
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
File: TLC5W0vcIzFPKD73OalqfGWMCmw.mft (raw, json)
Hash identifier: OmgRxPK88L8DqvyopXYD8/4dW2M2VjHaEAD/A9A6bJY=
Subject key identifier: 66:C5:F2:72:54:B2:EB:15:C5:BE:0F:DA:C9:06:E9:2E:1B:77:3E:26
Authority key identifier: 4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C
Certificate issuer: /CN=A911E660/serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
Certificate serial: 0124
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
Manifest number: 0120
Signing time: Thu 23 Jul 2026 07:30:46 +0000
Manifest this update: Thu 23 Jul 2026 07:30:46 +0000
Manifest next update: Thu 30 Jul 2026 07:30:46 +0000
Files and hashes: 1: TLC5W0vcIzFPKD73OalqfGWMCmw.crl (hash: MkpZwJJNySvJTF3CrA9GMgD3R/OaWjybrThqGISE+Vk=)
2: 4F39607ED24311EF919B6D12C4F9AE02.roa (hash: 9hD/dx6imL5ezzVNuHPKFA9H7c+V2kUBFF6Mm8rBJqY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl
rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E660, serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
Validity
Not Before: Jul 23 07:30:46 2026 GMT
Not After : Jul 30 07:30:46 2026 GMT
Subject: CN=6a61c326-cb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:a8:d6:f7:2e:82:6d:5f:26:60:85:dd:ad:
f8:20:8e:2d:c6:2a:b1:c6:6b:5b:a6:ce:34:1c:31:
37:e6:fa:14:81:62:68:d1:e8:c4:64:d4:f6:5e:b8:
29:ee:65:e1:93:ee:d7:b2:b3:2e:96:74:91:95:31:
40:6e:f4:f5:9c:29:67:83:db:f1:f5:6b:89:c4:90:
79:4a:6c:fe:1b:0f:74:8b:f6:92:49:30:00:6f:b3:
2d:93:42:d7:3c:74:df:18:54:f6:5b:8d:98:da:38:
ea:3a:78:3e:82:b9:10:c9:20:1e:a0:ba:8b:31:f4:
1f:de:d4:0f:6a:0b:2d:fa:60:4f:a6:42:9c:32:35:
d2:4a:69:b7:c7:a7:06:79:bb:25:4e:ea:f8:39:fc:
9e:4d:df:bf:3a:fb:9b:86:b8:7f:0d:9b:84:c7:8c:
6b:3b:d8:5e:e2:d5:42:39:17:ff:a8:14:dd:32:f4:
f5:0b:2d:0c:0e:11:a7:44:25:ab:82:92:47:ad:fb:
18:0d:24:40:3a:2d:45:e2:9c:0e:6d:a6:1c:8a:e9:
56:03:d1:b9:83:1a:89:86:bb:bb:9f:c1:27:39:ac:
1d:7f:13:a4:89:18:ea:32:aa:61:92:b6:88:da:9d:
9e:b5:8a:e8:4e:ec:0c:b7:fc:25:4f:d8:92:e2:b9:
82:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C5:F2:72:54:B2:EB:15:C5:BE:0F:DA:C9:06:E9:2E:1B:77:3E:26
X509v3 Authority Key Identifier:
keyid:4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:a8:a2:c7:a8:82:1f:d5:11:46:f6:5f:71:82:2b:23:ef:8e:
8e:e9:25:4d:f3:32:a1:a8:6d:95:61:bd:d9:b4:cd:92:6f:db:
2d:45:c8:29:7a:a9:bb:32:47:63:dc:43:c5:bd:6f:95:37:29:
e6:2a:c6:98:31:84:d2:2e:ff:1a:ad:e2:c2:8a:ea:fa:ef:c9:
87:74:fc:d1:02:4f:dd:6b:bc:d1:37:c2:ad:1e:c0:d6:18:06:
f1:06:b2:65:dc:6e:cd:df:a7:5d:35:da:bf:23:b9:96:8a:cf:
46:16:0a:4e:b3:0b:99:13:db:50:d1:ad:36:97:26:0a:4f:bb:
41:48:b0:9e:a3:48:99:31:26:4c:d1:dd:28:a6:ce:a6:43:97:
a7:e8:c2:fb:e2:ff:e0:1a:63:93:74:50:53:e6:91:94:76:b6:
28:23:c1:3b:e6:73:83:1f:94:24:4c:65:ed:23:af:cf:ee:be:
04:df:a6:45:0e:ec:bb:cc:40:87:b6:12:31:42:ed:2a:56:90:
d6:1f:d4:41:bb:b1:77:f5:79:9b:91:e2:3a:de:86:20:d7:61:
27:2b:d9:20:d7:94:32:12:ab:37:0a:95:dd:3b:5e:04:f4:34:
a7:f0:8e:37:2b:5b:2a:02:db:12:a6:a8:0d:11:3d:75:77:e1:
d0:e3:55:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:17:24 2026 by rpki-client