
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
File: TSkgNoEWBfjziJgBUhslcnoc12U.mft (raw, json)
Hash identifier: 8lN0UKtbPoHT/xa+CzNsV8qYG9tQ2NIUGlvSPVtqvEg=
Subject key identifier: BB:D2:9C:9F:C0:04:EE:13:44:32:DC:13:D0:09:AB:3E:F7:E8:61:4A
Authority key identifier: 4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65
Certificate issuer: /CN=A9154DE2/serialNumber=4D292036811605F8F3889801521B25727A1CD765
Certificate serial: 0409
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
Manifest number: 0402
Signing time: Sat 03 Oct 2026 00:42:01 +0000
Manifest this update: Sat 03 Oct 2026 00:42:01 +0000
Manifest next update: Sat 10 Oct 2026 00:42:01 +0000
Files and hashes: 1: TSkgNoEWBfjziJgBUhslcnoc12U.crl (hash: Opw5liN3t8Bjy5KDBWIcqe4NZz294KG90KyGQ5AyBmI=)
2: EB4F77B8D5E411ECB31AC843C4F9AE02.roa (hash: osHneI9FvoCZRKQxl7txl+jB8Ly+Es1NyoWP2eT8CMg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl
rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1033 (0x409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154DE2, serialNumber=4D292036811605F8F3889801521B25727A1CD765
Validity
Not Before: Oct 3 00:42:01 2026 GMT
Not After : Oct 10 00:42:01 2026 GMT
Subject: CN=6ac04f59-c94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:ab:b5:8c:33:6d:7c:23:ab:81:99:d9:25:
eb:f4:d8:ff:c4:39:79:6e:a6:25:d6:80:a5:0f:f1:
ec:e4:10:b9:23:24:69:ac:4b:14:13:d1:92:8c:d2:
16:42:69:b3:8f:a4:38:df:af:39:36:26:44:e3:fe:
e9:9a:5d:2a:6b:f5:d7:95:b3:d0:54:eb:0c:b2:1f:
c8:d3:36:65:45:04:11:7d:5d:b5:37:0c:b4:09:65:
25:eb:3f:07:eb:2c:03:d5:03:86:ef:2b:98:23:5a:
1a:7a:07:28:f9:0a:53:e0:52:e5:b0:83:2f:cf:ec:
3a:c0:8f:b7:98:9c:af:80:72:fe:5a:f4:63:84:5e:
77:dd:a4:fe:12:f9:a2:f5:00:d4:61:79:25:98:a0:
2b:8f:92:0f:6c:9e:4f:b8:34:57:6d:fc:10:63:c4:
11:57:d8:bd:5e:20:a9:89:20:8d:d3:4d:d3:25:1e:
c0:71:b0:e8:8e:41:ba:17:a9:16:0f:cb:62:d5:82:
db:3a:bb:4a:07:d6:bd:67:f4:5e:57:0e:03:e4:a8:
db:94:2b:24:e3:2f:e4:08:1e:fb:a5:a1:c7:79:19:
df:87:f1:9a:9d:c5:e2:57:ac:80:94:35:6b:94:7c:
ed:43:40:0c:93:3e:4c:2a:d0:7b:06:6a:9f:dd:c1:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D2:9C:9F:C0:04:EE:13:44:32:DC:13:D0:09:AB:3E:F7:E8:61:4A
X509v3 Authority Key Identifier:
keyid:4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:87:ac:7f:83:fa:30:91:3c:f2:d0:e0:da:d1:d2:6b:a5:61:
cb:ca:8f:8b:ab:b7:14:9b:8e:4a:93:26:b2:d4:aa:b3:85:8f:
5d:81:d6:25:db:bf:90:ae:70:64:0f:21:d1:6b:43:80:ce:9e:
44:78:81:e1:a8:9b:55:56:aa:74:9e:d3:79:b9:ed:83:05:12:
9d:39:75:8e:d9:b2:50:73:6d:09:25:83:14:43:b0:0c:33:cc:
07:08:22:7a:55:8e:bf:f2:60:a9:a4:a3:d6:4b:6b:09:ab:0a:
5d:e2:fa:99:31:2e:13:6a:69:c9:b3:26:73:dc:c5:a2:cf:82:
09:e5:cb:99:7e:9e:97:58:31:d6:80:a4:58:01:40:11:30:f9:
ac:5a:ce:d2:e0:a9:bc:69:f7:99:64:7b:d9:1f:6a:03:89:2d:
6f:8c:e3:d3:4c:58:6b:8c:45:3d:ef:cd:ae:aa:cf:6a:46:dd:
40:63:8e:c4:79:68:78:b5:a7:1d:1e:31:c6:b2:43:91:4f:61:
81:c3:0d:e5:a3:e3:5b:46:43:51:dc:f2:12:f1:b7:d7:f9:39:
34:73:2d:d5:29:88:6c:9b:54:15:0f:76:ed:69:2d:6c:9a:c0:
8d:3d:99:19:c1:f2:99:bd:ba:8f:62:84:61:d8:19:2b:8e:80:
51:d9:fd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:05:03 2026 by rpki-client