15:7d:df:c6:70:6b:82:d9:
7e:f8:a9:e9:c2:b6:ec:8c:14:37:a6:9c:4e:52:aa:a8:18:35:
61:a2:ff:ba:8a:5e:06:8f:2e:a1:06:2f:1f:ab:60:b5:00:04:
06:9a:24:4a:fd:3b:e6:d2:cb:82:99:b1:29:f7:91:c2:3e:33:
f1:e9:41:73:44:62:f6:1e:13:3b:1e:2d:ac:bc:a8:54:65:0e:
7c:02:7c:3c:a8:1a:c2:e9:59:ce:93:aa:47:87:d1:d9:8f:c8:
bf:97:25:7f:4e:a6:2a:56:2f:0e:91:de:9f:ab:ca:49:cc:ac:
f8:6d:5e:b0:54:2c:84:0e:ca:66:96:d0:1b:59:66:d0:a2:e8:
7e:1b:c6:92:10:15:85:d5:a6:bd:ba:9c:21:f1:3b:8e:d6:3a:
32:59:47:d2:dd:af:c2:f5:58:34:35:97:1f:d3:0f:82:32:68:
2a:51:f5:c8:a7:21:77:6d:ee:67:c0:30:7c:45:0c:30:bf:0f:
a6:9f:31:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:17 2026 by rpki-client