
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft
File: TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft (raw, json)
Hash identifier: LzKN2R76DIViq+3O94VxEkvcL4v5QhLAhnl3ghwb32s=
Subject key identifier: 22:5A:F0:79:35:6A:78:5F:5C:F9:9A:64:BF:E1:2D:50:6D:0E:EB:D9
Authority key identifier: 4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C
Certificate issuer: /CN=A914FE53/serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C
Certificate serial: 0188
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft
Manifest number: 016E
Signing time: Wed 25 Mar 2026 04:02:56 +0000
Manifest this update: Wed 25 Mar 2026 04:02:56 +0000
Manifest next update: Wed 01 Apr 2026 04:02:56 +0000
Files and hashes: 1: TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl (hash: /skH8XvBJB31pTcgXd47FF5Vn42cm7B2ybhpTX/9L9E=)
2: E3F7E3DAFBDD11EE8914AD31C4F9AE02.roa (hash: hOKbF/UZYbhecuwlV+zdHCPg8weFXKYWyqedrkILS2Y=)
3: E387F700FBDD11EE8914AD31C4F9AE02.roa (hash: RZGsuM18I2i40ER50aptVtuKnle26jHhlIg+fS/FkLU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl
rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FE53, serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C
Validity
Not Before: Mar 25 04:02:56 2026 GMT
Not After : Apr 1 04:02:56 2026 GMT
Subject: CN=69c35e70-8f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:69:d6:2c:c2:96:98:c8:a0:48:39:dd:e9:3d:
48:0a:31:b5:46:89:a0:1d:26:f3:93:ab:8b:cf:1f:
ff:31:72:c1:04:11:0a:d7:aa:e8:b4:1b:29:b8:6b:
e3:dc:9e:a2:04:e2:08:f1:f6:ef:41:6f:65:b1:9a:
49:a2:9c:66:53:f1:20:45:f8:44:4f:15:56:0a:f6:
c2:5e:ed:2c:30:2f:11:ad:97:31:1e:91:77:cc:1c:
2d:12:1f:7e:38:d8:21:3e:8b:3c:96:e7:cc:83:4a:
05:21:75:f7:77:4d:e5:2d:ef:36:55:22:f1:97:69:
3b:3f:47:86:73:68:7f:35:fb:19:9e:cb:6d:c4:e8:
ab:64:32:10:88:d6:28:bf:0c:53:9b:dd:89:01:94:
e5:38:a2:f4:0c:27:61:19:a6:91:11:2a:f8:b8:98:
70:4c:3b:39:5c:22:0b:6b:dc:15:af:8a:2e:e4:12:
a4:fd:ee:aa:90:b5:6d:51:a6:ba:31:60:00:2f:40:
ad:bb:fd:75:f5:82:ef:80:e4:21:48:df:0b:c6:be:
1a:c1:48:91:6c:f3:f5:66:d0:d3:b4:6e:d8:15:2e:
03:cb:06:c3:11:a5:59:bc:d1:e0:1d:e6:2d:fd:d3:
56:3a:7a:c3:e6:31:37:b9:6f:a6:f3:d7:6c:6d:7d:
04:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5A:F0:79:35:6A:78:5F:5C:F9:9A:64:BF:E1:2D:50:6D:0E:EB:D9
X509v3 Authority Key Identifier:
keyid:4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:a5:20:34:f4:a7:6c:1a:33:8e:8c:91:6a:24:db:30:1e:f1:
b8:3b:dd:ba:2c:c3:d8:cd:c7:a1:8e:42:81:b0:1b:4f:a5:74:
55:e4:3f:2a:9c:b4:8f:f1:aa:72:31:00:55:49:36:79:a4:ad:
46:92:ce:95:48:d7:61:8b:7b:5a:dd:f2:87:6d:c8:a5:ee:51:
a6:ec:34:53:80:fb:ee:14:61:1d:18:05:91:c1:39:b3:23:b6:
dc:86:51:34:e5:dd:9e:23:57:ba:ca:60:26:c6:c8:54:67:f7:
cf:94:35:fc:f4:d0:d0:d0:ba:61:b6:61:99:30:fb:11:81:1f:
4e:3d:05:0b:4c:85:93:d3:4b:40:7a:3e:4d:ee:f3:fe:42:d0:
83:d4:dc:ad:9e:8a:57:df:05:5a:17:92:a5:05:5f:1f:a6:8e:
64:9a:2f:3b:ab:1f:14:3c:d6:e2:d8:61:26:73:5f:97:02:8d:
11:c0:0a:ae:52:2e:6b:40:2e:51:93:fa:38:62:6f:0c:0f:00:
b1:37:45:d6:ce:e6:3b:4e:b0:9e:36:11:85:c6:5c:85:d8:5f:
be:28:da:64:65:75:3a:bf:69:80:6f:9d:78:89:93:c0:0e:fe:
f6:a8:9d:69:90:3a:f2:8b:a0:00:5f:9e:99:70:1d:84:b3:22:
90:d4:ab:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:45 2026 by rpki-client