
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
File: tRdNgmVknN0nQmySfRaHddeD1Tg.mft (raw, json)
Hash identifier: fUY83gX8CituJ/ysThiLRnIZKABYGstAvh6DsN69ymc=
Subject key identifier: 9C:FB:69:83:B8:B7:5E:9C:08:37:7D:60:4E:C8:6A:BF:0D:4D:A5:12
Authority key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
Certificate issuer: /CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538
Certificate serial: 0C12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
Manifest number: 0C07
Signing time: Sun 20 Sep 2026 18:50:28 +0000
Manifest this update: Sun 20 Sep 2026 18:50:28 +0000
Manifest next update: Sun 27 Sep 2026 18:50:28 +0000
Files and hashes: 1: tRdNgmVknN0nQmySfRaHddeD1Tg.crl (hash: UB8RP2AGOYETjVQ++i6AEcZ4ehOKVQk+wogi9ifNKKo=)
2: 61E12BD0CA0611EEB05EB92CC4F9AE02.roa (hash: nDxmW75XsnkkvR0/lsX99gyZXa0q7ERrzbEjSla7UOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl
rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3090 (0xc12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D459, serialNumber=B5174D8265649CDD27426C927D168775D783D538
Validity
Not Before: Sep 20 18:50:28 2026 GMT
Not After : Sep 27 18:50:28 2026 GMT
Subject: CN=6ab02af4-8b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:ae:fc:5b:61:55:b7:8b:71:31:24:db:15:
8b:ba:b3:4e:33:a1:a8:12:c4:dd:fe:a7:26:9f:99:
8e:9e:2f:58:a2:38:2e:67:42:c9:0a:7a:18:32:ac:
3f:b5:28:6f:34:40:46:f1:ba:05:06:7d:4e:a0:e1:
e1:f1:10:07:8f:4f:0c:2d:c1:46:4f:df:67:a2:8d:
52:17:e7:7c:f9:48:cc:f7:6b:d6:e4:9c:60:9e:1b:
4b:b2:d5:f9:ed:13:1c:16:c3:34:76:7d:a2:75:e5:
93:c0:da:4f:b8:7f:c2:30:df:62:41:f9:7a:d3:ad:
6f:08:f9:a5:6f:7d:8a:19:dd:42:1f:ac:c7:2d:ad:
25:e9:7e:0d:92:bb:28:7c:3c:b2:60:18:1b:41:e0:
93:81:8b:e8:88:84:ff:4f:e7:c5:5b:dd:d6:55:18:
5b:ba:81:ef:c4:86:ab:c4:b8:8d:ec:1f:55:74:fe:
c8:c5:d6:68:13:3a:3b:6f:54:fd:ff:49:1c:a8:65:
15:28:42:88:70:60:42:72:65:ec:53:2e:34:72:15:
43:6a:9c:bc:28:81:2b:a3:da:15:8e:4c:7f:1c:3c:
5d:2f:41:b1:5a:1e:c5:d3:46:33:66:e7:68:c7:b6:
65:2d:c9:0c:65:0c:b6:08:f3:a6:a9:b3:49:85:4b:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FB:69:83:B8:B7:5E:9C:08:37:7D:60:4E:C8:6A:BF:0D:4D:A5:12
X509v3 Authority Key Identifier:
keyid:B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:d1:94:71:c4:79:57:a2:4f:eb:0a:a0:65:94:39:67:5a:6b:
db:36:87:56:a2:38:3c:49:bf:c6:08:96:25:57:ce:ae:23:e4:
03:a5:e1:b2:e0:f9:ff:b4:17:ac:79:82:67:ec:ac:ce:aa:85:
f4:26:8d:42:e4:c8:20:57:c7:a7:a3:c6:2f:52:cf:0b:9e:06:
62:95:6c:27:f0:4d:c1:26:20:cf:fd:b8:42:47:75:e2:44:e3:
81:9c:25:08:d4:70:b9:26:00:4f:d3:3a:84:52:31:42:2f:3c:
91:88:a7:61:16:80:34:67:c9:67:0f:b7:21:52:bb:56:9b:f0:
2d:a2:5e:88:b8:4d:ac:dc:71:58:23:ee:04:6b:05:32:7d:64:
eb:11:42:5a:6c:01:71:71:04:84:df:ce:68:52:8c:e4:56:3c:
1b:94:69:e1:1e:03:f5:dc:e6:55:8e:0c:27:a6:26:af:d6:8a:
2d:78:a5:ff:be:f0:76:47:ac:a6:23:bd:d3:41:80:72:96:43:
9a:42:c8:ab:1f:6e:ea:96:48:59:31:81:71:d1:7c:cc:39:b1:
5f:f2:3e:bd:da:6a:d1:77:e0:b3:59:ba:ea:0a:05:4a:30:ad:
e2:73:23:45:69:42:c3:10:3f:f2:60:6c:47:b0:d1:31:e2:57:
a2:21:57:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:57:12 2026 by rpki-client