
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
File: tsp04BddZ-Guvoa_44xciY8mK4w.mft (raw, json)
Hash identifier: Tz7avTVZPx2pHlAey1yV3SJPBzWnMLVENXPUqpGQHYI=
Subject key identifier: 17:83:0D:08:48:F1:7E:36:6B:61:E0:04:2F:85:C5:62:1A:02:85:AC
Authority key identifier: B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
Certificate issuer: /CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
Certificate serial: 027E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
Manifest number: 026A
Signing time: Sun 05 Apr 2026 01:39:43 +0000
Manifest this update: Sun 05 Apr 2026 01:39:42 +0000
Manifest next update: Sun 12 Apr 2026 01:39:42 +0000
Files and hashes: 1: tsp04BddZ-Guvoa_44xciY8mK4w.crl (hash: QyM1MgTwpJBxEA6yZaDFKyI4SosTqnHzjFvq5x9jEEk=)
2: 1627927480FB11ED9B35954DC4F9AE02.roa (hash: JGThLscl6gYWty7onPVj55tcNOzgZj9wzjYyxf+XyoM=)
3: 158B72F480FB11ED9B35954DC4F9AE02.roa (hash: vCFJH0y2zLT6RtNl1fKrvOFGF6otZx/dSySN5y76muE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl
rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 638 (0x27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EA40, serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
Validity
Not Before: Apr 5 01:39:42 2026 GMT
Not After : Apr 12 01:39:42 2026 GMT
Subject: CN=69d1bd5f-a960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:e8:a9:bf:15:2c:d3:3b:bc:12:24:41:d7:
9a:00:a7:8b:87:a5:e0:c7:c0:5b:a6:c9:60:ef:5a:
78:4a:91:a2:bc:fe:de:ce:74:da:6a:4e:bf:ad:1b:
c8:9b:95:3b:d8:67:01:23:cb:49:15:10:f2:fe:1a:
ee:ea:a5:dd:e4:ea:09:05:8a:19:d9:a4:24:32:08:
2c:ef:8e:1c:ef:69:67:43:2d:c5:da:e1:7f:dd:2a:
da:06:58:35:42:53:4b:61:af:1d:5b:b3:32:36:6e:
e7:c5:ee:14:73:2d:db:7e:70:5a:d3:53:ff:88:e2:
04:4d:28:b3:00:ca:29:eb:3b:53:2e:a6:ac:b1:f6:
b2:64:a1:66:91:10:bc:39:c4:b4:76:c8:d5:dc:a9:
76:85:e8:1a:eb:fa:93:6b:63:e7:61:ea:72:69:7e:
3d:6a:2a:89:34:28:fe:bb:81:69:bc:28:6b:8f:ce:
0c:4d:18:94:0b:49:aa:7a:7b:87:1d:82:a5:7c:16:
52:5c:3e:a2:9d:ea:25:76:1a:e5:1f:0b:90:c9:89:
61:e0:30:70:60:c8:f4:05:23:ee:55:3f:50:10:16:
9b:e9:69:6d:51:1f:6d:7f:60:7e:6e:8d:36:12:ae:
f8:2c:13:77:73:9c:56:c7:5f:bf:05:1e:10:5c:e8:
b5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:83:0D:08:48:F1:7E:36:6B:61:E0:04:2F:85:C5:62:1A:02:85:AC
X509v3 Authority Key Identifier:
keyid:B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:2e:f0:fc:3d:93:57:72:d1:f6:ee:0f:7d:65:de:a0:8e:b6:
3f:24:6a:7d:36:d4:05:ec:2e:fd:68:b4:78:4c:f4:74:02:00:
6c:6e:98:36:21:a5:a3:3b:52:60:11:17:cc:32:ab:36:96:28:
ad:02:e5:d8:24:da:e1:0d:52:03:ab:d3:e6:ef:d8:3c:02:af:
53:b5:85:c4:3b:8a:16:3b:eb:53:97:b4:c0:ea:52:96:ec:0a:
5d:b0:cf:4d:af:0f:0a:3b:5f:fd:6c:6a:03:80:29:4a:8e:d1:
f0:cd:79:c7:91:ec:dd:bf:fd:03:a5:a1:c0:e7:b3:a6:62:36:
83:d8:03:6a:dd:14:4a:73:cf:54:db:b3:cb:65:17:ec:d1:77:
0d:f9:74:69:da:e8:35:09:59:b6:77:c0:c4:02:54:16:17:49:
35:4a:75:d3:cf:72:96:e0:77:11:32:b9:5c:a7:66:c6:ce:95:
16:91:9e:23:1b:ae:c6:af:3f:ab:8b:45:6d:22:50:94:a2:af:
7c:c1:2d:0f:51:c6:be:18:14:b7:de:3d:29:4f:88:97:02:52:
b9:12:98:35:5a:10:f5:91:a9:52:88:36:a7:2b:a1:f7:48:dd:
a0:a3:3d:5c:29:84:e3:ee:6f:0e:c7:bb:1c:0a:9c:fd:ce:5b:
b2:1e:f0:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVBNDAxMTAvBgNVBAUTKEI2Q0E3NEUwMTc1RDY3RTFBRUJFODZCRkUzOEM1Qzg5
OEYyNjJCOEMwHhcNMjYwNDA1MDEzOTQyWhcNMjYwNDEyMDEzOTQyWjAYMRYwFAYD
VQQDEw02OWQxYmQ1Zi1hOTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtIPoqb8VLNM7vBIkQdeaAKeLh6Xgx8Bbpslg71p4SpGivP7eznTaak6/rRvI
m5U72GcBI8tJFRDy/hru6qXd5OoJBYoZ2aQkMggs744c72lnQy3F2uF/3SraBlg1
QlNLYa8dW7MyNm7nxe4Ucy3bfnBa01P/iOIETSizAMop6ztTLqassfayZKFmkRC8
OcS0dsjV3Kl2hega6/qTa2PnYepyaX49aiqJNCj+u4FpvChrj84MTRiUC0mqenuH
HYKlfBZSXD6ineoldhrlHwuQyYlh4DBwYMj0BSPuVT9QEBab6WltUR9tf2B+bo02
Eq74LBN3c5xWx1+/BR4QXOi1EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBeDDQhI
8X42a2HgBC+FxWIaAoWsMB8GA1UdIwQYMBaAFLbKdOAXXWfhrr6Gv+OMXImPJiuM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUE0MC80OTA2RjJBODgw
RjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFotR3V2b2FfNDR4Y2lZOG1L
NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3RzcDA0QmRkWi1HdXZvYV80NHhjaVk4bUs0dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUE0MC80OTA2RjJBODgwRjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFot
R3V2b2FfNDR4Y2lZOG1LNHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcS7w/D2TV3LR9u4PfWXeoI62PyRqfTbUBewu/Wi0eEz0dAIAbG6YNiGloztS
YBEXzDKrNpYorQLl2CTa4Q1SA6vT5u/YPAKvU7WFxDuKFjvrU5e0wOpSluwKXbDP
Ta8PCjtf/WxqA4ApSo7R8M15x5Hs3b/9A6WhwOezpmI2g9gDat0USnPPVNuzy2UX
7NF3Dfl0adroNQlZtnfAxAJUFhdJNUp1089yluB3ETK5XKdmxs6VFpGeIxuuxq8/
q4tFbSJQlKKvfMEtD1HGvhgUt949KU+IlwJSuRKYNVoQ9ZGpUog2pyuh90jdoKM9
XCmE4+5vDse7HAqc/c5bsh7wHA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 01:15:30 2026 by rpki-client