
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
File: TDZeNqZHnY6wtQ2Q820dexnvhNM.mft (raw, json)
Hash identifier: 9wi9pYDXcdzpFt0SYNRtAWZ/jRTnunDfpB7QGMRvAVs=
Subject key identifier: 00:06:42:44:B1:04:C4:AF:C0:21:78:65:38:6A:5D:5E:E9:C9:31:6D
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial: 0205
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
Manifest number: 01D0
Signing time: Thu 23 Jul 2026 05:40:10 +0000
Manifest this update: Thu 23 Jul 2026 05:40:10 +0000
Manifest next update: Thu 30 Jul 2026 05:40:10 +0000
Files and hashes: 1: TDZeNqZHnY6wtQ2Q820dexnvhNM.crl (hash: VYcAO+lhDMelyo8UYFl3Xf70VL5qPTWd9dk/Zxgby9Y=)
2: 4699D9EADB0B11F0B7B5790A82D3641D.roa (hash: T2Foy9ASPzGFF0amgq/n/ifzed5ff9yCRwIVozmPQbI=)
3: CAF0BBBCDB0811F0A3EA0CD881D3641D.roa (hash: K6rhOjUE5MsA7iPT9OzT+5zbheWWIvW6req+7O+50Rk=)
4: ECDF4CE2DB0911F0B89EBE0382D3641D.roa (hash: +cfq+DBj705kE9pcPQ8fHhTnhcZwL0furcECRqclk3Y=)
5: 26B79D64E9FE11EF8751AE17C4F9AE02.roa (hash: CSwNiNiHBOdBkX8QVfEy5RdNRxWDtIIzMJX3lDPz73I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Validity
Not Before: Jul 23 05:40:10 2026 GMT
Not After : Jul 30 05:40:10 2026 GMT
Subject: CN=6a61a93a-f5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:19:71:cb:d9:b5:55:91:81:79:a3:48:a5:31:
e4:2b:a5:d9:e9:9b:38:10:f4:7c:30:a3:80:73:0a:
22:32:78:39:64:37:78:5a:a7:23:6f:6b:8d:4c:de:
07:9c:b4:e8:16:05:88:e0:4f:41:17:3d:0f:33:84:
80:83:02:8d:34:2a:55:24:5b:31:70:c2:05:ec:38:
42:2c:9f:96:38:68:07:5b:82:c8:d5:02:97:e5:7c:
d3:a3:bf:a0:10:c7:e5:55:02:8d:72:48:7a:c1:13:
f9:53:dc:81:f8:0f:47:d3:1e:cb:52:99:84:67:61:
2c:6e:79:30:82:7b:fb:42:59:03:b4:e2:0a:e7:0b:
a9:ea:b3:cf:fa:56:5d:df:d4:2b:a8:c0:12:47:35:
0b:dc:38:9d:fd:b2:f3:55:f7:29:c8:37:f6:3e:1c:
dc:0e:05:b9:3e:2d:32:a5:47:18:79:ed:66:5a:4e:
f1:af:39:12:fa:ba:4b:b4:bc:6f:d8:0b:e5:12:84:
bc:5a:c3:b0:a8:5b:d4:93:2f:4a:a6:af:cd:cd:2a:
17:fd:7b:da:f1:d8:79:ae:fd:b1:8f:23:ad:bd:ae:
f0:9b:e1:57:fe:1e:45:ba:89:7c:93:71:b3:20:2b:
66:b3:01:8f:07:bf:fb:21:39:fd:e4:01:c3:c3:a8:
57:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:06:42:44:B1:04:C4:AF:C0:21:78:65:38:6A:5D:5E:E9:C9:31:6D
X509v3 Authority Key Identifier:
keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:54:5c:76:61:72:60:11:6d:77:6b:df:9c:b0:60:c5:23:26:
ff:fd:7e:05:4e:13:84:a8:1c:6d:53:4e:19:61:14:df:76:14:
10:6e:be:a4:5a:72:76:4f:43:00:e1:51:92:60:3a:5b:00:0e:
7f:49:af:e2:f3:21:5a:76:b7:f7:b3:17:ed:fb:72:4a:c7:26:
9d:8f:ff:0a:f7:e4:c8:cd:6f:30:96:ed:6e:df:3d:8c:fd:00:
64:ac:c0:06:43:19:ff:c8:ab:b3:30:63:be:a1:09:d4:96:3c:
6b:f6:aa:31:cf:c7:19:25:d0:2d:93:66:a4:5a:db:3d:48:dd:
75:56:36:76:13:19:e2:3c:cb:68:ca:de:88:db:4c:a8:fe:6b:
12:d8:a1:e1:f1:01:4e:3c:17:04:e3:00:3b:7b:46:31:4c:d4:
7a:77:54:cb:f7:94:0d:d1:24:4c:9b:54:3d:e0:2b:3b:d4:0d:
6e:cc:b6:c3:fe:24:32:28:c9:9d:c1:d9:7d:3b:b7:66:ad:1e:
ac:83:4b:b6:59:b5:ed:a1:9b:30:c7:eb:3d:57:d3:b9:33:d1:
ca:2a:99:dc:7b:e7:29:28:90:cd:42:4f:7e:b6:5a:9c:28:77:
cc:2f:bc:d8:4a:96:84:58:dd:73:f3:4a:dc:ff:1b:81:09:34:
b9:81:77:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:17:46 2026 by rpki-client