
$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
File: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json)
Hash identifier: FdYIN5PP/oz6EbP6aDYdR82i9yKkNMNkzPPjGjRfgUQ=
Subject key identifier: CE:1F:D2:BD:38:D3:02:2F:E0:34:0D:C1:C3:5E:21:4E:B0:9E:9D:12
Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9
Certificate issuer: /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9
Certificate serial: 08A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
Manifest number: 0896
Signing time: Sat 04 Apr 2026 20:20:46 +0000
Manifest this update: Sat 04 Apr 2026 20:20:46 +0000
Manifest next update: Sat 11 Apr 2026 20:20:46 +0000
Files and hashes: 1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: VmSBEFTAKDjedXk9KYCCTT05zY+VEqWbzUvLHJWijAA=)
2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: updD38wtAdj5dijUmVbc8ur6Q26JQGPvJNSN6xjVgUc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl
rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2208 (0x8a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911155C, serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9
Validity
Not Before: Apr 4 20:20:46 2026 GMT
Not After : Apr 11 20:20:46 2026 GMT
Subject: CN=69d1729e-ffc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:4b:08:df:2f:03:65:b4:7d:d1:1f:a6:53:
04:0a:7a:12:2d:64:cc:a7:a4:8d:84:cd:de:23:00:
27:f1:4a:c3:0b:84:01:ef:57:31:99:de:67:15:7e:
64:3b:5d:e7:61:05:ce:e4:c6:44:fa:06:65:a2:0f:
c3:76:f1:e2:66:13:d8:15:a7:6a:87:a3:8a:7e:34:
83:7d:2d:d7:5d:89:27:a0:42:5a:30:96:fd:a5:b8:
e6:71:9a:ac:a1:da:0f:42:c3:99:3f:87:0d:d4:8a:
cd:e0:a4:b2:9e:c5:0b:3d:1c:34:01:62:89:b5:17:
b6:7d:3d:db:ef:2f:4f:82:ab:db:11:87:17:f0:be:
47:ce:c9:42:01:e9:a6:85:e0:1d:2e:ee:2b:d6:b3:
4e:55:6e:8c:42:d7:a7:c4:d2:fe:51:29:73:78:62:
ae:0c:98:86:44:dd:16:9b:ba:ba:d2:22:eb:d8:30:
5e:24:2a:4c:04:df:ac:7c:59:48:ff:cb:0c:7e:d3:
72:74:0b:12:b1:df:af:79:97:9c:3c:a8:69:57:0c:
7f:fb:39:6c:e0:1e:b8:57:db:0a:c0:ec:e6:1b:11:
99:76:61:5c:de:00:cf:e2:bd:e2:ce:cf:2b:24:e2:
b9:53:70:02:14:8a:f1:ea:34:9a:bc:1c:c2:0f:aa:
f9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1F:D2:BD:38:D3:02:2F:E0:34:0D:C1:C3:5E:21:4E:B0:9E:9D:12
X509v3 Authority Key Identifier:
keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:6b:c0:0e:33:2b:42:96:46:8c:e4:f4:c4:01:05:57:76:e7:
83:49:ed:04:82:d1:99:d0:53:9f:75:7c:78:6c:16:f2:8b:e7:
c7:18:7d:93:07:f0:14:56:13:16:9b:33:c9:c9:1d:6e:0b:15:
44:31:bc:b2:8d:a6:d6:5d:6c:ec:b1:60:7d:11:23:8f:40:5d:
46:8e:55:8f:c1:b7:51:7f:47:f7:52:f1:99:2a:3f:94:e7:df:
48:59:14:49:d7:85:50:05:ac:1b:db:ed:6d:5b:f6:29:42:39:
74:a4:8a:db:a7:28:ea:1a:8e:ae:d0:d9:6a:e8:8c:4a:46:88:
87:7b:d7:97:96:e3:9f:ff:72:61:fa:5d:9f:00:39:df:20:48:
be:47:18:b7:34:e2:8f:71:a2:d6:fa:15:7c:78:56:25:5b:79:
e1:c4:18:e3:7a:d2:78:56:19:11:f3:2c:83:ef:e9:77:1a:d0:
37:30:28:22:a1:f4:eb:25:a6:a5:87:a4:b7:6b:1f:47:a4:e7:
bd:92:10:46:28:f4:72:29:45:81:4e:d2:97:a8:4b:7a:4b:11:
ce:44:9b:93:f3:60:09:11:6e:64:5d:20:8d:16:7b:a0:8a:d2:
7b:18:ac:4d:fd:6a:3c:0e:aa:1c:38:98:73:13:14:b4:e6:09:
c3:f2:3c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:42 2026 by rpki-client