
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
File: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft (raw, json)
Hash identifier: tgu5wpcJceC6uE6j3TMsgLYSxSFUqKHx9izYMlnmBXo=
Subject key identifier: CF:AC:D2:38:58:09:95:91:A8:D6:9D:59:FD:38:48:77:0B:F4:26:D5
Authority key identifier: B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76
Certificate issuer: /CN=A9154FFD/serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
Manifest number: AC
Signing time: Wed 23 Sep 2026 06:53:22 +0000
Manifest this update: Wed 23 Sep 2026 06:53:21 +0000
Manifest next update: Wed 30 Sep 2026 06:53:21 +0000
Files and hashes: 1: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl (hash: 4nUSEaAye8pLOBxGWVBF7Juw6hMVEhJsctAMxy9oRGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl
rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:53:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154FFD, serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
Validity
Not Before: Sep 23 06:53:21 2026 GMT
Not After : Sep 30 06:53:21 2026 GMT
Subject: CN=6ab37761-066e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f4:d7:e0:ce:ee:16:ba:9a:2b:d1:74:5f:93:
66:07:04:e9:f7:cc:4d:f2:84:ed:c9:d2:37:02:2c:
52:71:6a:50:6b:e5:d4:7a:08:14:18:7a:ea:9c:6b:
77:1d:b6:26:1b:d3:6c:6d:e8:98:ce:c5:a2:c3:29:
f4:c9:24:02:89:f6:24:2d:a5:a8:3b:1e:89:82:af:
0f:9b:d2:bc:89:25:29:87:29:50:15:fb:b7:a4:43:
80:28:ed:f2:1f:28:22:e5:bc:b9:51:b5:4a:b9:31:
d8:95:c7:90:9a:f7:99:6d:a8:64:3e:00:47:1c:af:
1a:8f:54:0a:ad:2e:9e:bf:cd:c4:09:bd:ac:df:56:
82:d3:75:76:68:a6:af:79:49:7e:5f:dd:ab:3a:1e:
31:a7:e1:cb:a5:f2:bc:71:96:ba:c9:ee:d1:58:03:
de:d4:20:25:d4:f6:fe:9f:47:6d:31:ef:36:a3:3c:
91:3b:40:e5:02:18:93:7a:66:fb:55:c8:b5:6a:af:
62:bb:c5:3c:b9:7d:a7:94:fb:98:19:60:67:e8:ab:
00:c7:97:60:c5:48:31:f0:7c:4c:b2:fc:35:b6:ea:
45:33:9c:c7:2d:39:01:9b:bb:62:ae:1b:a6:e9:7e:
56:1c:94:94:16:66:e3:0a:02:c5:c7:e8:fb:ef:af:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AC:D2:38:58:09:95:91:A8:D6:9D:59:FD:38:48:77:0B:F4:26:D5
X509v3 Authority Key Identifier:
keyid:B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8c:65:a3:90:df:ef:c7:33:b8:ac:b0:c4:6b:9a:2b:a5:0d:
de:57:f4:95:d4:c2:e9:60:93:9e:76:f6:cf:0c:bd:40:04:27:
6a:e1:14:18:64:43:96:8f:87:0c:c6:b3:b6:fc:b1:28:99:53:
19:ad:4b:d3:e3:a7:17:69:18:e1:60:b9:22:1f:58:0c:16:64:
ad:1a:7e:d1:1a:97:a8:de:cc:28:f6:e0:5a:02:8b:b4:f3:53:
5c:98:53:bd:c2:19:6f:ad:73:e0:d9:33:9e:73:11:75:5c:5e:
ca:6a:b4:e3:39:08:3c:aa:af:b1:28:02:82:e6:98:c2:6b:c4:
6a:cd:58:3d:27:5a:c1:1d:90:05:d8:9e:e4:ec:53:d6:ed:83:
c7:36:94:10:22:3d:39:42:6e:f6:e9:26:a9:84:5c:d1:33:9f:
0c:54:67:94:c5:21:18:0b:04:9b:33:d6:7c:b5:74:d9:52:54:
d6:92:1b:b4:56:eb:4e:28:25:0f:42:2d:45:1b:29:52:a4:f3:
35:82:72:ba:7e:aa:8c:9b:41:81:54:8b:93:5a:68:52:5d:4f:
b1:32:25:78:29:b7:e6:74:c5:b8:d2:ee:bd:9a:65:04:a2:cf:
e5:b3:46:8a:2e:43:67:67:cb:e5:31:10:a3:99:bf:0f:4f:ae:
4a:8a:6a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:41:03 2026 by rpki-client