
$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
File: TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft (raw, json)
Hash identifier: zG7JNX+Uf0ZOURZU+gV3ln7vsELHknGcS4gGGkpeSq0=
Subject key identifier: A2:95:6F:C2:D9:78:9F:16:A3:26:34:D5:94:7D:69:15:3E:56:A8:53
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial: 3631
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
Manifest number: 3593
Signing time: Mon 20 Apr 2026 14:56:20 +0000
Manifest this update: Mon 20 Apr 2026 14:56:20 +0000
Manifest next update: Mon 27 Apr 2026 14:56:20 +0000
Files and hashes: 1: TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl (hash: rS/us0p+VdXX8mWRbcdom/Hqf+OnlKw/PRcfQ67OAdY=)
2: 502A4A36AAA611EE998EEF3AC4F9AE02.roa (hash: rJcH7U56XuZEecskwbJvsdvGpT+jiKhjpWcLXzO0cjk=)
3: D85FB84853BE11EF819E6347C4F9AE02.roa (hash: fWuhRWvQ3Edrdp8Xh2OPG31qXzaHDm9E0X4C1jpzpIA=)
4: 9427EF0A7CA411F09AE49B57C4F9AE02.roa (hash: Lh6oS48kKqVmyqex9gqFtgZ4m13NOn4qQbQx9k6l4Fo=)
5: 78488CF4AD7411EAB93BA123C4F9AE02.roa (hash: XlwaXG0CLLlJ3jhue1QTDVM5EZboLImWAg1GFuaWpAc=)
6: 586B5D9ED9F811E9A6874F46C4F9AE02.roa (hash: 7zglLDP11gzpQTB1+7hilO7iWT3HFWV4SBuiijDuHdQ=)
7: 49FEE4EA83CC11F09BE0565EC4F9AE02.roa (hash: eQqXfw7KpOOBP+Td93jgjIhVJNu+VT2VfIFdrctBg/A=)
8: B64F4796C6A411F08CECEE7AC4F9AE02.roa (hash: 9Jynqmi/gB99jci6ggMyKRV6Dkc/gMa93AFgdesb6v0=)
9: CD072488981C11F081BD5721C4F9AE02.roa (hash: cxBmEBTcBfMyyvAlB+eLC5fqMYrlz3kg2+JupwPAjOA=)
10: C32EFEC617A211F19C2A0006323D8C67.roa (hash: A2O1ksquVn5Ms9ttsYq8s1cge74wxeUlGkxPG701xZk=)
11: ABE74AD463B111F0B7B37637C4F9AE02.roa (hash: QhAtb7RZdyqizEHTl7ia1E+ChVek7Dqp9PT6kKKvmME=)
12: B55C1B0CC6A411F0A408EE7AC4F9AE02.roa (hash: X1b91kjhN2zv6W6/j8hQrToM9JGJxLjczB6EqHMIOWY=)
13: E2A6885AABA111EAB7C51982C4F9AE02.roa (hash: 8YElfuPm+hdksAg1+pFS3ilrSanU7z1LehRzNHr86x4=)
14: 9A05BA12D86B11E9B8BFCE0AC4F9AE02.roa (hash: gGhukCL6lx8yYMc3XoZXuAuKGy5qCMkAQFaNYx2UVBo=)
15: 4754ED7C16BF11EBB31D5A6AC4F9AE02.roa (hash: ZJcFcxd06hMO8B2ugrVOha+QcsYL5Uhm5p6cGyGTG/c=)
16: AA7E3F9017A211F1926DA6A3313D8C67.roa (hash: OS3QBd1KBjVue1TsCQI+ygNSnecMtRq+5PQovPP87f0=)
17: B5DAF292C6A411F092F1EE7AC4F9AE02.roa (hash: ZOE+ul17pVmegkb++bJCcAeEY8oGwonKzzJtuNTmLFQ=)
18: E205744CABA111EAB7C51982C4F9AE02.roa (hash: maoC/CPKGCGNHLen8pJwPD1KgmFNilHCq14nhz/BxFg=)
19: D7F4292A53BE11EF819E6347C4F9AE02.roa (hash: Ue/t1PP419JlxBz1cKkLY7GRQHiNwZY7sf9eJ0m5LyI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 14:56:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13873 (0x3631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Validity
Not Before: Apr 20 14:56:20 2026 GMT
Not After : Apr 27 14:56:20 2026 GMT
Subject: CN=69e63e94-3da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:90:39:3c:23:0f:5a:86:30:55:45:9b:62:52:
b1:2d:51:ef:71:fa:ef:28:e2:af:ec:36:c6:44:c7:
e8:b6:b7:bd:f0:e6:2e:86:57:50:1a:23:63:43:d0:
7f:87:87:58:4f:e1:e8:61:3f:d5:73:01:92:3a:83:
