
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
File: Te4INvoPfuksLmpsGYAW3oz4vxY.mft (raw, json)
Hash identifier: i9NU0Z0qOnwYrjDa9GJ52XSa1iPfg4sqtLN61aXJciM=
Subject key identifier: F9:07:DF:7E:B1:01:75:C1:DE:AE:8B:A5:63:4A:CF:BC:51:E3:82:80
Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16
Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16
Certificate serial: 0235
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
Manifest number: 0224
Signing time: Sun 05 Apr 2026 02:26:36 +0000
Manifest this update: Sun 05 Apr 2026 02:26:36 +0000
Manifest next update: Sun 12 Apr 2026 02:26:36 +0000
Files and hashes: 1: Te4INvoPfuksLmpsGYAW3oz4vxY.crl (hash: 5sH6DMV8yD07P2nzmps6mOd2lR3k8Cm706kDK3NvY1U=)
2: 9BC1D2907EDF11EE86C6A27BC4F9AE02.roa (hash: /sW7La6h9x+hyUPvzqNyMJ8vxN6nXJwOe40nIYe1WC0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl
rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:26:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171D3C, serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16
Validity
Not Before: Apr 5 02:26:36 2026 GMT
Not After : Apr 12 02:26:36 2026 GMT
Subject: CN=69d1c85c-f31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:02:7f:17:16:99:9b:90:95:a5:38:a2:4e:
7b:b6:8f:53:a2:ae:55:14:a1:91:b3:cf:02:12:66:
20:ad:d8:09:9d:97:aa:ea:8b:31:e7:39:54:08:ea:
42:13:78:71:7a:21:b3:82:7b:bb:c0:91:f6:ed:71:
2b:15:17:99:17:90:b6:af:71:3f:cd:69:bd:ef:04:
14:17:f1:c7:af:03:39:e9:90:b7:6a:22:10:e8:af:
36:31:0a:a9:ae:30:20:c4:e4:95:f1:fc:27:b0:d5:
26:9e:69:bf:38:f5:c3:af:60:1d:64:f3:43:f9:41:
c1:8e:2a:ec:56:d8:e7:37:da:64:f4:de:13:5a:2f:
9d:64:1c:c5:21:a8:ad:0d:17:ea:b4:53:7a:9a:98:
b3:f5:1e:65:76:1b:e7:34:48:06:0b:a1:00:9f:01:
ef:3a:47:28:aa:1a:db:c8:ee:43:50:59:a7:65:5f:
a7:af:32:0c:d9:04:df:04:5e:21:7a:e1:7d:13:73:
62:5f:7f:bd:6b:10:8d:28:e2:21:ab:95:43:9a:05:
b4:e8:69:24:3a:bf:97:9d:76:06:08:c9:16:19:9a:
43:8c:20:98:87:21:86:87:3c:ca:93:d8:5d:6f:0e:
70:90:b2:86:c6:cd:07:a0:71:79:ba:5b:f7:14:92:
d9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:07:DF:7E:B1:01:75:C1:DE:AE:8B:A5:63:4A:CF:BC:51:E3:82:80
X509v3 Authority Key Identifier:
keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:02:62:4f:99:3f:b5:33:d2:ab:25:a0:80:d1:88:24:27:b8:
a6:e7:0c:64:84:8c:dd:af:d9:38:f9:c9:a0:e3:0c:1b:0c:77:
13:7f:ee:c4:00:18:3d:9a:3b:27:9d:78:62:af:ee:7c:de:eb:
ab:92:5e:8e:9a:16:7f:70:75:00:3d:a3:9c:ad:b3:61:c1:55:
d7:16:58:81:f6:e5:1a:a4:dd:4d:12:90:4a:e9:ed:29:d6:7a:
d5:d6:61:97:db:73:f3:a5:f8:10:51:a8:06:8b:d8:b7:c4:f0:
86:4b:37:ca:ed:3a:ec:3b:61:97:e4:a0:12:3e:6f:a5:e6:8d:
27:0b:26:5c:f8:3a:7a:41:90:80:22:b8:f0:b5:d4:27:3a:55:
38:f1:b8:9c:d8:e1:a2:b7:1c:69:34:1f:2b:33:62:a8:a3:c4:
fd:20:eb:81:43:e1:ac:74:03:f8:4d:ed:8a:06:c0:91:d0:bd:
2a:98:62:b1:ce:fc:aa:ee:0d:8f:e2:45:da:2c:8a:cb:7d:e4:
4d:d2:e0:13:c2:9f:34:80:bf:3f:82:c3:d0:77:85:0c:32:cf:
3d:d1:72:73:fa:07:d5:0a:a8:36:47:39:7d:45:d4:ef:0c:4a:
26:58:bf:9e:ad:d4:b9:2d:2e:1f:f8:d2:0c:9e:61:2c:d3:a2:
59:d5:5f:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzFEM0MxMTAvBgNVBAUTKDRERUUwODM2RkEwRjdFRTkyQzJFNkE2QzE5ODAxNkRF
OENGOEJGMTYwHhcNMjYwNDA1MDIyNjM2WhcNMjYwNDEyMDIyNjM2WjAYMRYwFAYD
VQQDEw02OWQxYzg1Yy1mMzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo5kCfxcWmZuQlaU4ok57to9Toq5VFKGRs88CEmYgrdgJnZeq6osx5zlUCOpC
E3hxeiGzgnu7wJH27XErFReZF5C2r3E/zWm97wQUF/HHrwM56ZC3aiIQ6K82MQqp
rjAgxOSV8fwnsNUmnmm/OPXDr2AdZPND+UHBjirsVtjnN9pk9N4TWi+dZBzFIait
DRfqtFN6mpiz9R5ldhvnNEgGC6EAnwHvOkcoqhrbyO5DUFmnZV+nrzIM2QTfBF4h
euF9E3NiX3+9axCNKOIhq5VDmgW06GkkOr+XnXYGCMkWGZpDjCCYhyGGhzzKk9hd
bw5wkLKGxs0HoHF5ulv3FJLZwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPkH336x
AXXB3q6LpWNKz7xR44KAMB8GA1UdIwQYMBaAFE3uCDb6D37pLC5qbBmAFt6M+L8W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzQy8xMjcxNTdGMjA1
NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1a3NMbXBzR1lBVzNvejR2
eFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RlNElOdm9QZnVrc0xtcHNHWUFXM296NHZ4WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MUQzQy8xMjcxNTdGMjA1NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1
a3NMbXBzR1lBVzNvejR2eFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANQJiT5k/tTPSqyWggNGIJCe4pucMZISM3a/ZOPnJoOMMGwx3E3/uxAAYPZo7
J514Yq/ufN7rq5JejpoWf3B1AD2jnK2zYcFV1xZYgfblGqTdTRKQSuntKdZ61dZh
l9tz86X4EFGoBovYt8Twhks3yu067Dthl+SgEj5vpeaNJwsmXPg6ekGQgCK48LXU
JzpVOPG4nNjhorccaTQfKzNiqKPE/SDrgUPhrHQD+E3tigbAkdC9Kphisc78qu4N
j+JF2iyKy33kTdLgE8KfNIC/P4LD0HeFDDLPPdFyc/oH1QqoNkc5fUXU7wxKJli/
nq3UuS0uH/jSDJ5hLNOiWdVfJQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:21:10 2026 by rpki-client