
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
File: tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json)
Hash identifier: bFZOIJ2YFYp7zWgUZ9mTGK32yAUnS384n/cnm2MLBIk=
Subject key identifier: F5:15:A3:8D:8E:D5:5D:9E:94:47:C1:A3:20:C1:EE:26:72:9C:6A:D0
Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Certificate serial: 0255
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
Manifest number: 0233
Signing time: Thu 23 Apr 2026 02:40:46 +0000
Manifest this update: Thu 23 Apr 2026 02:40:46 +0000
Manifest next update: Thu 30 Apr 2026 02:40:46 +0000
Files and hashes: 1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: XqLoVYJnPbwCYg0rYJrIZpW6MgwDdRqrQavv864xei8=)
2: 6F4F0F4230AA11F0AD39210DC4F9AE02.roa (hash: cV1FUQ8j7Fc28oanTu0oeEUibe4kPctH/MKiCjzAiiQ=)
3: 2D450BA8B58211F094C92178C4F9AE02.roa (hash: CYyBpgev2I8lIYy5euAo+T58y5gvQtb1JaMBoaDc3j0=)
4: 221A3064480411F0A14D5A83C4F9AE02.roa (hash: j+rKZJevpIGC1sf1OUnZrF6Qqhjbev7FmmF2TRVvEEw=)
5: C94C5FD4163911F1B9B26C9A3C3D8C67.roa (hash: +zla8jcELBJaZ3BFgMyMqxEKvzL0rhi9mZn3jgAoW0s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Apr 2026 02:40:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Validity
Not Before: Apr 23 02:40:46 2026 GMT
Not After : Apr 30 02:40:46 2026 GMT
Subject: CN=69e986ae-2085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:6c:de:76:fd:ed:56:e2:e3:b2:8e:d9:fa:
3a:13:5a:e0:06:67:45:4c:33:f3:a4:b4:f4:5d:10:
39:e7:20:13:2c:c0:f4:48:c8:14:25:39:46:dc:dc:
1f:e2:88:d5:ed:98:f4:18:2d:ce:0e:e0:9f:bb:b2:
e8:74:35:28:91:fd:17:51:70:9b:19:5e:b7:fa:56:
91:88:60:8f:dc:57:58:a8:4d:3d:58:3a:42:e9:bd:
64:df:2a:c0:b4:f5:c5:01:7a:be:67:93:b3:79:b9:
33:1a:43:3b:ff:72:0c:17:c1:2d:78:a2:37:bd:ee:
03:40:b5:8f:98:84:60:36:32:a8:38:d4:4e:5e:e3:
1b:95:ff:27:57:f6:d2:e5:fb:11:7c:6c:f4:02:e4:
5a:c5:81:6d:c6:5d:15:f6:d2:18:a4:80:b5:98:55:
e9:48:5f:60:cd:37:4e:3e:5c:4b:74:de:4c:63:c4:
90:c6:ec:d4:c1:3d:75:75:b2:28:a7:43:6c:ae:fa:
49:45:d6:04:33:a6:29:f7:ec:9e:53:df:25:2f:bf:
90:d9:d9:55:66:b2:d3:7c:fa:c7:65:9e:a1:d2:2d:
aa:fc:9f:4f:99:c0:61:f9:23:93:73:c2:9c:d5:cd:
03:3c:89:9a:6a:a2:03:9b:41:7d:d6:03:f2:22:2c:
d2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:15:A3:8D:8E:D5:5D:9E:94:47:C1:A3:20:C1:EE:26:72:9C:6A:D0
X509v3 Authority Key Identifier:
keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d2:a6:d8:f8:e5:96:a9:5f:42:79:02:52:1a:b8:e2:b1:71:
1f:b7:f6:dc:62:27:35:2c:99:4f:44:f9:8b:94:71:e1:e7:a4:
4e:87:c4:1e:08:0a:7a:b9:df:36:dc:3c:63:2f:84:32:3c:6a:
8e:eb:a7:ce:6b:ed:fa:d9:58:43:6b:8b:60:8c:df:90:c6:c2:
bc:35:f4:73:0f:40:80:b4:ad:b6:9c:f9:a2:bf:4e:9d:58:ba:
e9:09:69:bb:de:c2:90:d7:40:c3:c4:a1:52:ca:e6:50:dd:2c:
7f:87:fd:e5:1b:bf:88:ec:14:98:d6:86:2b:5e:d1:8a:5a:5b:
e9:a2:9c:66:b0:ad:24:28:65:e1:03:00:24:dc:7b:3d:88:3c:
e7:df:e1:56:c4:bb:db:e9:4b:2e:a4:ba:05:aa:86:f9:7f:68:
4b:d3:2b:d7:fc:d9:f8:95:47:72:d3:22:84:f0:4d:0a:fc:b4:
41:2f:42:00:ab:e2:b7:78:6f:be:6f:bd:18:f9:b7:df:06:80:
f1:ab:8f:57:3a:7c:06:c4:92:c1:46:53:f5:29:82:11:69:0a:
a4:82:e6:63:e8:23:1f:e6:8c:4d:e1:aa:f8:0a:07:56:48:ec:
4f:cf:d5:59:15:62:5b:33:b0:e0:dc:d9:39:ba:c3:63:db:d0:
66:e6:03:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 14:54:57 2026 by rpki-client