e9:0c:7a:98:f5:7a:ef:54:b0:a1:19:b2:96:48:c7:
d4:16:c7:fe:25:43:54:3e:bb:15:36:e4:04:2b:19:
d9:c3:8e:f3:a1:92:f7:3c:b8:51:67:0b:62:db:46:
c1:72:76:5a:ec:a7:36:e3:9a:58:63:f5:de:fb:07:
b0:9e:93:b0:fe:87:68:7b:17:cd:d7:cb:e0:6a:e9:
95:d9:f7:c5:33:7c:a6:cf:cf:c3:91:fc:a1:cb:9e:
d5:a4:f9:47:03:2a:81:d3:bc:d1:52:e2:77:cb:5b:
89:a3:39:d3:1d:b3:db:b3:1a:42:66:59:7f:6c:e3:
1e:2b:f6:72:e6:3c:ba:e3:27:ae:8f:83:3c:8b:6c:
fe:cf:9d:83:0b:c8:55:05:5b:c6:a6:f2:3d:0d:63:
26:5b:86:75:5c:9f:42:b0:4f:58:b0:0d:d1:4f:0e:
4a:84:3a:69:96:72:1e:92:9f:1c:52:54:e8:0c:0b:
77:58:7d:7a:e3:82:09:4c:0c:0b:38:f6:a4:6e:bc:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:95:6F:C2:D9:78:9F:16:A3:26:34:D5:94:7D:69:15:3E:56:A8:53
X509v3 Authority Key Identifier:
keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:b9:f6:fd:d4:39:70:c0:a1:2c:9c:74:80:3c:98:5d:55:27:
bf:01:4a:b1:dd:ec:aa:54:7e:58:44:e1:32:ae:2d:64:91:07:
e7:7b:67:ce:f3:2f:4d:f3:77:b4:b1:49:68:74:10:43:1c:25:
52:be:42:6b:04:d6:ab:0c:a4:62:86:11:54:09:12:ce:89:df:
b6:db:1a:f9:31:12:5d:d3:34:ac:3f:a4:14:cc:38:18:25:c0:
95:24:8b:a2:0b:87:a5:b6:27:a8:d3:b8:9c:37:8e:ef:c2:18:
b5:7f:c6:07:c0:90:41:f9:be:dc:c0:5e:7f:2e:03:a1:4b:50:
b9:7f:a2:52:39:2e:28:c8:b4:01:8e:34:44:29:96:87:c6:46:
af:a0:59:d7:ca:0e:70:e8:43:dd:d4:5f:61:8b:29:28:ad:8b:
83:4c:83:d3:d2:a3:83:6f:95:5f:20:05:61:06:6b:fa:08:81:
2c:b6:93:2e:5a:0a:77:b7:40:7d:1a:08:00:69:55:29:b6:d5:
a3:1c:16:2c:ab:b0:57:33:8e:84:2b:51:b6:7d:fb:85:7c:c8:
fe:6d:96:fd:c0:ae:17:64:36:73:b9:00:8a:0c:b2:97:ed:77:
01:8b:e6:2b:78:e2:a4:f1:36:a3:27:32:fb:0a:35:82:8f:02:
14:72:b0:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5
QzhGNjU5MEQwHhcNMjYwNDIwMTQ1NjIwWhcNMjYwNDI3MTQ1NjIwWjAYMRYwFAYD
VQQDEw02OWU2M2U5NC0zZGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhpA5PCMPWoYwVUWbYlKxLVHvcfrvKOKv7DbGRMfotre98OYuhldQGiNjQ9B/
h4dYT+HoYT/VcwGSOoPpDHqY9XrvVLChGbKWSMfUFsf+JUNUPrsVNuQEKxnZw47z
oZL3PLhRZwti20bBcnZa7Kc245pYY/Xe+wewnpOw/odoexfN18vgaumV2ffFM3ym
z8/Dkfyhy57VpPlHAyqB07zRUuJ3y1uJoznTHbPbsxpCZll/bOMeK/Zy5jy64yeu
j4M8i2z+z52DC8hVBVvGpvI9DWMmW4Z1XJ9CsE9YsA3RTw5KhDpplnIekp8cUlTo
DAt3WH1644IJTAwLOPakbrwlgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKKVb8LZ
eJ8WoyY01ZR9aRU+VqhTMB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE
OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzgxQS9ENTIxNDI3MDFEOUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJ
MVZKRG12ams0S0NjajJXUTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkrn2/dQ5cMChLJx0gDyYXVUnvwFKsd3sqlR+WEThMq4tZJEH53tnzvMvTfN3
tLFJaHQQQxwlUr5CawTWqwykYoYRVAkSzonfttsa+TESXdM0rD+kFMw4GCXAlSSL
oguHpbYnqNO4nDeO78IYtX/GB8CQQfm+3MBefy4DoUtQuX+iUjkuKMi0AY40RCmW
h8ZGr6BZ18oOcOhD3dRfYYspKK2Lg0yD09Kjg2+VXyAFYQZr+giBLLaTLloKd7dA
fRoIAGlVKbbVoxwWLKuwVzOOhCtRtn37hXzI/m2W/cCuF2Q2c7kAigyyl+13AYvm
K3jipPE2oycy+wo1go8CFHKwkQ==
-----END CERTIFICATE-----
Generated at Wed Apr 22 05:22:37 2026 by rpki-client