
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft
File: tXSEdav1kHeBiVHMH-bti9LzEhM.mft (raw, json)
Hash identifier: aAQt7X8w3kIOm7UeoRhOX7PeFWDZta1+Z7JNioxwQcA=
Subject key identifier: 68:28:41:31:FB:50:C2:50:1F:35:B1:F6:81:36:00:CD:C8:E7:01:EA
Authority key identifier: B5:74:84:75:AB:F5:90:77:81:89:51:CC:1F:E6:ED:8B:D2:F3:12:13
Certificate issuer: /CN=A913DA50/serialNumber=B5748475ABF59077818951CC1FE6ED8BD2F31213
Certificate serial: 0D48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft
Manifest number: 0D3D
Signing time: Sat 04 Apr 2026 17:53:01 +0000
Manifest this update: Sat 04 Apr 2026 17:53:00 +0000
Manifest next update: Sat 11 Apr 2026 17:53:00 +0000
Files and hashes: 1: tXSEdav1kHeBiVHMH-bti9LzEhM.crl (hash: UY3Z23KKamsGC8toMRtSt6eQo7+dIjwORDiTbmUtqtE=)
2: E458D4E0F4A011E98C19332EC4F9AE02.roa (hash: y3y5SrZwbym3PpRCNxxCZC+FmThIaCT84ESOqsCOxgw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.crl
rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3400 (0xd48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DA50, serialNumber=B5748475ABF59077818951CC1FE6ED8BD2F31213
Validity
Not Before: Apr 4 17:53:00 2026 GMT
Not After : Apr 11 17:53:00 2026 GMT
Subject: CN=69d14ffd-86d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:bb:b1:4e:ba:8a:36:c1:e1:76:d2:bc:ba:
29:82:ad:d4:58:58:4f:25:a3:40:81:98:25:72:63:
b2:51:71:92:09:8f:e5:8d:44:ad:a9:e8:6c:e1:51:
80:a4:cb:93:23:e9:ab:5a:e0:f4:6e:be:95:9a:4b:
29:05:cd:58:29:ae:ba:e0:47:4e:0c:99:d6:01:43:
af:6e:d2:5f:49:36:d2:5b:14:31:44:41:be:0d:78:
1d:c1:b5:ef:c9:23:88:da:dc:e7:e8:61:4e:62:42:
77:da:82:e9:de:14:41:36:46:bd:ac:39:cc:c0:04:
d5:8b:e8:3c:c4:46:61:32:a9:94:d6:5b:85:fb:6e:
ce:c8:6a:3f:0d:f3:42:c3:d6:14:b0:bf:40:f1:01:
c7:6f:f4:d9:95:c6:16:e4:7c:d5:8f:f7:b9:27:cd:
64:5b:ab:17:2c:ce:56:66:c8:d5:4f:d9:c5:e2:c2:
15:8e:c7:75:00:52:45:c4:d4:b1:7a:55:42:56:9b:
b6:80:69:19:34:42:43:d8:0c:00:f7:39:a6:4b:90:
36:fc:67:dd:32:b9:a4:65:10:21:62:ee:23:c8:dc:
7c:66:fc:2e:ec:93:66:b7:13:66:b1:8f:5f:47:31:
f1:7f:15:f5:b5:87:56:ef:6b:1c:bc:56:da:3a:28:
0f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:28:41:31:FB:50:C2:50:1F:35:B1:F6:81:36:00:CD:C8:E7:01:EA
X509v3 Authority Key Identifier:
keyid:B5:74:84:75:AB:F5:90:77:81:89:51:CC:1F:E6:ED:8B:D2:F3:12:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9a:a3:be:52:f8:ad:bd:28:74:93:17:ff:ff:e1:d5:e3:72:
8e:85:e3:0d:22:73:28:07:90:5c:c9:04:23:ae:55:aa:7b:05:
5d:e4:07:e5:53:7d:97:9e:41:d8:dc:b2:5b:77:60:c9:8c:97:
fb:0f:25:fa:b2:a5:5d:54:24:43:71:f8:5a:88:06:c3:02:24:
f3:3a:6e:1c:6e:c8:e4:63:21:78:34:56:97:ac:4c:f6:50:27:
bf:1e:7d:24:e0:ce:a2:75:62:cf:70:f2:82:11:30:cd:f0:54:
34:50:a5:97:d8:59:9d:fc:bf:54:a8:ab:08:ee:ce:fa:9d:fb:
ad:d3:0f:78:84:b7:f6:54:3f:c2:1a:94:0c:53:6c:64:b6:94:
a4:38:ee:d6:be:95:6d:79:06:d5:73:2c:22:56:4f:90:f2:6e:
3e:d9:20:fd:12:c7:81:31:a1:3f:06:24:e4:eb:29:83:fc:75:
c9:b5:bd:bd:6f:dc:b2:13:bb:ac:fa:b7:f1:cd:dd:2d:9a:0f:
f5:ce:0f:b5:48:09:37:6a:e9:f8:11:63:e0:66:95:08:e9:f0:
26:6c:13:68:1a:8c:f5:3c:ea:52:68:fe:ff:86:d6:7a:dd:b6:
09:0f:fc:a4:1f:43:27:9e:91:1b:cc:e4:ad:5f:8c:bc:55:ed:
7a:6f:d0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:02:53 2026 by rpki-client