
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
File: tRdNgmVknN0nQmySfRaHddeD1Tg.mft (raw, json)
Hash identifier: B6OGCBl/oGIk1K0Od4Y/PS7WjoD6IEbfNTZbJPLtfxw=
Subject key identifier: 72:7F:32:43:C3:13:46:9A:99:35:FD:53:BD:89:7E:C8:92:77:8D:0C
Authority key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
Certificate issuer: /CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538
Certificate serial: 0BB9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
Manifest number: 0BAF
Signing time: Sat 04 Apr 2026 18:50:45 +0000
Manifest this update: Sat 04 Apr 2026 18:50:45 +0000
Manifest next update: Sat 11 Apr 2026 18:50:45 +0000
Files and hashes: 1: tRdNgmVknN0nQmySfRaHddeD1Tg.crl (hash: qaGOS5+GhsKkP9s4ETiSa2vtV57SBeAVjNZsxfIyDaE=)
2: 61E12BD0CA0611EEB05EB92CC4F9AE02.roa (hash: IuciT/jDYsEHuZMLoxbp4gzhohFWomxgcVWfQKh8vS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl
rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:50:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3001 (0xbb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D459, serialNumber=B5174D8265649CDD27426C927D168775D783D538
Validity
Not Before: Apr 4 18:50:45 2026 GMT
Not After : Apr 11 18:50:45 2026 GMT
Subject: CN=69d15d85-ca8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:0a:92:e3:b8:3c:cd:0f:bc:22:1e:49:55:
7a:c2:3f:d6:2a:2f:a5:90:a3:8b:5c:05:16:43:1b:
98:37:b0:f7:32:b0:65:44:a8:b6:d4:bb:19:aa:a6:
79:6a:d4:ad:c8:73:85:81:a6:8a:de:b0:2b:1d:56:
1a:32:7b:0d:e6:a1:66:bd:f0:36:7f:25:67:53:ee:
0c:44:cb:f3:ac:61:73:5d:89:d2:4a:71:bf:45:16:
fb:23:15:2d:61:2e:08:c3:c2:8a:f3:bc:af:b3:de:
c3:a3:12:3d:2a:fb:9b:89:a4:49:10:a3:ed:31:7b:
24:6e:40:39:53:ad:e0:8b:b0:4e:e9:22:14:a9:2c:
31:3e:a7:99:20:7a:04:38:a0:21:90:13:e5:de:de:
1a:61:c9:cd:7e:79:85:b5:1a:65:5d:23:92:4d:cd:
ef:98:fc:1e:b3:5b:3d:50:b5:78:1d:fd:6a:65:53:
95:8f:f7:d1:f5:79:16:b2:4b:af:b6:fb:cb:a4:50:
b8:7d:17:9e:99:26:ec:e3:1c:c8:ff:4b:0d:e0:91:
f9:01:cb:0c:83:2a:6a:8f:4d:7b:5b:b5:15:bd:7e:
a7:0a:b0:86:be:f1:e9:bf:7b:85:16:7c:cd:f4:0d:
69:42:e1:3b:32:5c:64:15:be:44:c1:89:c0:14:b7:
83:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7F:32:43:C3:13:46:9A:99:35:FD:53:BD:89:7E:C8:92:77:8D:0C
X509v3 Authority Key Identifier:
keyid:B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:84:d5:b6:27:b7:11:b3:28:09:51:87:04:1f:46:82:a4:f9:
24:57:19:fd:d8:5c:c3:78:23:7a:2a:dd:de:54:cc:7e:7b:14:
61:6b:35:53:78:6a:fd:6b:6b:dc:8c:35:cb:19:86:82:2c:c5:
7c:31:43:d3:a6:42:f9:33:d7:ee:75:9e:c9:cf:58:12:89:d4:
97:79:05:1a:cb:44:08:fd:b5:ab:f0:ad:55:58:b3:2e:9a:52:
61:f5:f7:61:61:28:d5:9a:1b:b3:d9:04:b3:e8:3d:0c:15:1b:
b6:20:c8:f8:22:f6:ef:12:b8:e7:72:10:3f:21:eb:95:45:ca:
3e:bd:7e:2b:22:c4:6f:e4:34:de:7b:44:25:66:b8:bc:a1:55:
0d:46:78:27:f0:66:c0:a9:9a:0d:40:d9:15:61:75:6d:82:2f:
ce:85:a3:32:d1:b6:fd:84:29:00:cc:2c:f6:c4:bd:83:c8:3d:
eb:77:14:e7:71:cb:47:0b:39:d5:0d:ef:3b:79:15:10:21:ed:
2b:61:0f:a9:74:a0:6d:51:45:89:d9:27:9d:7d:61:b1:17:d5:
8f:91:57:44:9c:85:62:69:e4:06:1b:e5:48:56:31:a0:e9:bf:
cd:3e:07:ca:34:de:eb:e3:04:78:76:6b:dd:e2:e8:f7:70:91:
cb:74:18:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:51:16 2026 by rpki-client