
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
File: tsp04BddZ-Guvoa_44xciY8mK4w.mft (raw, json)
Hash identifier: ngUrSCfcvvEzJQEfIBKkyobS41Yrz8DjSmTcqeLSUX0=
Subject key identifier: B1:0C:37:46:D0:79:11:B4:80:D9:17:0D:51:38:31:98:F9:C2:8E:71
Authority key identifier: B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
Certificate issuer: /CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
Certificate serial: 02DD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
Manifest number: 02C9
Signing time: Sun 11 Oct 2026 01:39:13 +0000
Manifest this update: Sun 11 Oct 2026 01:39:12 +0000
Manifest next update: Sun 18 Oct 2026 01:39:12 +0000
Files and hashes: 1: tsp04BddZ-Guvoa_44xciY8mK4w.crl (hash: WTy9ryULa0Q6daITny0Fm9cwcExfeX6u8prO/6VTdnY=)
2: 1627927480FB11ED9B35954DC4F9AE02.roa (hash: JGThLscl6gYWty7onPVj55tcNOzgZj9wzjYyxf+XyoM=)
3: 158B72F480FB11ED9B35954DC4F9AE02.roa (hash: vCFJH0y2zLT6RtNl1fKrvOFGF6otZx/dSySN5y76muE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl
rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 01:39:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733 (0x2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EA40, serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
Validity
Not Before: Oct 11 01:39:12 2026 GMT
Not After : Oct 18 01:39:12 2026 GMT
Subject: CN=6acae8c1-36c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6e:43:cb:aa:35:84:45:61:e5:2b:80:c3:9c:
2a:59:2a:83:7a:9a:cd:7e:47:c8:66:a0:42:6a:8f:
59:59:59:87:20:8d:5d:ab:b4:2d:e9:6b:e5:ed:c1:
d1:c0:51:15:95:22:f0:8b:c7:b7:25:40:69:21:66:
35:ac:e0:da:bd:36:90:e6:f1:75:62:fb:0d:c3:e2:
db:77:ff:88:78:a2:34:58:7f:ef:0a:90:b4:2b:3b:
09:4e:e4:eb:d8:9e:15:7e:4c:c6:71:31:a3:0d:bb:
23:d4:4b:cb:d0:b6:02:d0:0c:4d:46:ef:41:2c:12:
49:3f:ed:ef:6d:3a:87:0d:b2:4e:33:87:25:32:aa:
60:4d:39:cb:be:61:f9:2f:6d:14:b5:0d:3c:19:71:
0c:2a:c4:75:7e:e6:fe:98:04:b4:1f:09:70:32:b5:
f5:e2:ee:81:77:16:4c:e1:72:08:72:55:1e:81:6f:
2d:8c:ca:4b:21:0c:ba:08:b9:30:5c:cf:91:a9:c2:
e0:71:d4:30:3a:85:ce:b2:a3:0e:0e:e4:50:24:85:
6a:7d:27:6b:56:7c:a1:55:b7:71:58:64:f2:2d:7b:
ef:fc:cd:cc:fa:93:bb:b4:56:d2:bc:72:b0:b6:da:
89:22:d8:b8:69:0b:96:49:01:77:a3:7e:47:d4:04:
44:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0C:37:46:D0:79:11:B4:80:D9:17:0D:51:38:31:98:F9:C2:8E:71
X509v3 Authority Key Identifier:
keyid:B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:94:db:df:f0:ad:0c:9c:56:80:73:da:c2:30:47:aa:50:e5:
41:2e:cd:52:df:ac:c3:c5:cf:ad:52:43:38:40:97:53:c5:91:
cf:16:da:52:d8:b6:41:77:4f:76:20:b8:87:61:d6:bf:ea:4e:
ce:c9:c5:59:03:d4:4a:76:91:d4:e3:dd:f6:44:d1:6d:25:f9:
49:1b:7b:41:6c:0f:04:84:77:6e:fb:1f:8c:bd:88:2d:8e:a5:
9e:9f:c6:99:55:d4:ca:89:76:07:ee:3a:ae:18:8e:fd:ff:a0:
d3:e0:4b:38:e2:f0:eb:e8:63:74:75:5f:29:e7:0f:8a:0b:31:
e1:2a:6e:b6:29:fc:72:54:1b:2f:f3:ec:e1:0c:5f:e9:a3:f7:
99:6b:24:de:ea:79:a6:d4:fa:4e:fd:03:4b:8b:47:0f:34:c9:
8f:e6:4b:5c:2c:52:dd:6d:e5:bc:3b:2d:64:85:ec:d0:bc:45:
04:ec:17:08:05:8e:7c:3e:20:47:99:c2:5e:6b:a5:d6:08:b3:
18:ef:d2:c1:85:42:a8:fc:78:69:c2:87:6b:cf:17:2f:d5:8e:
b1:c2:84:83:9a:37:10:50:ea:fb:13:78:bf:58:af:4a:e1:41:
c5:4d:c4:e7:73:ed:e9:e2:29:48:0c:f6:21:33:1c:31:59:dd:
e5:05:47:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:52:42 2026 by rpki-client