
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json)
Hash identifier: jQ0afjJPBut61u0zGAhRg7GgAHGnCQUoSwAMorq8X5g=
Subject key identifier: 49:8C:75:31:CD:9C:FE:46:13:4E:E6:73:74:90:18:5A:D2:56:85:78
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial: 04E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
Manifest number: 04AE
Signing time: Fri 06 Mar 2026 23:46:59 +0000
Manifest this update: Fri 06 Mar 2026 23:46:58 +0000
Manifest next update: Fri 13 Mar 2026 23:46:58 +0000
Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: NenD3C9XJ/HXGVRfL62+kRZZ1YiDguOSOoHtOhy7nFM=)
2: 942DCEF2FC0B11F0BEECCDA4756F56BC.roa (hash: J5KApiO82LjzqeOhyJKbcpqwAb46zG+PlR5LTK867CE=)
3: C3CDE52C01D611F1B315EDD8366F56BC.roa (hash: 3d/B1cImc/RFP7X2DoDqV9LtQ79OxGVpr8nJEv4LRf4=)
4: 98CF37B28F0E11F0880D4780C4F9AE02.roa (hash: uKQ3Os5h8Ciy1ALccS2eT5zdXu6OgoHV6FkwnLjZ7Y0=)
5: E9616980121B11F19EC23EC11C3D8C67.roa (hash: KFfs3jutC9rYjrXOHZ8eYzPy4meG6duo+32x4C1iZzc=)
6: A6E8B05401D611F1A42696D7366F56BC.roa (hash: YEAiHBQjv0Zqw7hAyBqvx7s0VzUV/cItMf0F3kX5g2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 23:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1253 (0x4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Validity
Not Before: Mar 6 23:46:58 2026 GMT
Not After : Mar 13 23:46:58 2026 GMT
Subject: CN=69ab6773-a497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bf:28:1f:a9:fe:7d:f0:d1:1b:02:1b:a5:b3:
52:87:7d:0b:d0:bb:ca:cf:39:b9:d6:39:02:ab:f5:
49:56:ef:94:e8:e0:0b:91:e1:aa:4a:e1:7c:97:be:
d4:92:55:6b:99:69:d0:1f:45:4f:e3:56:4a:a2:17:
53:9f:23:34:63:78:d3:6e:09:77:b0:88:8c:7d:08:
06:5d:db:be:91:29:24:8f:5d:36:82:99:b2:44:ab:
ea:11:5b:f2:10:72:57:a5:a9:eb:b9:a0:17:59:2d:
1d:66:4a:f4:f5:bc:01:13:f5:e2:f4:af:d6:74:e4:
03:99:7d:d5:76:c9:11:d4:6f:2f:00:34:f7:dc:43:
9a:17:77:d0:fa:d0:82:76:25:ef:7d:93:9e:17:4f:
d7:9b:35:15:38:47:5b:27:6c:d8:51:58:37:53:2a:
5d:c3:d5:6d:82:b5:62:88:af:cf:bf:3d:1a:8e:57:
11:3a:52:9f:6b:19:49:6d:5c:40:0e:e5:fe:5e:03:
12:4f:e0:2f:12:f2:64:46:ae:f3:7d:ee:1d:01:51:
a1:a7:44:4b:43:34:3b:bf:3a:45:49:56:5b:9b:b8:
b3:44:f1:2a:ec:2e:97:46:36:0b:61:84:a5:29:e6:
2b:4c:dc:b6:8f:af:69:9a:ba:f1:a1:f9:86:f8:f9:
36:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8C:75:31:CD:9C:FE:46:13:4E:E6:73:74:90:18:5A:D2:56:85:78
X509v3 Authority Key Identifier:
keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:72:66:ed:23:17:98:a2:a9:03:5a:68:7f:76:88:b1:5a:7a:
e2:49:e5:33:fc:b9:9f:99:cd:24:8b:18:4b:4b:f3:56:34:d0:
80:0a:fd:3e:7c:14:cd:37:39:3f:3a:84:e7:ec:5f:64:cf:38:
5a:e7:87:d2:7c:3b:ff:0f:b8:e2:75:aa:fb:dd:ca:b3:51:9d:
d6:9a:c6:58:57:51:97:4d:8c:50:ca:db:7d:4d:86:59:92:80:
82:04:de:95:f2:5b:bf:4e:51:64:53:db:09:35:6e:4c:7e:a9:
f1:da:98:a6:35:17:94:11:2a:83:9a:9b:e3:f1:63:6a:92:1a:
c3:83:be:63:cf:1e:70:96:2e:c0:21:4d:69:c1:1b:bd:e0:d4:
d6:62:5a:a7:58:88:aa:e3:a8:50:f3:c3:37:07:77:3d:1f:19:
9e:cf:90:12:30:c0:76:1d:57:05:c4:f0:44:7d:ce:39:c4:c9:
38:fe:4f:5f:cb:d9:d8:25:73:ba:b2:8e:e0:2e:85:7d:59:ba:
87:9d:08:aa:98:f6:4a:12:20:2b:8b:d8:ec:ea:ab:fd:49:96:
a9:11:81:7b:c6:5c:f8:8a:a8:52:8a:a4:36:c0:3b:4d:58:f9:
91:29:eb:24:66:c7:34:19:28:2c:5c:2f:db:b5:f7:10:2b:21:
a2:f4:f9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 20:53:15 2026 by rpki-client