
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
File: tKlqre7ce-3VfWL8mknqCz_29Qw.mft (raw, json)
Hash identifier: WM1j2KtRe9zu3WNHsx/U6exjY6TdB9pkWbfob3TeDek=
Subject key identifier: 41:4A:5F:7D:1A:54:9B:8D:FD:C0:99:39:B4:23:A7:4A:C5:D1:05:AB
Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C
Certificate issuer: /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C
Certificate serial: 138E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
Manifest number: 1382
Signing time: Sat 10 Oct 2026 16:59:37 +0000
Manifest this update: Sat 10 Oct 2026 16:59:37 +0000
Manifest next update: Sat 17 Oct 2026 16:59:37 +0000
Files and hashes: 1: tKlqre7ce-3VfWL8mknqCz_29Qw.crl (hash: b63JD6GmOPjttaO+WfgbCjrcJSixK0wS41d/4af/tjE=)
2: 1C839F861BA111EA8BDD6114C4F9AE02.roa (hash: OeZ1QAdH9ELtz6ot25I1yxnNo5ZrJkrg9RULBUY+y7g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl
rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 16:59:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5006 (0x138e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983, serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C
Validity
Not Before: Oct 10 16:59:37 2026 GMT
Not After : Oct 17 16:59:37 2026 GMT
Subject: CN=6aca6ef9-0684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:c5:64:a7:d1:0f:cb:26:e8:f5:cb:cc:69:
c2:0c:69:81:80:ce:6c:c5:5b:f3:48:9c:44:11:59:
82:7c:b7:70:ac:a0:40:1e:45:a4:8f:2b:14:44:e0:
47:2b:7f:52:4f:3f:28:28:2c:fe:cc:33:fb:b5:4f:
78:9d:ac:a0:ea:c4:cb:f8:1d:96:0e:13:eb:57:01:
c3:18:41:6a:ce:63:f1:67:e4:20:e7:32:97:90:61:
03:03:36:9b:43:97:a6:31:bb:3a:74:01:e6:d7:4f:
b5:09:ee:eb:03:5d:27:38:c0:aa:95:1f:24:f7:45:
5e:69:65:4d:62:43:3d:23:70:e2:2d:1c:f2:5b:6d:
08:d0:40:e0:f1:69:d0:e5:c2:2f:d2:06:f2:eb:e0:
25:de:aa:30:5d:31:c6:ca:89:45:b0:5f:a8:e2:5c:
55:e8:9c:3c:f2:5f:ab:df:16:b8:e7:ea:9c:64:a9:
fa:d0:3f:b2:8f:56:fb:60:42:dc:fa:05:3e:ce:9c:
d0:4a:62:0a:0e:e7:74:8a:0c:d8:62:dc:ba:04:b0:
37:4f:cd:2a:92:fa:33:1d:d9:20:79:0a:14:24:8a:
aa:44:82:39:6a:4a:ef:8f:99:ba:2b:9f:cf:6f:42:
87:15:d3:94:ee:09:27:2d:97:e1:e7:92:73:2d:7f:
33:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4A:5F:7D:1A:54:9B:8D:FD:C0:99:39:B4:23:A7:4A:C5:D1:05:AB
X509v3 Authority Key Identifier:
keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:c9:57:05:ac:66:86:77:85:d6:90:24:92:ce:f0:b7:7d:eb:
7d:bb:1c:c7:29:4c:5e:74:1f:aa:6f:7a:00:a4:67:6f:18:08:
88:70:ed:55:fc:44:90:c2:35:7f:13:55:6d:dd:aa:ac:7a:0d:
cf:0a:eb:1e:c6:d4:84:38:eb:04:b6:d0:22:4c:3a:b4:5a:a5:
aa:bf:46:16:91:87:c9:77:2a:cd:30:cb:6b:1a:1a:13:05:f6:
07:bf:93:fc:e5:f5:70:85:e9:f4:a9:31:f5:52:65:46:2d:16:
c6:82:ca:a0:3c:45:14:3c:ee:65:2b:97:68:04:bd:22:25:88:
23:91:37:f3:ab:d4:65:b9:12:fb:15:73:60:4b:d9:55:4a:5a:
12:ff:cb:05:7e:d3:dc:48:1a:12:77:80:89:52:d9:18:0d:7c:
99:8d:aa:3a:4a:5e:67:30:3f:66:c4:91:ad:b1:70:25:e8:1f:
b9:d9:57:41:c4:aa:01:33:5b:7f:cd:a2:9c:c6:d9:4d:04:9f:
17:a8:5a:2b:4f:9b:09:23:3e:36:59:82:74:7d:ae:e6:04:0f:
2d:f1:94:ac:da:7d:d7:23:e6:93:f0:82:fd:fc:08:b1:0a:60:
f3:18:b2:ff:a8:bb:bd:25:39:8c:ab:b1:c8:79:00:ef:c0:c4:
cc:38:a0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:38:03 2026 by rpki-client