
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
File: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json)
Hash identifier: R783Yb+mZV0UxNr0L30AbNB1DVw0wx4167lrhUlhjwc=
Subject key identifier: 0B:1F:16:7D:C8:C8:7F:A8:0D:83:17:1D:50:6E:6B:0E:DB:48:F7:5E
Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Certificate serial: 08D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
Manifest number: 08CA
Signing time: Tue 22 Sep 2026 20:13:37 +0000
Manifest this update: Tue 22 Sep 2026 20:13:36 +0000
Manifest next update: Tue 29 Sep 2026 20:13:36 +0000
Files and hashes: 1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: bCWy/lZzjIF6P4326dPuWIAPg6vtst6yZyEzJvvQpVk=)
2: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: Oq5n7YTpwRwxE6QPyxWPtqKwDnI0oieXsSLQCrD8sXk=)
3: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: FHMJGrrxUvRBeY9Ihx5SI/go/dc2sMa74hHT1NwYti8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:13:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2260 (0x8d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Validity
Not Before: Sep 22 20:13:36 2026 GMT
Not After : Sep 29 20:13:36 2026 GMT
Subject: CN=6ab2e171-acb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fc:47:f6:0a:b9:44:9d:9c:8e:23:2f:4c:6d:
f3:51:c7:7f:0e:39:9e:71:11:e6:1e:71:70:77:cb:
eb:32:40:66:f0:df:c5:db:d5:84:ae:37:88:79:65:
72:42:bc:68:b3:95:3e:98:3f:94:9b:1d:79:4e:bb:
13:85:60:5f:79:55:ae:ae:04:6e:5e:5b:6e:a8:eb:
53:c3:91:76:4d:25:63:fb:2a:64:2a:33:32:99:70:
f5:12:74:97:97:0c:c3:5d:63:43:dc:48:52:30:99:
fa:6c:65:62:35:f5:5c:07:c2:4d:8d:98:a0:56:bc:
75:2b:8f:ed:c7:76:10:8a:bc:25:06:cc:0a:d0:6c:
0f:b2:af:2a:e8:0f:0d:f6:6d:69:31:48:f3:e1:f3:
cb:8f:2f:12:a5:10:71:e5:ae:85:5a:cc:b8:7d:11:
ed:ca:b4:31:ae:a2:2c:69:a6:6b:9e:42:7e:ab:98:
46:46:dc:81:f4:93:8f:dc:74:7a:48:92:59:2a:a5:
cd:c2:42:c7:95:87:c0:4b:45:b7:e7:e8:5b:aa:cd:
a4:21:d5:fe:4f:43:73:a5:d4:d0:50:6e:c3:99:15:
8c:bf:99:56:b9:4f:f3:b1:31:69:e3:f8:14:66:76:
7e:1b:74:e6:dd:7b:22:14:ef:f9:f4:42:2a:0d:7a:
6a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1F:16:7D:C8:C8:7F:A8:0D:83:17:1D:50:6E:6B:0E:DB:48:F7:5E
X509v3 Authority Key Identifier:
keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c7:c8:00:46:24:38:23:70:41:a9:93:78:cc:b3:5e:d3:e4:
32:ee:b9:07:16:b8:25:e7:ce:f2:01:74:1c:2e:66:21:85:03:
50:2a:e3:35:e0:12:27:ca:50:7a:bd:76:73:fa:11:5b:d5:fd:
f3:61:57:de:0b:49:0a:6d:57:69:9b:5b:a1:ef:38:a5:3c:c6:
de:9b:26:12:fe:d6:43:36:21:53:42:49:73:0c:99:0f:bd:be:
e6:e7:f4:db:8e:d1:95:bf:00:6e:86:b3:81:5a:b2:6c:82:63:
90:c7:98:b6:92:c0:6a:6e:3b:d8:f6:3e:76:83:41:0b:2d:06:
71:5b:20:8f:f8:73:24:c1:2f:de:29:ec:cc:09:d2:a8:76:bc:
80:a8:e0:43:fb:88:9c:e1:d9:9b:82:64:63:0c:16:12:07:1e:
87:1c:31:7e:b7:1f:44:a6:60:32:fb:4d:17:94:44:25:47:26:
2d:97:ec:f8:05:03:1d:6e:96:8c:d7:55:88:24:85:51:d6:6c:
b3:bb:ec:a4:57:13:f8:62:f6:c3:2f:5c:ae:c9:44:e2:95:ef:
23:ef:c5:2e:9b:45:62:b5:5e:b2:7f:c2:b8:cb:99:fc:d2:4a:
2a:08:cf:a1:3c:5d:c7:09:9e:93:7c:03:4f:ca:d9:e6:66:b2:
3b:41:4a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:11:45 2026 by rpki-client