
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
File: tNIXk5onUZOOB2WaeUiFqciEGRk.mft (raw, json)
Hash identifier: 5nvTNUIIHl+CTFDQR/0lbyXujdcXmZTvM+rI/D6+cnc=
Subject key identifier: B1:27:83:8F:A1:9D:54:F8:46:37:D3:AA:54:90:78:BC:D9:5F:B9:98
Authority key identifier: B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19
Certificate issuer: /CN=A9145B13/serialNumber=B4D217939A2751938E07659A794885A9C8841919
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
Manifest number: 0115
Signing time: Thu 21 May 2026 06:01:47 +0000
Manifest this update: Thu 21 May 2026 06:01:46 +0000
Manifest next update: Thu 28 May 2026 06:01:46 +0000
Files and hashes: 1: tNIXk5onUZOOB2WaeUiFqciEGRk.crl (hash: V/w58mG7cxKCjT4dWnHwVtjL8x5w1wWzRAnLmtLghX4=)
2: 793486E0C11A11EF99C19012C4F9AE02.roa (hash: v6BylN14fOxA4ftijT2xm8ugkwjC+LIOM8D065x7bmM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl
rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145B13, serialNumber=B4D217939A2751938E07659A794885A9C8841919
Validity
Not Before: May 21 06:01:46 2026 GMT
Not After : May 28 06:01:46 2026 GMT
Subject: CN=6a0e9fcb-4df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:af:52:59:89:63:75:dd:18:3a:b9:a9:6d:
4c:17:c7:9b:54:36:03:a7:6c:89:ec:5c:34:14:17:
08:0f:d6:0a:a1:e0:05:bb:01:4c:6f:27:65:9e:cb:
c9:9b:23:0d:04:61:06:c3:92:e1:1a:e6:df:d6:99:
e4:f9:21:bc:34:3c:58:83:ec:d2:56:63:b1:95:ba:
07:bb:73:a5:e1:da:46:8f:bd:05:ca:e5:6f:e5:18:
fa:32:76:72:d0:9c:6e:09:f7:6f:b4:a0:ba:10:ca:
48:35:4a:5c:3b:4a:e7:cf:f3:24:48:80:c0:e9:ce:
43:b3:bf:3d:e9:39:29:73:c5:25:33:a2:ea:fa:e6:
d4:69:4e:5c:ee:a7:35:f3:b7:c1:6c:a3:b9:77:dd:
d1:31:1b:66:7b:a7:d0:a9:97:46:b7:28:de:c2:90:
e8:45:3a:58:29:37:78:5b:42:19:2a:51:20:84:60:
11:79:4d:4b:e7:72:92:82:02:cb:b5:bd:39:ea:bc:
95:f8:76:54:1c:ec:82:30:04:ba:85:22:7b:b9:d8:
87:20:95:07:91:7b:27:b0:4a:4a:92:6f:5e:52:08:
b6:eb:2a:4d:9f:62:a9:8d:6b:1b:6d:02:8f:ec:13:
b2:90:96:5a:ec:54:2e:b3:92:4d:05:c9:08:77:1f:
98:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:27:83:8F:A1:9D:54:F8:46:37:D3:AA:54:90:78:BC:D9:5F:B9:98
X509v3 Authority Key Identifier:
keyid:B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:12:2b:45:3b:5f:77:ad:34:03:21:f3:6a:2d:51:57:7d:7b:
4e:67:e0:86:48:51:fa:36:08:32:09:1b:e4:50:d0:a8:6d:28:
43:9f:f3:7c:0d:83:2f:9c:75:41:da:e3:8f:1e:42:34:33:dc:
5f:3a:40:88:4b:e3:fa:ae:36:b8:9d:ff:0b:72:46:78:72:86:
cb:77:8c:11:65:d4:80:3a:80:c4:9a:02:f4:e4:94:8f:bd:1a:
af:1c:af:c2:f6:0a:45:6f:9f:89:b8:a5:25:98:50:85:52:16:
02:d5:99:ae:9f:66:fa:0a:8f:5d:61:d4:f3:5d:c0:f0:05:9f:
55:71:8c:70:df:39:8c:68:fc:50:48:34:5c:a2:06:72:df:7c:
34:90:8a:1b:2e:56:51:37:10:e4:45:36:a8:90:78:71:03:8f:
61:aa:26:18:39:cc:61:0c:ff:6a:6b:ab:73:f4:ad:ab:a7:99:
54:cf:8f:77:aa:c4:d8:82:ff:6d:38:6e:9b:a2:a7:35:c4:9a:
1f:6b:2b:9f:7e:67:10:d9:01:1f:43:25:db:7a:e7:e4:5a:43:
2f:70:53:69:5c:16:f2:9f:3a:a9:ad:8a:ad:5b:b8:06:5d:be:
72:e5:b7:44:4c:74:93:8a:03:b7:38:a3:39:f1:f0:bd:5a:d2:
a6:2e:74:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:12 2026 by rpki-client