
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
File: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft (raw, json)
Hash identifier: R0X2RjWooyNfWGq9UKPXGMy2Q1M1i3NDq4cYKANSeBs=
Subject key identifier: 97:E4:FC:D1:76:F4:50:F4:31:7B:01:DB:B6:12:88:5F:DB:5A:E5:65
Authority key identifier: B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6
Certificate issuer: /CN=A911A4F7/serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6
Certificate serial: 0178
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
Manifest number: 0170
Signing time: Fri 25 Sep 2026 04:51:28 +0000
Manifest this update: Fri 25 Sep 2026 04:51:27 +0000
Manifest next update: Fri 02 Oct 2026 04:51:27 +0000
Files and hashes: 1: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl (hash: QztewQ447nVhQkWR3GJE1QGR7lNzvOXHdO2X4vXkzig=)
2: F17DA0FE85FC11EFBD7A485FC4F9AE02.roa (hash: NPEHXK4kvB3m3Mt2iQopHp4B8bUEbfWS8NtHZ6Qe9rU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl
rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A4F7, serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6
Validity
Not Before: Sep 25 04:51:27 2026 GMT
Not After : Oct 2 04:51:27 2026 GMT
Subject: CN=6ab5fdcf-461c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dc:60:85:97:9d:ac:cc:4f:90:41:68:5b:dd:
4e:d9:c7:3d:14:a4:80:4b:37:83:76:2f:ac:41:a0:
6e:b3:58:3c:0e:7a:03:58:2e:d3:04:f7:a4:2d:34:
32:9a:2a:df:52:02:ce:77:dd:6a:61:74:ef:cf:77:
b9:bd:01:14:3c:62:ed:48:f9:a8:ab:de:00:74:ae:
05:81:f9:9d:78:42:50:18:16:ef:46:12:5b:eb:05:
88:aa:c7:f1:57:c2:40:97:0d:44:cb:3c:5c:da:40:
62:5a:44:6b:40:3f:e5:02:07:ec:7c:25:e6:73:e8:
b9:62:23:5b:6a:dc:a8:e7:75:0a:98:04:8d:24:4a:
1a:95:03:f7:e8:17:fb:37:36:9c:c3:4b:87:a5:80:
12:07:c3:7f:df:4f:1d:01:a2:e7:7d:aa:d8:ec:bb:
3f:00:10:a6:f6:cd:03:03:15:cb:89:bc:23:6f:2a:
bb:36:d6:4a:5a:fb:4d:8e:fe:8c:d7:37:81:d4:7a:
bd:5d:72:f4:b1:50:19:90:7c:17:c6:c4:c7:2b:98:
a0:15:ee:55:b9:d6:40:d6:f3:55:fb:b8:4e:4a:c4:
ae:ed:49:6a:f3:85:5e:1e:e3:b7:2e:a8:ab:32:c7:
4c:49:78:82:d2:1a:66:7a:b3:c6:c1:62:4b:b5:b2:
88:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E4:FC:D1:76:F4:50:F4:31:7B:01:DB:B6:12:88:5F:DB:5A:E5:65
X509v3 Authority Key Identifier:
keyid:B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:73:30:e8:0a:e9:e3:43:7e:67:57:69:ad:bb:04:3a:bb:81:
50:9c:6e:e2:f6:21:a0:75:84:49:d7:29:cc:c1:9e:d0:30:4c:
3f:94:1b:77:d0:30:a8:96:5a:59:50:fd:af:18:fe:19:34:1e:
01:19:93:7f:a2:07:f3:4f:1c:70:e7:90:c0:25:2b:f1:85:07:
5e:dd:eb:b2:09:4f:5f:2e:5e:4a:01:dc:8f:b5:00:4d:d7:19:
17:e1:6e:e5:53:14:33:f6:f9:b8:37:be:31:b0:b5:a1:94:66:
ae:1a:10:f8:29:7f:4e:07:7d:5a:bd:29:29:d4:d2:cc:1d:65:
eb:db:a0:fc:45:3d:22:3a:80:59:d9:b5:f6:a8:1d:c8:8b:6a:
2d:f3:97:0c:53:fd:88:c8:bc:e1:c7:50:3f:a7:d6:d4:1c:52:
b6:7d:fe:2e:c7:68:37:73:b2:80:a2:01:8b:4e:4b:9a:a4:5c:
35:0a:53:d5:9e:3e:a7:91:6f:0d:ef:c1:37:70:bc:25:bb:c1:
57:36:e3:0a:00:37:76:94:6f:5f:ca:d4:58:22:7a:81:07:d8:
d1:28:2e:b8:ab:1e:05:61:90:34:19:43:25:3a:71:13:9f:64:
9d:7d:c1:93:3a:f0:c7:b9:5d:e9:66:94:68:91:e9:9c:1f:17:
30:40:24:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:04:38 2026 by rpki-client