
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
File: TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json)
Hash identifier: T//Q7lFuVVoyLtG6PpMsZS0gLSjNyLJ8RJeHxwbDw2c=
Subject key identifier: 43:DF:D3:A5:2A:46:27:9F:3C:47:4E:BE:74:29:79:DB:AF:91:C8:3F
Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0
Certificate issuer: /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
Certificate serial: 0384
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
Manifest number: 037D
Signing time: Mon 11 May 2026 00:53:54 +0000
Manifest this update: Mon 11 May 2026 00:53:53 +0000
Manifest next update: Mon 18 May 2026 00:53:53 +0000
Files and hashes: 1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: kMIWY839fiilqB0y3DIsnciTB6n2MxpYcUFd5ys8S3A=)
2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: mBL1TBP+Msd9AlCfomB44CtyYjx9JeXY/drpx8eClaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl
rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:53:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900 (0x384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
Validity
Not Before: May 11 00:53:53 2026 GMT
Not After : May 18 00:53:53 2026 GMT
Subject: CN=6a0128a2-8dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:46:b1:c0:45:e7:07:99:c7:b2:73:d9:f4:a8:
3b:4e:de:4a:b9:34:13:12:b7:90:ba:ce:2e:ca:27:
79:39:e6:2a:87:c3:69:1e:c3:aa:4b:4f:cf:a3:de:
f5:0a:d9:0b:a2:d4:e5:34:df:43:00:d5:c6:bf:47:
d6:8a:09:62:45:45:f8:94:35:1b:25:96:b4:d2:d0:
9d:21:bd:c8:90:c2:fe:55:34:18:46:b3:11:26:e6:
d5:95:d8:b1:a2:e5:e8:ed:de:4e:b2:aa:64:c7:9c:
59:66:62:0d:a1:87:35:54:bc:d3:c1:21:09:02:5b:
f6:cd:d7:8f:c5:d5:16:06:5b:b2:2c:8e:d0:eb:f1:
08:a1:b2:eb:e9:81:f6:a9:a4:95:99:67:b5:05:48:
ba:dc:e8:ce:05:a8:f7:67:31:87:61:3b:5e:97:ef:
cf:b2:b4:0a:42:2a:0d:00:b3:d4:21:b5:f9:34:00:
24:c5:db:d0:2b:d3:f9:4b:ff:a0:d8:84:cf:99:5b:
01:76:03:b3:bd:26:23:a6:8e:65:5d:c3:26:0e:8a:
f9:63:c5:70:6a:29:42:42:2c:82:33:36:2b:4a:b2:
3e:2a:ec:f2:76:5e:0c:a2:e5:68:cd:01:54:bf:4a:
56:88:30:4e:95:aa:ae:46:32:c5:fc:f3:6a:cf:dd:
2e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DF:D3:A5:2A:46:27:9F:3C:47:4E:BE:74:29:79:DB:AF:91:C8:3F
X509v3 Authority Key Identifier:
keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:e2:b8:d6:04:bd:86:a4:9e:67:db:b8:c7:96:4a:07:90:6b:
73:8e:cb:93:dd:48:8c:45:09:ac:eb:b7:76:ed:ad:6c:69:73:
5f:1f:99:bc:66:c4:a3:93:e6:2b:d5:5b:11:42:82:83:16:21:
f4:4b:b2:82:fb:26:de:9f:09:80:5b:54:fd:92:5d:83:e2:52:
46:da:26:16:e1:19:44:40:e9:f8:38:4f:a7:b9:67:e6:7b:29:
23:85:1f:86:83:02:f6:9c:2d:c4:66:51:cb:7c:e3:fa:82:fd:
f6:d4:f5:65:3a:d6:72:9a:db:ad:4e:6c:e6:96:fe:85:db:23:
4a:aa:75:1b:2b:50:e3:01:be:75:ca:0d:aa:67:1b:b6:91:d1:
99:3d:de:1a:24:e0:43:0f:3b:d3:a4:07:29:a0:71:24:21:42:
52:de:a0:41:15:2e:f6:c7:4d:93:6f:5b:87:63:7e:8a:3c:ac:
e6:8b:35:07:f0:1d:4a:09:86:01:c7:d6:51:76:43:df:1e:3c:
d4:e3:79:ec:ee:14:41:e2:f4:4c:fd:96:0d:91:47:f9:4e:86:
96:a7:4c:7e:05:36:0f:74:e9:4c:88:2c:9f:be:9a:be:6f:12:
d0:06:45:1f:2c:4f:02:48:e6:b0:c4:8d:d5:01:ec:b8:72:29:
41:15:a2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:52 2026 by rpki-client