
$ rpki-client -vvf rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft
File: tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft (raw, json)
Hash identifier: HcVRBLYjANHg4WQTiOmNhBVg4ubOZSz28bpDFe+G8SQ=
Subject key identifier: E0:AA:8A:4D:2B:00:64:8B:87:07:27:E3:21:E6:2E:7F:D7:B6:D8:2E
Authority key identifier: B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55
Certificate issuer: /CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155
Certificate serial: 0BB9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft
Manifest number: 0BAE
Signing time: Sat 04 Apr 2026 18:50:38 +0000
Manifest this update: Sat 04 Apr 2026 18:50:38 +0000
Manifest next update: Sat 11 Apr 2026 18:50:38 +0000
Files and hashes: 1: tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl (hash: 4MZRJBhG0qxud97gt90x5PgR2GafNihN68rbH+iSrSE=)
2: 741645EE422211EA937BB919C4F9AE02.roa (hash: HwPx0vPg1VtGRQbAWOwpU/WcG4J7vax6C4J9fWBN2DQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl
rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:50:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3001 (0xbb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915577F, serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155
Validity
Not Before: Apr 4 18:50:38 2026 GMT
Not After : Apr 11 18:50:38 2026 GMT
Subject: CN=69d15d7e-73b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:21:f0:37:ab:54:e7:38:8c:d7:62:6f:e7:ef:
c4:fb:f1:30:90:b0:5a:eb:e4:a4:22:c2:97:39:26:
b2:d6:3f:62:9c:6e:91:c8:cd:a0:c1:ff:8d:55:2d:
de:63:f9:1a:9d:45:88:cb:8b:ba:9d:b9:98:23:56:
3c:98:06:1a:29:a0:62:a3:ac:a8:82:73:e5:2c:77:
2a:72:7c:61:08:7a:5f:d3:67:b7:cd:1d:28:f2:08:
7d:6a:d9:91:89:4f:a0:3e:ec:57:43:20:c8:2c:d2:
86:10:dd:f4:e0:cb:87:b3:63:7c:5e:26:b4:a9:80:
8c:66:46:c4:82:af:00:04:48:67:d1:0d:15:55:c3:
20:d6:2c:61:e8:de:bd:3e:c7:bb:00:90:98:2d:bf:
ca:b2:b3:c8:34:9b:87:5b:bb:79:c9:19:b5:62:c7:
37:fa:e0:45:83:6f:72:d3:df:d3:92:01:51:40:fa:
7c:88:bc:d8:43:48:2c:66:7a:7b:0a:b6:3d:ba:1e:
69:90:ff:af:c5:9b:b4:f7:60:de:d1:cd:85:41:81:
5e:fb:ff:1c:92:f8:40:29:ec:ad:d8:61:11:dd:ac:
82:67:14:b5:f4:bb:80:4f:00:a8:54:26:06:a9:a9:
a5:75:96:7d:79:fc:ee:f8:07:e3:10:44:c7:34:60:
cc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AA:8A:4D:2B:00:64:8B:87:07:27:E3:21:E6:2E:7F:D7:B6:D8:2E
X509v3 Authority Key Identifier:
keyid:B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:c6:d1:58:57:7c:5b:1b:67:ef:3f:a9:d7:21:31:12:ba:40:
94:d1:0f:a5:5c:60:e8:93:79:50:0b:cc:ac:c5:5b:ce:ab:33:
c4:25:79:37:7a:8d:61:ae:65:fd:76:d9:b5:60:d2:84:13:df:
9d:0c:6c:08:df:45:e8:da:ce:14:70:3a:e8:b0:94:ab:db:59:
28:af:ae:20:cc:f5:6d:b7:2c:ee:20:65:3a:7d:e8:c8:e7:8f:
4a:36:0e:b4:84:a6:68:2d:c9:26:5e:05:ff:ff:63:55:d2:3c:
ea:c3:a2:91:24:b6:b0:55:7b:a4:ab:d8:91:fe:71:b5:22:1a:
09:6e:fe:99:02:e4:67:92:a6:29:c1:ac:a2:55:a2:ee:5a:49:
2d:55:5b:74:fa:40:44:99:5a:1e:cb:00:32:57:d4:6a:da:41:
d2:a1:2c:99:ab:9c:75:b2:7e:67:a2:12:1f:0d:44:49:c6:5f:
e7:ec:77:b2:ed:81:ed:02:3c:e5:6a:32:5c:1e:57:92:b7:40:
c9:cb:bf:6e:3c:13:ef:7c:54:f1:14:28:a3:0d:6b:eb:b2:b5:
0f:90:16:f4:a5:2f:85:b4:e9:fb:96:7d:5b:2f:a9:e8:47:b7:
45:c4:50:0e:e5:8d:da:a3:48:00:63:94:3c:a5:db:e7:fb:e9:
87:2e:a0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:08:38 2026 by rpki-client