
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
File: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft (raw, json)
Hash identifier: ysImD3LJcU6GE4ox0ASvx59N5C6h0QM2Z8h1ju6BxmU=
Subject key identifier: 7B:1E:47:B7:E7:2F:17:16:0E:A5:1F:F1:77:1B:AE:EC:97:C5:CF:EB
Authority key identifier: 4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
Certificate issuer: /CN=A9176C8F/serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
Certificate serial: 0135
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
Manifest number: 012E
Signing time: Sun 29 Mar 2026 05:18:31 +0000
Manifest this update: Sun 29 Mar 2026 05:18:31 +0000
Manifest next update: Sun 05 Apr 2026 05:18:31 +0000
Files and hashes: 1: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl (hash: ZXtSiHwrV7fm460gA0s3sn8PNrt9eNoGxAuMYEEvaIk=)
2: 4E9597086B5C11EFABB11F60C4F9AE02.roa (hash: xaj9ev9gObxEarMjWAx7hyuUavQ9BGr2NQce4XrNjSg=)
3: 43749A72824E11F0A1C4B018C4F9AE02.roa (hash: o9Xs3io38RTaw4LTZVDWVNHdH5+V8NMTsg37SGZ03EY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl
rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 05:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176C8F, serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
Validity
Not Before: Mar 29 05:18:31 2026 GMT
Not After : Apr 5 05:18:31 2026 GMT
Subject: CN=69c8b627-4935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:01:94:a5:c1:ae:e3:45:1b:c1:dd:4d:a2:
38:a1:5f:55:a2:07:4a:01:2a:0b:30:01:ae:3e:be:
92:10:3f:8c:be:72:01:dd:3b:db:82:8f:38:4d:f8:
5a:eb:ae:0d:3c:f5:90:b5:0e:ec:71:ba:c9:ce:3c:
aa:cd:fb:be:e0:b3:d0:1b:85:e4:48:26:92:c5:86:
d9:07:15:5e:85:35:3d:9a:0a:c0:4a:af:5a:4e:e6:
3e:7e:f4:c5:cf:92:54:b8:ba:38:b1:cb:38:e4:9b:
38:00:11:d5:fd:84:4f:37:0b:38:1b:c0:78:e9:22:
fc:04:6a:31:71:a3:0f:6c:1a:dd:ed:8a:48:74:9a:
d9:1d:36:3c:d7:45:ff:89:5b:39:d4:f6:0c:c1:1f:
b7:33:dd:cc:3d:84:37:97:c9:17:fa:bd:b6:ca:db:
32:10:22:fa:11:a1:42:91:d7:6d:a9:32:38:95:fd:
8c:c2:4c:30:c7:98:c6:dd:16:8b:f8:2c:40:24:38:
09:ba:c4:16:c7:32:a2:b3:56:73:8c:b8:9d:90:a4:
82:ca:7d:62:e1:5c:08:ee:25:6a:37:5a:45:73:59:
a9:35:db:32:f2:d2:72:95:4f:d8:e4:1a:07:1d:9b:
63:e6:7e:15:71:d1:5a:ff:91:da:1e:7b:e4:ad:78:
e3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1E:47:B7:E7:2F:17:16:0E:A5:1F:F1:77:1B:AE:EC:97:C5:CF:EB
X509v3 Authority Key Identifier:
keyid:4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f8:f1:e6:3a:03:99:8c:dc:23:b9:d6:7b:7d:5a:0e:ed:3c:
d2:9b:c5:07:3f:f3:c1:b8:21:54:9a:17:9e:54:b5:90:6a:77:
1b:52:f8:bb:4c:af:cf:e2:ef:af:48:f2:05:3d:aa:a2:d6:b5:
40:d9:2a:59:19:9d:87:29:30:42:74:c9:03:c1:a8:85:51:38:
ba:ad:a3:31:74:54:12:66:cb:cf:73:21:03:0d:54:79:b8:0d:
19:2d:1f:85:a2:a6:cb:07:0b:7d:04:08:3a:39:5a:ba:a5:65:
41:2f:97:1e:df:98:2c:09:4d:76:3e:84:d0:50:79:2f:b8:f8:
5e:67:81:24:9d:22:a0:d9:3e:f9:62:59:56:b3:de:ec:34:fd:
f4:70:1c:33:73:f6:76:0f:ea:d5:03:84:a8:5a:fe:bb:c6:f3:
00:37:f1:ca:40:41:32:25:9f:e4:3c:56:9c:0a:e4:63:25:7d:
b8:ff:d1:dc:b2:50:d0:4d:f2:05:e8:6f:63:0e:91:02:33:a2:
9d:be:4e:16:00:cb:d0:89:c9:19:ef:b4:24:8b:e2:10:c3:1f:
e0:ba:79:c2:54:4d:ad:07:64:8a:ef:17:9a:d5:0e:ec:72:8e:
99:d9:21:02:e7:2b:1a:33:f6:77:c4:2c:2e:d8:93:b9:a1:c7:
d7:8c:70:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 01:52:12 2026 by rpki-client