
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
File: TiWbqHpAtm2EKsjOCup4TkvXOC4.mft (raw, json)
Hash identifier: b0kAVDghRJyPrRhtXui6hE62Tq2UPl+Mr643D3im+Zw=
Subject key identifier: 7D:A8:78:2D:A7:3D:66:FC:A5:9B:6F:F3:A2:00:AA:DF:74:83:73:A8
Authority key identifier: 4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E
Certificate issuer: /CN=A91E57A9/serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
Certificate serial: 014A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
Manifest number: 0147
Signing time: Sun 01 Mar 2026 06:12:50 +0000
Manifest this update: Sun 01 Mar 2026 06:12:50 +0000
Manifest next update: Sun 08 Mar 2026 06:12:50 +0000
Files and hashes: 1: TiWbqHpAtm2EKsjOCup4TkvXOC4.crl (hash: e8hUMdkKXcozoxZ2A40t7tqvUJQyi6K2YI8tsCtIaTE=)
2: 4647BCD66E7F11EF9223EA62C4F9AE02.roa (hash: ktZfaMlA6IUEVI7ymclMb6B8SOgTxjLIP6VRKiXLA/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl
rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:12:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57A9, serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
Validity
Not Before: Mar 1 06:12:50 2026 GMT
Not After : Mar 8 06:12:50 2026 GMT
Subject: CN=69a3d8e2-e0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:eb:c2:5a:c7:42:f1:e9:8c:9f:72:d1:ac:
c0:4b:8a:59:01:14:a0:55:09:3d:e9:dc:cb:e2:a5:
47:28:2b:08:7b:7b:3a:0c:fc:14:bf:2a:50:9b:a0:
0f:39:bc:cc:63:d4:de:4d:8a:78:89:27:8f:09:37:
84:65:80:25:1e:c7:f0:41:83:3a:e0:d9:45:31:0e:
11:19:49:a9:03:1c:33:68:a5:96:47:e8:f1:71:eb:
a0:c9:32:04:70:8f:72:bb:a5:80:4e:c1:d6:2b:23:
90:82:af:e2:f4:4e:9a:c5:41:aa:f0:6d:f6:d1:dd:
95:cb:8b:6c:6d:a1:fd:c9:26:87:1f:25:d7:1b:a9:
c6:ca:87:bb:df:56:68:43:b5:72:74:54:63:a1:72:
d2:42:b1:6f:e7:65:74:3e:cc:85:55:38:38:ee:a5:
75:a0:46:f2:d1:88:4b:b7:d0:06:88:8c:0f:05:1d:
96:30:4f:5a:ca:67:99:e2:2c:e8:ae:18:0e:3d:32:
c9:e3:88:fb:b2:89:85:34:c0:5f:37:ae:e5:6a:fc:
a0:88:ae:3a:59:bf:e6:62:89:b5:1e:d3:e9:d5:af:
8d:5e:60:6a:d1:ec:05:40:fe:9b:f1:ee:4e:05:7b:
43:cc:c5:62:e8:47:df:ce:b4:2f:96:00:a0:ce:1a:
a6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A8:78:2D:A7:3D:66:FC:A5:9B:6F:F3:A2:00:AA:DF:74:83:73:A8
X509v3 Authority Key Identifier:
keyid:4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:b1:de:45:d8:d8:37:cc:5c:97:1a:ef:ad:bc:4e:a5:60:8e:
71:be:0e:c8:1a:34:ca:a5:ba:18:a0:a4:4e:df:17:de:e3:5c:
cb:6b:66:7d:25:b7:cc:3d:f3:c6:dd:3f:bd:0a:6a:b0:fa:3b:
61:64:b7:cf:33:da:9a:03:c7:f7:eb:74:71:2a:25:93:7f:bd:
3a:5e:44:82:f1:d2:0d:13:1e:e1:95:f5:bd:06:51:3a:f0:fd:
53:b5:de:0c:b4:5d:18:1e:27:35:38:2b:d4:6a:ac:eb:9a:3b:
e7:24:10:c8:d4:01:d2:ce:24:e8:1d:da:d7:ff:42:97:1e:97:
d3:16:d9:93:03:18:53:9d:9e:f8:20:65:6e:1f:89:17:f6:ce:
4a:0d:51:42:3b:54:f8:13:8d:ec:28:45:81:7e:01:f7:50:91:
de:c5:2f:98:c6:dc:c0:d2:56:c4:61:d1:bf:db:9e:96:62:a1:
d8:81:9e:d0:f7:ec:4d:a5:bd:09:7e:f1:70:f1:0e:0f:e5:24:
2b:8f:08:89:44:e1:54:5e:41:5b:d6:c4:a5:24:44:f1:eb:94:
45:da:39:fa:5c:15:c0:b1:61:96:67:f6:78:05:3a:bc:70:74:
7d:64:ac:3f:2b:ec:cd:83:51:3e:7c:c8:d6:2f:08:fd:36:c8:
c8:49:c1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:20 2026 by rpki-client