
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
File: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json)
Hash identifier: Q7ym233c9qOwHKTcfQO9F0aDn9MIKoW911ziOWMTsKI=
Subject key identifier: D7:DA:3F:2A:B3:CF:40:8F:14:61:EE:B0:9E:36:51:A3:0C:43:DE:52
Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Certificate serial: 086D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
Manifest number: 0865
Signing time: Thu 12 Mar 2026 20:19:27 +0000
Manifest this update: Thu 12 Mar 2026 20:19:26 +0000
Manifest next update: Thu 19 Mar 2026 20:19:26 +0000
Files and hashes: 1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: wNWSYNBThsIjLYD6yqO1j6kdK/Pk87N2R+HLIKcLMqY=)
2: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: O/7YA16zUHlRs4EqhBTZvR5d/9Wf8oxzD6m86xewXDU=)
3: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: olzU9jiah+vCL2TYo6oua28ch8EeQcQTF/v3T6cuGv0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 20:19:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2157 (0x86d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Validity
Not Before: Mar 12 20:19:26 2026 GMT
Not After : Mar 19 20:19:26 2026 GMT
Subject: CN=69b31fcf-1190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b0:5b:73:02:06:8e:93:17:11:a6:a1:91:30:
ec:bc:15:73:5b:10:d0:cf:99:f8:85:8f:14:27:ac:
0e:fd:af:66:8b:75:30:a9:a3:a7:7c:f6:26:f8:2a:
b8:7a:92:05:f8:a0:6a:5a:f6:11:1b:d8:40:54:9b:
7b:f6:25:14:e0:5e:0e:51:8d:55:9e:91:5d:3a:ce:
29:c0:62:3b:61:c2:09:56:27:0f:3d:f5:34:2b:bb:
e3:fc:0f:9d:8d:cf:09:0b:ad:29:64:e0:17:75:05:
e5:75:af:94:35:a8:e0:6d:7c:5a:59:43:eb:d3:0b:
c2:5c:ff:07:1b:66:64:d6:fc:d4:b8:5f:05:48:81:
72:62:47:b0:6f:1d:38:4c:c2:e3:0e:7c:1c:c0:d6:
30:f1:cb:b7:f2:46:a2:07:13:55:8e:83:73:76:e8:
bf:90:d1:e1:d8:de:7c:97:ae:ca:7f:33:42:2d:9e:
9a:43:f2:8b:ae:c8:12:ce:ff:98:ed:4d:75:ed:aa:
25:28:c0:2c:f3:7d:5e:2f:36:78:28:c0:71:47:56:
f2:35:3b:ab:76:93:9a:15:dd:17:19:52:58:00:40:
03:c7:1b:45:24:0c:42:14:68:1c:b4:77:21:70:36:
57:d3:1c:65:0e:77:53:fb:0e:a9:ad:ce:03:f3:3e:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DA:3F:2A:B3:CF:40:8F:14:61:EE:B0:9E:36:51:A3:0C:43:DE:52
X509v3 Authority Key Identifier:
keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:4b:9d:10:2c:2e:9e:93:0e:f4:a4:c0:c7:2d:d4:cb:24:3d:
e2:eb:ca:7e:ce:07:c4:ea:cd:3f:76:8e:23:bd:9c:d9:d8:52:
b0:45:3d:10:d0:f6:3b:db:68:97:89:cb:8c:e8:8a:9d:12:d9:
20:e7:a9:e6:95:45:23:b1:95:04:3f:c8:42:3b:5c:fd:8f:ed:
01:9d:a2:8c:7c:d4:32:b7:d3:9b:67:5d:b9:4a:c0:1b:a7:bf:
a6:cf:3d:cd:a2:2f:ac:07:15:d6:e9:d8:7d:58:27:bb:f3:64:
23:45:1e:bf:cc:d9:80:24:c7:76:31:71:1a:06:bc:bc:da:91:
6a:68:dd:b6:59:f4:91:a7:e6:26:0d:02:f8:0d:84:b3:52:ca:
b7:0a:df:10:2b:48:69:7a:40:47:e8:4f:07:3f:88:5e:7e:84:
6b:bc:a7:41:ac:a4:bc:85:3a:ed:f5:5e:ab:63:a6:42:e4:70:
91:1e:1e:7f:ec:93:3e:e0:c9:d4:34:bb:68:a3:60:38:ad:9c:
8a:ed:2c:29:58:91:25:e0:ba:a9:8c:b7:ed:5b:2e:0c:60:1e:
29:15:11:4a:a5:2d:0c:ce:4c:d4:0a:54:18:e7:ab:a9:0c:b3:
eb:7f:4e:fd:b7:d1:22:ef:b1:37:0b:a2:35:54:28:16:3a:46:
eb:dd:f4:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA1MjIxMTAvBgNVBAUTKDREQkZCN0MwRjJEODU3NkJBNTA4RjM2MzY5MTk4Qjg0
OTFDMkIzMzQwHhcNMjYwMzEyMjAxOTI2WhcNMjYwMzE5MjAxOTI2WjAYMRYwFAYD
VQQDEw02OWIzMWZjZi0xMTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3rBbcwIGjpMXEaahkTDsvBVzWxDQz5n4hY8UJ6wO/a9mi3UwqaOnfPYm+Cq4
epIF+KBqWvYRG9hAVJt79iUU4F4OUY1VnpFdOs4pwGI7YcIJVicPPfU0K7vj/A+d
jc8JC60pZOAXdQXlda+UNajgbXxaWUPr0wvCXP8HG2Zk1vzUuF8FSIFyYkewbx04
TMLjDnwcwNYw8cu38kaiBxNVjoNzdui/kNHh2N58l67KfzNCLZ6aQ/KLrsgSzv+Y
7U117aolKMAs831eLzZ4KMBxR1byNTurdpOaFd0XGVJYAEADxxtFJAxCFGgctHch
cDZX0xxlDndT+w6prc4D8z7JPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNfaPyqz
z0CPFGHusJ42UaMMQ95SMB8GA1UdIwQYMBaAFE2/t8Dy2FdrpQjzY2kZi4SRwrM0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDUyMi8xQzNEQTNBQ0Yw
QTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYydWxDUE5qYVJtTGhKSENz
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RiLTN3UExZVjJ1bENQTmphUm1MaEpIQ3N6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDUyMi8xQzNEQTNBQ0YwQTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYy
dWxDUE5qYVJtTGhKSENzelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR0udECwunpMO9KTAxy3UyyQ94uvKfs4HxOrNP3aOI72c2dhSsEU9END2O9to
l4nLjOiKnRLZIOep5pVFI7GVBD/IQjtc/Y/tAZ2ijHzUMrfTm2dduUrAG6e/ps89
zaIvrAcV1unYfVgnu/NkI0Uev8zZgCTHdjFxGga8vNqRamjdtln0kafmJg0C+A2E
s1LKtwrfECtIaXpAR+hPBz+IXn6Ea7ynQaykvIU67fVeq2OmQuRwkR4ef+yTPuDJ
1DS7aKNgOK2ciu0sKViRJeC6qYy37VsuDGAeKRURSqUtDM5M1ApUGOerqQyz639O
/bfRIu+xNwuiNVQoFjpG6930pA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:51:05 2026 by rpki-client