
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json)
Hash identifier: S0bOcKoS68tUFFw5O+G/AOnbr+IQO9dgPaz82MlT3Qs=
Subject key identifier: E6:39:B3:41:46:EE:A4:5E:D9:E7:66:49:A7:80:B8:03:83:EE:6C:F5
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial: 1A59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
Manifest number: 183A
Signing time: Sat 28 Feb 2026 16:54:30 +0000
Manifest this update: Sat 28 Feb 2026 16:54:30 +0000
Manifest next update: Sat 07 Mar 2026 16:54:30 +0000
Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: j6hUo1x4DIDb0qW+owc2dPetVSiRN278KXIXCt9alpw=)
2: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: Y+I6xs+Ghxp/nManyHpMLzBR6d+9ACgxr4bM9Tk/9sc=)
3: 11E8BC20FFE611F0A90394AA756F56BC.roa (hash: vppnJfYJe6zVwO+h6lFIzWjo2MRbQB2VJ2ft+A/VSmc=)
4: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=)
5: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=)
6: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=)
7: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=)
8: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:54:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6745 (0x1a59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Validity
Not Before: Feb 28 16:54:30 2026 GMT
Not After : Mar 7 16:54:30 2026 GMT
Subject: CN=69a31dc6-623a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:0c:09:88:46:22:75:5e:9d:ac:4d:d8:c4:
92:5a:36:10:94:ca:8b:f5:54:d1:cc:0f:2d:5a:98:
4a:86:77:ba:cb:c7:c8:c6:ec:04:75:7a:2c:81:f7:
cc:4b:09:71:58:85:d4:90:cc:f4:95:82:4a:5e:27:
57:a7:34:5c:03:49:cf:cd:85:0f:53:26:4f:81:11:
73:0a:f5:3f:30:fe:e0:e8:a8:ac:cd:00:e9:3d:c0:
50:da:ae:16:02:81:32:10:56:af:06:95:f3:77:9d:
86:7d:b4:61:4e:da:43:78:f0:c8:65:c6:78:01:60:
3a:6e:be:45:c5:e3:6b:36:08:16:cc:dd:be:07:72:
6d:1e:7c:fa:fd:0d:7b:e6:ae:43:b9:0a:a2:65:e7:
79:64:45:56:e6:8d:30:ad:2b:30:bb:e0:48:c9:48:
f5:48:f4:83:c5:5d:ae:7d:f7:f3:5e:72:c7:77:0f:
cb:dd:87:64:d8:cc:33:33:ee:cb:53:92:96:e3:e7:
3a:28:64:80:ad:53:84:ee:e8:1d:72:2c:69:12:ef:
b6:41:3d:7b:dd:8b:e0:4a:3f:c3:5d:22:f6:7b:28:
86:8b:4a:17:60:58:c7:52:05:fc:44:a8:40:51:60:
7e:8c:02:52:5e:63:b9:61:f2:cc:3e:36:89:52:78:
b7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:39:B3:41:46:EE:A4:5E:D9:E7:66:49:A7:80:B8:03:83:EE:6C:F5
X509v3 Authority Key Identifier:
keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:dd:a7:e7:5b:6d:ff:1a:a3:f7:af:f4:e0:5c:33:b1:1a:17:
20:4e:38:9b:a3:d5:27:cc:bb:16:bf:54:a7:0b:f5:47:da:2f:
ca:08:aa:38:68:c5:7f:2b:6e:d3:ec:0e:93:fe:3b:13:74:c7:
de:f1:0a:b7:63:c3:06:98:67:7b:cd:ca:31:85:79:a7:22:84:
c1:0a:be:71:66:b8:7d:27:e8:27:9d:10:84:de:47:4f:06:ab:
6f:33:21:29:e2:7f:00:3c:50:58:c8:4b:04:2d:f5:73:13:fb:
74:94:3f:90:5e:61:04:07:ac:ed:80:e9:2d:b1:af:89:aa:5a:
28:ed:94:c3:92:3f:59:6c:dd:93:d0:8d:43:75:12:dc:ad:73:
58:f9:57:3a:1b:58:c2:44:e5:8c:83:f4:3a:f8:86:8b:0f:8f:
e2:48:11:0d:a2:05:c8:e0:74:f3:96:5c:83:5e:1b:3e:90:f4:
8e:28:96:a9:e8:49:c4:48:11:8f:65:2c:58:54:af:cc:06:2f:
a8:88:e5:c8:be:62:c0:fa:4b:68:73:6d:ba:c5:cd:b6:26:c7:
a6:b9:94:23:1f:6f:53:a0:a4:b1:cb:43:e2:fc:30:95:62:40:
cf:ac:09:fd:b3:45:9c:80:b9:ad:82:a3:9c:67:ca:92:29:66:
9e:3b:7d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:02 2026 by rpki-client