
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
File: tRdNgmVknN0nQmySfRaHddeD1Tg.mft (raw, json)
Hash identifier: xHZ3HdgUe0YFvWEibbOFDQ4EmAi/Mlu+ob6/jjSy0eE=
Subject key identifier: 59:39:A0:33:A4:22:98:F2:4C:F3:C2:A2:58:03:34:B6:41:31:38:EC
Authority key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
Certificate issuer: /CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538
Certificate serial: 0C2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
Manifest number: 0C23
Signing time: Sat 14 Nov 2026 18:45:18 +0000
Manifest this update: Sat 14 Nov 2026 18:45:18 +0000
Manifest next update: Sat 21 Nov 2026 18:45:18 +0000
Files and hashes: 1: tRdNgmVknN0nQmySfRaHddeD1Tg.crl (hash: Vx0j/GZO2X8/fQHYZm/o+L0+SwdRxoPMF2gtqWfWR3Y=)
2: 61E12BD0CA0611EEB05EB92CC4F9AE02.roa (hash: nDxmW75XsnkkvR0/lsX99gyZXa0q7ERrzbEjSla7UOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl
rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 18:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3118 (0xc2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D459, serialNumber=B5174D8265649CDD27426C927D168775D783D538
Validity
Not Before: Nov 14 18:45:18 2026 GMT
Not After : Nov 21 18:45:18 2026 GMT
Subject: CN=6af8ac3e-8f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:e4:de:1e:9a:be:5b:88:87:90:ce:d4:99:
26:99:af:4a:8b:65:dd:45:d1:bf:75:de:6d:b8:d2:
94:0b:d6:a4:13:59:54:f7:13:43:76:b5:24:93:86:
90:bc:bc:99:ee:cb:4c:6a:e4:7a:38:f5:32:ba:0a:
7b:ad:a6:f5:c3:56:0a:56:d9:11:13:e4:91:c4:e8:
db:c7:85:3c:32:88:4f:00:b6:50:c8:c0:b9:07:08:
7f:65:09:b8:30:4f:d9:a7:82:1b:2d:6b:f8:ee:b9:
c7:13:25:cb:37:44:71:8a:17:0c:2d:c6:06:31:16:
03:46:2d:6a:f4:08:75:e6:60:20:4e:56:61:90:69:
f9:3f:da:58:c2:77:c4:a3:e4:54:b7:2e:e4:11:d4:
f5:7a:f1:28:66:f3:44:d9:ee:24:ac:77:d5:76:48:
c0:ea:99:6f:cc:8a:ae:06:0d:95:62:e4:2d:25:85:
4e:5b:aa:df:97:d3:37:52:73:38:f1:b6:5e:47:07:
6c:09:3b:3b:18:c9:fc:bc:83:50:b7:e7:ea:e5:7e:
01:0b:24:2f:71:5e:ea:29:35:28:eb:37:16:d5:75:
18:94:ca:6f:89:3f:ca:f0:52:9b:ed:4e:2f:09:ff:
e5:51:a8:75:00:57:71:7d:ad:6d:ce:39:71:d9:91:
a1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:39:A0:33:A4:22:98:F2:4C:F3:C2:A2:58:03:34:B6:41:31:38:EC
X509v3 Authority Key Identifier:
keyid:B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:40:3d:c7:a1:a3:4e:e5:04:23:e4:e0:f2:0a:53:c6:a9:2c:
99:43:5a:bb:a3:47:9c:5c:ee:1c:63:8b:f8:11:22:5f:25:99:
94:5b:5b:7d:a5:da:ba:9b:6e:06:54:35:df:ca:8a:c3:d8:52:
22:1d:8f:2e:6c:7c:96:ce:fd:73:c1:87:46:61:d0:c8:ee:e4:
03:c5:a8:43:c3:88:fb:5d:fa:91:d6:eb:f6:f2:bf:ff:9d:57:
9c:49:7c:a0:35:8c:a9:56:99:f1:94:00:0a:e0:8b:ed:2a:29:
ec:70:75:18:54:ac:77:df:f5:67:b8:78:f0:b6:47:af:04:0e:
8d:9a:c7:72:83:a3:a9:65:a0:04:a0:0a:15:0d:7b:26:81:d2:
e0:01:3e:23:8e:77:9d:a5:6d:35:6f:21:b5:4b:41:5d:75:96:
15:46:c1:bf:5d:cc:cc:30:b6:bb:4b:c3:b9:42:88:22:07:a7:
6a:a1:e2:e8:cd:29:b9:42:ba:8f:e5:fd:8f:ea:fe:b0:8b:98:
e3:7a:79:0a:29:64:f3:74:75:19:ad:0c:5a:22:40:14:54:26:
a8:ec:ce:31:f3:9c:ac:11:87:bd:18:e7:5c:26:bc:f3:81:3a:
8c:56:ea:be:2d:9d:3e:81:f2:8e:8d:7e:51:34:e6:88:c5:07:
de:ec:35:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:31:48 2026 by rpki-client