
$ rpki-client -vvf rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
File: tNQViTJWcWZLLGBPEt4EdX4uzNs.mft (raw, json)
Hash identifier: Czv5RWKgkX4JcMjJqjJY6DhxmaSwt28jsxcQ6Ws7BUo=
Subject key identifier: D6:D5:BD:77:AE:56:59:74:D9:7D:E4:5C:71:3A:57:13:3D:C1:A7:92
Authority key identifier: B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB
Certificate issuer: /CN=A916432A/serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB
Certificate serial: 0825
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
Manifest number: 081A
Signing time: Tue 12 May 2026 21:09:42 +0000
Manifest this update: Tue 12 May 2026 21:09:41 +0000
Manifest next update: Tue 19 May 2026 21:09:41 +0000
Files and hashes: 1: tNQViTJWcWZLLGBPEt4EdX4uzNs.crl (hash: nkQuXm/I4L+9OuSCJpguk1yLplEtWy84AeaEcNjFmzY=)
2: 67CD2004292211EB8A9B3D73C4F9AE02.roa (hash: tcE4gvT48rVkQCBAi3c3JCe7vlGJ11O5lP9n2KM3sUE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl
rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2085 (0x825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916432A, serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB
Validity
Not Before: May 12 21:09:41 2026 GMT
Not After : May 19 21:09:41 2026 GMT
Subject: CN=6a039715-7371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:70:6e:75:b2:9c:fd:14:ff:83:84:24:eb:
ea:2c:5b:af:c6:ea:a1:73:1b:5b:f6:34:e2:fa:b1:
4e:fb:55:e6:6a:c1:f0:c8:3c:82:e9:07:34:bc:0c:
2c:30:c3:f7:1a:26:0b:07:3c:66:59:e4:3b:cf:21:
e0:ba:85:4f:30:91:a5:ed:5c:a6:dd:52:91:1e:55:
75:de:31:d2:09:ed:25:37:15:fe:10:51:8c:f7:37:
cd:15:55:59:8c:7d:99:05:6f:10:35:d5:b5:5b:5f:
2e:4c:2f:e6:31:eb:a3:9a:02:f9:a2:f0:a8:2a:b1:
d0:a4:d2:a7:35:6f:b0:1a:7b:b0:b1:60:49:90:25:
ea:db:cb:21:25:12:fd:f9:e8:f5:7d:6f:c8:e5:3f:
3b:de:41:51:e0:e2:b5:14:b8:a8:f5:4c:af:0a:a3:
b9:dd:bd:b9:a7:be:30:9e:7e:5e:cc:67:1f:c7:3c:
f6:69:ee:4c:ee:e4:df:c5:2b:e7:f9:7c:e0:1d:3a:
21:e8:e7:56:85:24:48:fa:6b:61:e7:5a:5e:e2:b6:
0d:45:97:6c:50:d7:9f:2f:a2:b3:3b:a1:01:a7:de:
11:0a:aa:05:9f:a4:15:4e:97:55:52:70:1d:fe:7f:
30:5f:c0:d6:bb:b4:39:27:15:0a:d7:0c:3c:01:4b:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D5:BD:77:AE:56:59:74:D9:7D:E4:5C:71:3A:57:13:3D:C1:A7:92
X509v3 Authority Key Identifier:
keyid:B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5a:0a:48:43:48:34:8b:f8:71:bf:72:73:88:6c:94:19:00:
51:52:64:00:89:9a:dc:38:aa:7a:03:a0:7b:98:eb:7f:89:87:
6f:a7:dd:7f:f9:85:5f:32:e2:be:97:08:ae:43:ca:cc:f7:bd:
a1:02:d1:28:a8:46:4c:4b:72:8d:3d:ee:c0:7b:27:7f:96:1c:
e6:a5:78:31:9d:eb:47:1a:26:8e:15:ab:3e:9d:33:d6:5a:8f:
56:2b:cb:60:83:6c:29:e3:7b:4f:97:d3:4a:22:9f:cc:c9:6b:
52:f9:f0:9b:d9:d7:57:75:e8:92:0e:29:71:87:87:af:42:31:
00:e6:34:57:f1:ba:54:94:f2:8c:54:e5:41:0b:b9:7f:37:e7:
be:33:62:39:ea:57:42:f9:a7:63:66:4c:73:3f:67:d5:4c:fa:
c0:04:25:8a:f9:58:c9:51:24:0e:0b:7e:51:b8:eb:d7:11:84:
97:dd:96:90:5f:b8:02:54:a5:35:84:dd:ab:74:19:fa:28:73:
17:63:fc:28:02:30:34:fc:e3:2a:f9:ce:d7:c0:a4:55:d8:b8:
4b:91:3a:00:8b:d3:9a:1b:3c:ac:f2:c7:90:83:11:27:70:45:
ac:b7:bf:a3:c7:fc:51:52:25:1d:97:04:d4:c0:2e:74:8a:6c:
4c:a1:26:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:02:52 2026 by rpki-client