
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
File: tSxU1GporezDfV9vJyKMbepz6Fw.mft (raw, json)
Hash identifier: Hfc3knjRuCkWYzTmbDupaK5EeZVdMc97bvN7wZK8VLA=
Subject key identifier: C7:64:EF:1E:B5:6F:C5:AC:62:87:CC:5E:F6:DF:66:8B:70:C3:84:81
Authority key identifier: B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C
Certificate issuer: /CN=A918E79C/serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
Manifest number: 0189
Signing time: Tue 03 Mar 2026 04:07:54 +0000
Manifest this update: Tue 03 Mar 2026 04:07:54 +0000
Manifest next update: Tue 10 Mar 2026 04:07:54 +0000
Files and hashes: 1: tSxU1GporezDfV9vJyKMbepz6Fw.crl (hash: 9GwtBRz9Bwm5+cmNBqnUMuknpiCujak2U8LLLC+DAjI=)
2: 28C6AB84C0E411EEAFFB100BC4F9AE02.roa (hash: Lqj3OiAEZ1NUj5c3pIE9yhxwkfOhtjVIBdNf9vQb1eQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl
rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E79C, serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C
Validity
Not Before: Mar 3 04:07:54 2026 GMT
Not After : Mar 10 04:07:54 2026 GMT
Subject: CN=69a65e9a-51a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:db:49:ae:24:2d:06:a5:f9:7c:59:13:ec:fb:
2e:e0:44:3b:6b:c0:32:12:0b:e1:ac:e0:61:52:63:
e3:65:4f:35:cb:64:5d:b4:88:a4:c2:b3:56:95:b2:
85:6d:74:6a:a2:06:b8:55:7f:07:38:c3:e4:db:84:
82:53:47:45:08:1a:9c:64:8c:eb:f1:f6:f5:d2:b1:
ff:e7:e4:15:be:58:62:c2:11:22:7e:63:31:5f:71:
46:3c:c2:70:ad:d2:60:e0:b4:53:0b:18:ca:20:89:
24:c1:e3:bc:9f:03:d2:fa:b9:d9:5c:d3:cf:ec:94:
22:0c:fe:e9:ef:15:fe:b4:dd:18:85:a8:85:28:6c:
4c:86:bf:aa:63:46:30:19:03:f9:b0:88:40:d2:83:
68:aa:cd:4d:2a:83:cc:50:c0:13:a0:6f:d7:14:10:
de:6a:96:57:8e:c9:b1:f0:77:b4:fb:d4:83:38:3e:
fb:14:6e:19:c1:ac:28:e7:19:81:f5:0b:53:b0:cd:
58:84:fc:ff:4b:32:79:3a:6f:dc:54:2e:88:6f:18:
bb:b2:fa:86:e9:12:58:09:e4:37:d9:9d:c4:68:e3:
25:a0:8e:a2:54:e0:63:a1:dc:60:16:a2:45:c4:f5:
96:b2:28:41:e4:d5:11:0f:cf:67:1b:dd:44:e6:62:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:64:EF:1E:B5:6F:C5:AC:62:87:CC:5E:F6:DF:66:8B:70:C3:84:81
X509v3 Authority Key Identifier:
keyid:B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:42:7f:55:17:67:76:56:b4:1f:e0:9d:b6:e9:1f:f2:cd:ba:
0e:06:c4:a0:f8:96:22:c3:f0:07:f8:1e:a1:e6:2f:5f:b5:64:
8b:49:9a:d8:3d:6d:7c:ed:40:87:c0:a6:05:8c:82:3a:6b:25:
a0:9b:0a:7d:43:9f:c4:23:8f:f3:00:e1:f1:54:44:ff:97:a9:
9f:a9:34:e6:00:0c:78:63:2b:3e:d3:0a:73:2e:46:16:35:6e:
d3:52:81:43:c5:07:2c:51:22:3b:74:16:2d:95:db:6d:d6:57:
0c:ba:57:5d:a1:db:bd:a3:63:4a:02:d7:1e:39:a6:32:8c:9f:
d3:b1:4a:7c:fc:f6:29:83:f0:a2:0b:db:d4:5f:ab:e8:8c:bc:
00:6d:a6:88:0f:2d:71:c4:d0:91:1e:b4:50:b4:55:9c:4e:c9:
60:69:ef:34:0d:07:07:85:24:b6:bb:c9:73:61:00:1f:62:0d:
37:51:31:52:45:77:2e:f7:10:12:3b:78:87:3e:32:6c:a6:c6:
03:c2:e7:61:01:49:9a:57:63:e9:2a:2b:72:f3:be:6c:f4:21:
ad:f5:41:b1:24:eb:5e:65:33:97:a4:91:94:0c:62:ee:94:4a:
65:c9:53:06:82:a2:3a:b9:83:a1:88:88:f9:9f:7f:cd:1c:c3:
53:53:94:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:41:19 2026 by rpki-client