
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
File: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft (raw, json)
Hash identifier: UyvJtfoc0ml0w/JcfmCEYijIcbFdPcMv3st3Mv8nlVs=
Subject key identifier: 8B:5E:D4:28:E0:BB:42:95:E7:0D:E3:FA:BB:9A:22:7D:FA:BF:41:85
Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9
Certificate issuer: /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9
Certificate serial: F7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
Manifest number: F1
Signing time: Tue 21 Apr 2026 06:14:33 +0000
Manifest this update: Tue 21 Apr 2026 06:14:32 +0000
Manifest next update: Tue 28 Apr 2026 06:14:32 +0000
Files and hashes: 1: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl (hash: 4Hc3Wwb/FZULj/EmbrD91/CXYZ3ylU50VQiJxkjYNIY=)
2: 240B1914D90B11EF95020982C4F9AE02.roa (hash: 0gHNtWChBEUR4YEQpsBzxLagBwCzjHIiYU13EWlRZC8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl
rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9
Validity
Not Before: Apr 21 06:14:32 2026 GMT
Not After : Apr 28 06:14:32 2026 GMT
Subject: CN=69e715c9-a10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:63:31:01:18:0b:f6:e2:c3:7b:a1:bd:ad:b0:
be:8d:db:1a:2d:ed:3a:25:98:5c:62:dd:f6:06:af:
18:9c:8b:b6:e9:0d:02:74:02:e1:ca:9f:c2:4c:93:
73:23:cc:5f:bd:8f:82:70:40:0d:1e:26:5d:1b:a9:
96:73:b6:54:ee:8d:d4:11:36:3a:dd:ea:7e:e4:f0:
2e:1b:84:1c:87:32:f2:b5:cd:a8:7b:00:84:86:f3:
31:d5:57:c3:88:d5:f5:52:b3:e5:7e:0c:9c:28:7d:
0b:3c:4b:b0:ec:17:48:28:59:d3:45:31:a5:bb:f9:
41:df:0f:4d:92:9d:ca:7d:fe:42:b2:df:db:8a:02:
ba:cb:03:0d:ab:70:49:17:9a:95:ff:26:d2:28:ce:
70:a1:66:d6:45:90:b0:7d:e4:52:d5:bb:d6:7f:11:
e2:f8:e6:12:9d:16:26:22:98:81:2c:65:e5:39:65:
32:db:79:37:52:2d:3d:9d:5f:d4:12:9e:2d:03:2a:
8c:c2:96:50:d4:e3:68:a7:2c:bb:6d:26:f2:6d:a5:
34:d4:cb:a1:19:19:e8:4c:13:2c:87:76:ee:39:39:
eb:99:48:97:e9:72:ae:d5:3e:76:d5:8c:93:09:57:
e4:bf:f5:9b:30:08:91:02:2d:33:28:8f:43:4b:04:
ec:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5E:D4:28:E0:BB:42:95:E7:0D:E3:FA:BB:9A:22:7D:FA:BF:41:85
X509v3 Authority Key Identifier:
keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ca:2c:d3:14:6a:0a:68:20:ec:c6:9a:0b:f1:a5:81:0b:5e:
75:87:e6:8a:25:33:e9:f6:d0:85:c9:c4:4e:84:5f:9b:37:d8:
6a:18:23:ab:be:c9:fd:9b:8b:1a:06:b4:6e:3f:51:23:3a:5e:
fd:d7:d9:c2:53:46:57:d5:17:8e:eb:a0:a8:38:25:09:71:14:
c6:81:5f:e5:7c:c1:b9:b1:84:4c:ae:66:14:a8:cf:20:13:04:
39:be:f5:21:d5:07:20:19:dc:27:a3:f3:32:e4:56:4e:6f:55:
24:b5:2b:bc:99:81:14:bf:c3:1c:e2:9d:d8:f3:f0:a5:c8:7f:
26:ca:68:64:e1:2d:16:8e:ce:94:1c:26:fc:c8:49:91:3b:d8:
0e:31:4a:0e:7a:5a:3c:0b:cc:d4:b7:64:07:99:9b:a1:6b:1c:
30:b9:4e:61:e2:a2:48:fe:08:0f:8c:d2:94:c4:97:3c:7a:cf:
16:bb:39:63:0b:f2:92:68:ed:69:61:79:71:ec:bb:41:bf:3b:
28:70:6b:b3:73:a8:4d:67:35:c2:9b:06:15:48:37:37:f7:67:
3a:be:a7:dd:81:31:85:0e:f6:fa:e7:95:27:9f:f2:5a:31:aa:
73:6d:42:ff:a6:e3:aa:e0:8a:50:0c:6b:17:47:aa:9b:59:c7:
48:5a:fb:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMxNjExMTAvBgNVBAUTKEI0OUIyQjExRDM4NzZERUNERTEzRjVFOEY1OUU2NDFB
N0QwOTNGQjkwHhcNMjYwNDIxMDYxNDMyWhcNMjYwNDI4MDYxNDMyWjAYMRYwFAYD
VQQDEw02OWU3MTVjOS1hMTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6GMxARgL9uLDe6G9rbC+jdsaLe06JZhcYt32Bq8YnIu26Q0CdALhyp/CTJNz
I8xfvY+CcEANHiZdG6mWc7ZU7o3UETY63ep+5PAuG4QchzLytc2oewCEhvMx1VfD
iNX1UrPlfgycKH0LPEuw7BdIKFnTRTGlu/lB3w9Nkp3Kff5Cst/bigK6ywMNq3BJ
F5qV/ybSKM5woWbWRZCwfeRS1bvWfxHi+OYSnRYmIpiBLGXlOWUy23k3Ui09nV/U
Ep4tAyqMwpZQ1ONopyy7bSbybaU01MuhGRnoTBMsh3buOTnrmUiX6XKu1T521YyT
CVfkv/WbMAiRAi0zKI9DSwTsAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIte1Cjg
u0KV5w3j+ruaIn36v0GFMB8GA1UdIwQYMBaAFLSbKxHTh23s3hP16PWeZBp9CT+5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE2MS83MTMyRUY5QUQ5
MDcxMUVGQjI3Rjc4NTdDNEY5QUUwMi90SnNyRWRPSGJlemVFX1hvOVo1a0duMEpQ
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3RKc3JFZE9IYmV6ZUVfWG85WjVrR24wSlA3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzE2MS83MTMyRUY5QUQ5MDcxMUVGQjI3Rjc4NTdDNEY5QUUwMi90SnNyRWRPSGJl
emVFX1hvOVo1a0duMEpQN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAasos0xRqCmgg7MaaC/GlgQtedYfmiiUz6fbQhcnEToRfmzfYahgjq77J/ZuL
Gga0bj9RIzpe/dfZwlNGV9UXjuugqDglCXEUxoFf5XzBubGETK5mFKjPIBMEOb71
IdUHIBncJ6PzMuRWTm9VJLUrvJmBFL/DHOKd2PPwpch/JspoZOEtFo7OlBwm/MhJ
kTvYDjFKDnpaPAvM1LdkB5mboWscMLlOYeKiSP4ID4zSlMSXPHrPFrs5Ywvykmjt
aWF5cey7Qb87KHBrs3OoTWc1wpsGFUg3N/dnOr6n3YExhQ72+ueVJ5/yWjGqc21C
/6bjquCKUAxrF0eqm1nHSFr7fg==
-----END CERTIFICATE-----
Generated at Wed Apr 22 05:28:42 2026 by rpki-client