
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft
File: tB02AK8mCZMOgvCWAMevmPLdbJ8.mft (raw, json)
Hash identifier: HSWWjCYTc+2IOx7ELv1lLMo8dx7wGSAqSb1WBG/wbPo=
Subject key identifier: F6:E1:52:E8:75:EA:2C:EF:0E:09:B3:21:5B:66:12:57:06:ED:FE:A8
Authority key identifier: B4:1D:36:00:AF:26:09:93:0E:82:F0:96:00:C7:AF:98:F2:DD:6C:9F
Certificate issuer: /CN=A9193F42/serialNumber=B41D3600AF2609930E82F09600C7AF98F2DD6C9F
Certificate serial: 64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft
Manifest number: 61
Signing time: Sun 05 Apr 2026 07:22:43 +0000
Manifest this update: Sun 05 Apr 2026 07:22:42 +0000
Manifest next update: Sun 12 Apr 2026 07:22:42 +0000
Files and hashes: 1: tB02AK8mCZMOgvCWAMevmPLdbJ8.crl (hash: 6f+lTJkRBukuF1lTmPAV8U9AbwjCmtqk6NKi0LPVtVU=)
2: E8D991EAA2B311F09C429E36C4F9AE02.roa (hash: rX5/7gKSXJTLeHn8vFsBC/ibmFcKVc04ia3nrFa3Qck=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.crl
rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:22:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193F42, serialNumber=B41D3600AF2609930E82F09600C7AF98F2DD6C9F
Validity
Not Before: Apr 5 07:22:42 2026 GMT
Not After : Apr 12 07:22:42 2026 GMT
Subject: CN=69d20dc2-e822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:51:cf:dd:a7:b7:5e:59:c6:ff:e3:52:54:
cb:2f:1b:36:5a:6b:7c:18:dc:7b:0a:ae:75:61:94:
a3:0e:ba:bc:75:87:38:02:bf:e7:23:62:43:66:75:
4c:2e:c7:16:73:fd:45:67:01:2f:9b:3e:c1:f5:56:
71:36:d2:cd:07:76:46:e6:4e:20:71:3d:4b:ce:57:
04:8c:22:0c:5f:dc:52:37:4a:62:66:a0:ec:06:6a:
c7:8f:64:e4:61:48:c6:62:9a:cb:82:cc:b3:cd:cc:
d7:59:24:3a:25:1c:a6:0a:ca:f1:24:fa:c1:65:ca:
19:6d:c3:15:de:4f:6c:1c:f0:86:ca:5d:03:88:d5:
95:74:0e:c3:82:f5:fa:63:50:e9:23:f0:a3:c5:d8:
27:8b:8a:6f:24:fa:90:94:42:0b:5d:ac:db:9a:02:
78:ba:1c:9b:e2:2d:15:fb:92:90:10:a6:07:75:41:
72:74:4f:04:d4:0e:52:02:83:47:aa:87:fa:b9:93:
e0:68:1b:db:c8:66:8f:65:9d:b2:91:49:80:da:16:
d1:7e:93:34:91:23:a4:2d:bc:38:a5:47:95:7f:2e:
32:20:61:83:d6:b1:62:72:d0:88:11:6e:71:e0:a1:
8f:12:e6:df:73:eb:20:21:5c:d2:98:10:f4:18:e8:
7a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E1:52:E8:75:EA:2C:EF:0E:09:B3:21:5B:66:12:57:06:ED:FE:A8
X509v3 Authority Key Identifier:
keyid:B4:1D:36:00:AF:26:09:93:0E:82:F0:96:00:C7:AF:98:F2:DD:6C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4b:ca:d0:c9:ea:df:d5:3d:44:3b:8a:00:15:f5:f6:73:f9:
f9:fd:69:98:ec:cb:92:95:2b:29:37:15:fc:da:c0:fc:62:5c:
0c:86:b1:99:25:a9:03:80:bc:95:00:a8:22:41:fb:d1:1a:69:
2d:ef:c0:61:f6:f8:3c:99:be:92:e4:b6:4f:9d:b6:42:5a:fb:
2e:27:c7:44:41:42:5b:6d:09:e3:c5:6e:9c:71:68:73:6b:03:
40:7e:c2:09:68:fd:09:30:f3:02:87:86:bd:75:a3:62:b1:d7:
e6:b2:51:2a:24:36:5e:81:e3:b9:d4:22:18:8e:27:22:08:89:
d2:d4:71:5d:2d:40:72:5b:e5:47:71:00:7c:ba:a1:ee:7a:15:
f2:48:42:26:5e:b7:60:3d:e0:dd:bf:42:0b:ba:20:8f:79:e0:
98:69:8d:9c:23:f1:66:72:2c:8b:b2:ec:24:d7:05:ed:45:c1:
91:cd:8a:ea:6b:04:2d:7e:d5:83:68:c7:09:60:d2:81:f3:fd:
b0:f5:ea:ad:1d:5b:16:eb:00:74:31:68:c5:58:94:74:95:46:
24:8f:8e:a7:48:04:ab:42:46:8c:9f:6f:24:3b:10:28:06:55:
e3:09:0f:05:6d:d1:77:30:5f:f6:e1:25:a2:56:af:2b:b2:fa:
61:fb:71:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:56 2026 by rpki-client