
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
File: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft (raw, json)
Hash identifier: x++2+HVJ/ItegGe5iqpGQV/SBavxKuNgBPVskZPtaPA=
Subject key identifier: 11:23:57:DB:F9:6E:8E:87:38:BE:CB:A3:8A:0B:92:B0:21:1F:D6:6E
Authority key identifier: 4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B
Certificate issuer: /CN=A916C4BC/serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B
Certificate serial: 0539
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
Manifest number: 0532
Signing time: Thu 23 Jul 2026 00:19:18 +0000
Manifest this update: Thu 23 Jul 2026 00:19:17 +0000
Manifest next update: Thu 30 Jul 2026 00:19:17 +0000
Files and hashes: 1: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl (hash: +4TVffAu15RUPZXCnMzLUOsPK0RevzcRD4EYk6QPd/Q=)
2: F593443851B011ECB5188E24C4F9AE02.roa (hash: 0WVnAY5EHkV8sUZiTU2edZq8VGQc3j9oVtptJkhHgCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl
rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1337 (0x539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C4BC, serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B
Validity
Not Before: Jul 23 00:19:17 2026 GMT
Not After : Jul 30 00:19:17 2026 GMT
Subject: CN=6a615e06-6685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:9a:79:e2:19:ea:6c:14:6a:14:8c:d8:8c:
15:a9:cf:f2:22:db:90:1b:86:00:a9:d8:cc:2d:45:
b8:6c:79:6b:0c:84:a2:4a:cc:65:08:23:79:d1:0d:
6d:f8:41:92:26:84:c3:12:1e:66:30:9f:30:8b:cd:
2e:fc:48:bd:31:0b:23:1b:13:f1:69:0e:6e:e7:94:
1f:5d:2b:7e:5d:f5:70:5f:bf:4f:25:fa:e9:c8:f9:
f1:49:10:9a:67:6f:19:4e:2a:b8:17:c7:26:4e:ed:
30:12:d3:07:1b:ee:f2:b9:d7:c0:68:5d:e1:af:af:
00:49:c9:fe:cc:6d:ad:6d:17:3b:40:82:ea:82:03:
5f:b9:69:18:ad:79:f7:68:96:98:e1:ce:b7:53:ec:
c9:6c:b5:6f:eb:f9:e8:eb:6f:5e:aa:71:1f:88:1a:
c5:f9:d9:17:3c:b3:06:3a:27:d8:24:63:47:79:fa:
1f:2d:6c:a8:26:7c:44:b7:a4:ba:db:b5:64:f8:23:
5d:2a:ae:4d:de:f5:1f:86:79:1b:46:0c:fd:bb:54:
92:12:bf:ef:b4:6c:2d:d9:0c:df:21:c9:01:8d:de:
1c:6c:28:66:71:b2:8b:4d:51:2e:a9:08:84:c9:13:
69:23:3f:99:66:ff:ae:a6:ca:3c:e1:68:62:86:b5:
cd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:23:57:DB:F9:6E:8E:87:38:BE:CB:A3:8A:0B:92:B0:21:1F:D6:6E
X509v3 Authority Key Identifier:
keyid:4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:1d:5e:bb:9e:cb:c5:d1:e0:4c:de:6c:3c:bb:eb:06:33:fd:
bb:09:de:1d:f1:24:55:e2:45:8e:39:1f:27:d7:c5:5a:fe:0a:
5e:a6:b7:d8:52:4f:cf:d2:b2:24:f5:bf:f4:b1:1f:94:4e:0e:
1b:3b:65:02:c3:ed:17:01:6b:b7:e7:c3:8d:e7:56:66:ec:0c:
60:a8:08:da:16:54:f6:3a:88:99:dd:f1:6e:39:cd:de:a4:7d:
85:0b:1a:80:d0:73:c1:54:d7:64:78:d2:39:7e:f8:4f:e5:5d:
3c:66:ce:fd:4c:15:e4:c4:3e:55:1b:bf:af:4a:ea:e6:8c:d3:
47:d5:7b:21:fc:37:50:fa:7b:b0:de:4b:11:2c:42:d0:01:d2:
20:c7:83:c8:ab:2f:99:e7:95:ec:d5:a5:12:47:7f:93:83:55:
05:b9:b8:d6:55:4d:01:63:7c:00:77:9d:19:7b:90:2e:15:6f:
ad:b0:b3:0d:8c:aa:72:55:17:9a:85:9a:19:ce:c4:f6:d5:b9:
c7:70:7d:b7:07:2d:58:b8:7a:ee:e9:fc:0e:a1:73:75:0b:31:
12:53:89:d8:7e:f3:64:53:5c:46:86:f5:57:ab:42:8d:eb:f4:
0e:43:24:a2:f2:f8:4d:6c:99:2d:93:ea:de:3a:37:36:1d:7f:
aa:06:6e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:19 2026 by rpki-client