
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft
File: tw3qbHe56OzOWDkTKBnvkTc_xSc.mft (raw, json)
Hash identifier: 7YAtsH1s56miFt4rz1JrXPzkfx5xaevKEgPCNj6OSsw=
Subject key identifier: 8C:BE:4F:DD:63:BD:9A:55:DD:04:C8:37:C7:3E:39:F7:C0:13:96:60
Authority key identifier: B7:0D:EA:6C:77:B9:E8:EC:CE:58:39:13:28:19:EF:91:37:3F:C5:27
Certificate issuer: /CN=A914E2B2/serialNumber=B70DEA6C77B9E8ECCE5839132819EF91373FC527
Certificate serial: 016E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft
Manifest number: 0169
Signing time: Sun 05 Apr 2026 04:17:23 +0000
Manifest this update: Sun 05 Apr 2026 04:17:22 +0000
Manifest next update: Sun 12 Apr 2026 04:17:22 +0000
Files and hashes: 1: tw3qbHe56OzOWDkTKBnvkTc_xSc.crl (hash: m8SWkBPSplRECQEa6Fp63kELnG7EpVypI8Y3RfclmFg=)
2: D6AEA2D20DE311EFA1E24F25C4F9AE02.roa (hash: SjviPWHP1DeQCRL5zA27ZA6ZX61NzlG+Six3xPkugE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.crl
rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366 (0x16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E2B2, serialNumber=B70DEA6C77B9E8ECCE5839132819EF91373FC527
Validity
Not Before: Apr 5 04:17:22 2026 GMT
Not After : Apr 12 04:17:22 2026 GMT
Subject: CN=69d1e253-19d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:3f:d5:e9:89:c2:82:ff:87:1b:03:b9:ca:
90:c8:57:32:c4:c6:f9:25:50:86:1b:7e:40:7e:a9:
f1:28:27:b5:f7:5e:dc:d3:65:59:e5:e0:42:1c:54:
23:bd:2c:0b:2a:79:09:cc:78:01:28:fc:70:76:a8:
9f:b6:5f:6b:37:82:26:e7:f5:13:96:07:40:de:3a:
a8:b6:9e:40:5c:b6:ca:3b:fb:b2:21:51:44:89:da:
c4:16:a2:41:f8:de:f6:e5:4e:b0:53:37:70:aa:bd:
8b:26:bd:d6:65:f5:a5:78:a6:1a:e1:c8:63:33:9e:
66:56:e8:ec:56:35:dd:5e:b5:0a:8c:7e:76:90:87:
54:8e:cb:8c:47:79:e0:87:99:d7:b9:cd:02:23:ad:
a4:6c:4b:95:19:48:68:23:93:9a:f7:be:70:87:db:
20:ab:03:13:ad:e2:74:ed:66:50:3b:ce:17:59:71:
14:3d:b6:15:24:79:58:65:7b:e6:ed:f5:b9:ce:f5:
8a:9d:4a:b1:94:3d:1e:12:aa:f3:d5:ba:7f:5e:3b:
4b:08:d0:78:1e:31:48:67:80:2a:bf:f5:af:bd:2d:
10:35:c1:82:4b:c9:0a:aa:d6:01:17:b7:04:a6:f3:
6e:f5:a0:af:e1:45:bb:c0:20:eb:97:72:21:c7:87:
7d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BE:4F:DD:63:BD:9A:55:DD:04:C8:37:C7:3E:39:F7:C0:13:96:60
X509v3 Authority Key Identifier:
keyid:B7:0D:EA:6C:77:B9:E8:EC:CE:58:39:13:28:19:EF:91:37:3F:C5:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:25:d6:01:43:b3:4a:92:76:0e:e8:d9:e6:6f:76:ce:6e:1a:
3e:7c:e3:62:c5:15:7b:74:1c:36:ac:92:be:43:1a:a0:0b:64:
ad:ba:f1:5d:5e:75:ab:15:4f:22:6b:72:41:5d:c1:54:88:3d:
b5:c8:67:03:61:8f:28:6d:0c:1f:84:b0:2e:60:3b:6f:10:90:
ef:09:f4:77:57:4e:74:89:eb:70:38:f9:56:56:e6:3b:85:65:
10:33:d9:3f:c0:df:df:d7:ff:13:47:85:3a:34:3a:73:bc:d6:
47:d5:fe:ed:a7:c9:8d:49:08:9b:82:44:ce:4f:d6:81:cd:5a:
3a:42:dc:b0:58:bb:7e:bf:c7:c8:08:70:ff:9e:4b:8c:8b:4a:
4d:55:ce:24:35:ed:ed:e7:58:fd:66:20:09:fc:07:03:09:4d:
35:60:fa:77:3f:57:62:ca:0f:5b:c5:c0:9c:f6:ba:c3:af:47:
9e:37:9c:84:7d:ea:80:c0:20:a5:c6:4f:44:84:23:93:f5:5f:
90:dc:81:d5:ca:06:8f:d0:46:0a:49:01:d2:16:81:c1:c3:dd:
b0:3f:25:61:db:f6:37:2b:93:56:b1:a4:77:70:c3:f4:c1:c7:
41:e5:7f:90:43:ca:78:56:55:da:56:1a:8b:da:3f:8d:34:d7:
92:99:38:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:02 2026 by rpki-client