
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
File: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft (raw, json)
Hash identifier: 4DeJBFQ8KSA4WpGTwnWIEw5uSU4jDvVTUQFNckIj2ok=
Subject key identifier: 76:10:77:CD:D4:FD:0D:8C:67:D0:A7:C8:40:40:A6:BF:8A:7C:3F:9C
Authority key identifier: B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6
Certificate issuer: /CN=A911A4F7/serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
Manifest number: 011F
Signing time: Fri 17 Apr 2026 05:26:02 +0000
Manifest this update: Fri 17 Apr 2026 05:26:02 +0000
Manifest next update: Fri 24 Apr 2026 05:26:02 +0000
Files and hashes: 1: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl (hash: Ow3pmm2/Kcoztd6STn++G81CuI4v54SnM6IX20XCJVY=)
2: F17DA0FE85FC11EFBD7A485FC4F9AE02.roa (hash: NPEHXK4kvB3m3Mt2iQopHp4B8bUEbfWS8NtHZ6Qe9rU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl
rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A4F7, serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6
Validity
Not Before: Apr 17 05:26:02 2026 GMT
Not After : Apr 24 05:26:02 2026 GMT
Subject: CN=69e1c46a-a80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ad:a3:ab:d1:60:74:fc:ab:1f:c4:de:bd:31:
4d:3d:9c:1f:0e:fc:f6:70:a8:de:cf:45:ea:44:64:
7d:3d:d1:55:59:54:98:95:ef:36:ec:41:f2:a8:2d:
c2:5d:49:59:89:fa:8c:d4:dc:25:9b:15:fa:e6:be:
64:fb:1e:63:fb:1e:b4:bc:ac:9f:d1:6a:8b:52:7b:
26:8b:62:5a:43:01:24:67:7b:a4:5c:10:16:4f:0b:
29:61:2b:9d:0c:94:e7:03:8f:84:fb:40:30:bd:bf:
34:82:8d:f5:f2:bc:45:6d:95:23:f7:b2:d8:44:f7:
88:4e:4f:8a:9b:c0:73:e5:3d:1d:76:4f:b1:31:52:
e9:7e:8e:5b:19:27:0e:0a:ef:4f:b1:e4:8d:3c:c4:
cc:5b:10:bf:d6:5c:b9:85:28:d8:e7:f3:74:99:fa:
f2:db:76:11:ee:80:a8:3b:cf:dc:57:ad:dd:cb:f6:
76:9e:46:f8:15:33:d6:c4:c4:d3:f8:47:23:9f:2d:
d5:09:b8:f3:01:98:56:f9:4c:2f:53:30:54:c8:f3:
57:07:76:e0:f1:71:9b:ed:2d:2c:e8:34:9d:f1:57:
bb:3d:ee:3c:43:36:c6:8d:6e:7a:b5:9f:58:fb:6b:
da:e5:2f:b6:52:80:22:d9:a5:ed:30:a0:4f:e2:8a:
35:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:10:77:CD:D4:FD:0D:8C:67:D0:A7:C8:40:40:A6:BF:8A:7C:3F:9C
X509v3 Authority Key Identifier:
keyid:B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:f2:e7:03:1e:9d:96:8c:09:97:a0:4e:d7:ae:a3:fd:9b:e5:
89:14:a2:9c:14:76:6c:bd:84:62:cd:70:5e:29:4c:c9:8c:cb:
b4:39:a0:98:bd:fb:79:a6:fb:03:5f:87:ea:2b:d9:4f:51:8d:
8b:9f:a1:3e:af:13:17:6e:bd:55:05:b6:99:54:e8:f2:83:6b:
a9:63:22:05:3c:6e:f5:bc:ce:38:13:96:5e:8c:6e:97:a8:a0:
ac:78:2a:6c:5a:65:7b:c6:fa:6e:ec:7b:fa:d4:66:32:ed:1e:
62:ee:c8:5b:86:39:6c:ed:1e:70:c8:4f:7a:df:4e:e6:25:bb:
4a:84:5d:f4:b3:94:a4:b8:d4:b8:42:a9:6d:01:59:09:0d:94:
f6:b6:0f:cf:4e:c5:a4:bb:8d:61:4a:6f:73:14:47:5f:2a:eb:
e2:91:06:b7:24:48:3f:ac:c4:6e:10:02:12:a3:8a:16:aa:9c:
6d:3b:cd:15:ca:2b:67:7a:b0:fe:69:55:8e:46:c1:a4:13:78:
1b:b5:e5:0a:80:d7:ec:5e:b0:d7:09:07:6e:53:af:2b:8d:01:
f0:0b:db:a0:84:8b:41:1d:ce:39:62:f1:8b:3f:45:86:92:95:
54:3c:c5:11:88:08:dc:cd:07:05:12:5a:e7:2f:44:4e:4f:e9:
c6:fc:9f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:05:54 2026 by rpki-client