
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
File: tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json)
Hash identifier: t3GPYVUDsgka8NDgWUlKrf8Uw7WQESbTeomn2C1eKzY=
Subject key identifier: 0A:C4:5E:E1:0A:6B:35:B4:D9:DF:F9:8B:FA:0B:5C:5D:1E:73:42:B8
Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF
Certificate issuer: /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF
Certificate serial: 03E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
Manifest number: 03E0
Signing time: Sun 15 Nov 2026 00:14:57 +0000
Manifest this update: Sun 15 Nov 2026 00:14:56 +0000
Manifest next update: Sun 22 Nov 2026 00:14:56 +0000
Files and hashes: 1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: CINkMfbuekpBohob31IY+Kl8phx0TBoAwpICaNzSz4g=)
2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: bL7OIrkXDLMggpL9N/pxg/g9qzrZatjb01uzVRx5kqw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl
rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 00:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1000 (0x3e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138E67, serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF
Validity
Not Before: Nov 15 00:14:56 2026 GMT
Not After : Nov 22 00:14:56 2026 GMT
Subject: CN=6af8f981-1694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:6a:31:10:f5:8e:68:9c:0e:9b:8c:02:ce:
2e:34:d2:66:f9:dc:d6:47:f0:44:1b:1c:fc:e8:ef:
94:c7:42:c0:4d:a0:6a:a3:f7:e9:5c:c0:d2:76:97:
75:eb:e1:fa:ab:67:cc:f9:ec:0d:6f:61:5c:82:59:
53:38:4e:96:8b:9b:b8:0c:e0:b6:de:d9:78:c9:61:
ec:54:68:ae:28:bb:6f:cb:c5:9c:72:26:f6:76:c7:
46:49:00:dc:c6:cb:9d:bd:7a:00:98:9b:51:92:2a:
70:d1:10:ec:14:e1:97:31:ec:44:47:a6:83:c4:e2:
55:78:c6:a9:7f:c9:94:b9:a5:b6:75:20:86:88:fa:
96:38:7d:3e:0d:01:6b:25:04:e3:11:e4:d9:b8:cf:
88:85:bd:99:30:15:4b:1b:58:1c:79:9b:c2:c8:19:
1f:d7:dd:01:ad:d4:c1:0a:03:01:b2:6e:9f:80:d9:
c3:cf:45:8f:cd:93:c1:47:88:d7:5c:20:99:c0:00:
57:d7:cf:df:23:25:a9:71:b0:61:71:a5:39:01:5c:
89:3f:22:55:b7:79:3b:16:75:c5:93:a9:4c:cc:da:
8b:53:58:88:f3:ab:70:43:4d:fa:78:b3:68:75:96:
6c:d8:bf:a5:fb:89:87:b8:68:3d:f7:b5:88:cf:1c:
66:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C4:5E:E1:0A:6B:35:B4:D9:DF:F9:8B:FA:0B:5C:5D:1E:73:42:B8
X509v3 Authority Key Identifier:
keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fd:a1:67:4f:40:dc:3d:bd:84:d5:47:bf:79:67:41:83:48:
9f:dc:6d:4c:e9:19:e6:4e:2d:d6:10:91:c5:6b:ca:0c:71:45:
02:bc:34:43:1f:82:82:09:ab:cf:c1:bb:2c:ac:8f:cd:dd:68:
35:f4:a7:3e:56:09:7b:d5:02:05:c3:76:33:dc:bd:b7:16:01:
4d:fa:c4:57:26:eb:63:ee:df:86:8d:5b:a5:0e:fe:31:2e:2e:
35:31:19:b9:5f:c1:5e:e8:6b:9a:5d:cb:c3:fe:f4:ed:2f:0d:
8c:87:ba:0b:87:60:14:1e:d1:e9:f8:f5:b2:c7:25:05:66:01:
77:a0:e0:d5:25:7d:05:dc:e8:3f:25:49:57:5b:5d:e0:6c:b5:
ca:a8:03:7a:29:d7:49:3a:af:aa:17:41:8e:05:12:f3:cd:07:
58:3e:1a:a1:bb:e8:a3:2f:a1:85:09:5b:16:8b:bc:00:e4:56:
e2:38:0c:3c:54:44:c0:3f:4f:9a:be:f5:3a:5f:c1:ad:7d:3f:
b1:0b:fb:66:88:4d:f0:e1:9e:55:7b:22:90:8c:21:4d:ad:8c:
57:de:66:cf:c9:1b:a1:6f:60:84:d8:ce:fd:48:72:20:20:01:
36:86:5b:56:96:f0:d5:12:c4:b2:ae:5e:17:9a:2f:a1:50:f6:
2a:47:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:39:29 2026 by rpki-client