
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
File: TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json)
Hash identifier: bt/Lar6vv6xCGJnK/eN08tuaWziNIWN5gS95Lpavn2M=
Subject key identifier: 70:9B:27:16:49:3D:B6:3A:58:48:E8:26:4A:6A:AF:C0:EC:3D:D1:50
Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0
Certificate issuer: /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
Certificate serial: 03AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
Manifest number: 03A4
Signing time: Thu 23 Jul 2026 01:35:55 +0000
Manifest this update: Thu 23 Jul 2026 01:35:54 +0000
Manifest next update: Thu 30 Jul 2026 01:35:54 +0000
Files and hashes: 1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: glQgAtS+eyItBHt+Z9CmOzEY1S/9Qdsl/dw7YgkaYcw=)
2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: P90Aw6/A3YFwdzm6ZtC5QnYCPc3LBDM9e/xDCyTP1kg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl
rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:35:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940 (0x3ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
Validity
Not Before: Jul 23 01:35:54 2026 GMT
Not After : Jul 30 01:35:54 2026 GMT
Subject: CN=6a616ffb-d9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:20:74:b9:13:5f:06:42:92:ec:d2:87:ca:8a:
e5:67:c1:3f:a2:ed:55:d0:c5:bf:c1:dc:dd:df:23:
06:e3:11:ba:0d:68:ca:e2:9b:fa:6b:1c:45:6f:f8:
5c:fa:61:d8:e5:ea:05:cd:9f:2e:84:99:22:97:62:
1f:99:da:4e:a8:95:06:d6:0e:f0:9c:c6:b0:84:e5:
f9:0f:83:58:18:f0:d1:bc:2d:a4:c2:e4:32:c6:9f:
c4:20:51:d1:36:40:00:16:43:a1:bc:0c:e9:30:b9:
50:5b:86:dc:2b:d9:33:ba:0d:fa:97:0f:c2:0d:22:
0c:ea:13:49:e6:f6:31:1b:70:6d:30:a1:67:9f:ad:
48:c5:ca:4e:39:79:0c:55:0f:95:e0:58:6a:a0:b1:
09:3d:8b:cb:dd:88:d7:0d:67:62:13:37:ae:94:b6:
e4:4d:1e:cd:7b:8d:52:3a:80:29:fa:1b:81:b6:01:
f2:91:4b:da:66:a8:b1:f3:8c:74:37:20:e9:d9:ef:
36:ab:3a:fb:87:f4:d9:6d:7f:24:8d:2a:50:2d:b2:
0a:9b:fb:f6:1e:2e:42:36:9f:69:1e:2d:28:de:b8:
70:2e:33:f0:92:7c:a4:d5:15:a7:0c:fd:1f:08:10:
62:c5:53:38:4d:3a:4c:cb:b2:e6:11:00:53:d2:31:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9B:27:16:49:3D:B6:3A:58:48:E8:26:4A:6A:AF:C0:EC:3D:D1:50
X509v3 Authority Key Identifier:
keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4e:7d:9a:f3:94:cf:76:fb:c6:9a:3d:e8:e8:ab:79:65:0d:
bd:c7:3a:10:bd:36:03:ac:af:6d:52:b8:63:88:85:e6:48:9a:
bb:10:f2:13:49:70:4d:63:0a:1a:d7:4f:7b:fb:3c:5c:86:7d:
8f:b9:d2:26:ad:1c:95:7a:15:a6:ad:ab:a0:02:4c:85:e5:03:
06:55:61:3f:d8:c4:f5:8f:d3:b4:b4:3d:5c:d5:63:f1:bc:c7:
c6:84:79:fd:0b:c1:24:fd:d4:18:7d:73:91:0d:1e:c8:6b:26:
79:d8:e2:4b:25:50:b5:1b:4e:a3:58:7e:b7:81:1e:54:2c:1e:
80:ee:7b:b9:55:df:d6:3f:f3:7c:4d:4e:db:e2:24:76:30:a9:
e7:0e:bb:cd:68:42:96:f4:60:97:87:fd:b1:31:1d:9f:64:dd:
83:3c:ca:fd:10:57:d1:ab:ad:a1:36:c6:85:2a:a4:67:1e:0b:
82:d3:cf:79:dd:7d:89:56:e6:85:be:27:2e:8d:0f:7e:44:12:
be:24:4c:f6:df:54:b3:9e:6e:ed:3d:f4:fd:46:f4:54:58:54:
d3:78:22:3d:dd:94:2d:f7:2d:8d:e2:dc:bb:7a:e3:d0:3d:16:
d0:68:fe:d1:c7:b8:95:85:8d:3b:d1:02:03:14:2c:2a:de:f4:
87:7b:9c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:20:16 2026 by rpki-client