
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
File: tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft (raw, json)
Hash identifier: YcnShNsAKqqCdnA35GXYiK/yk0nk77/YRThid3ucTH0=
Subject key identifier: 20:B1:A7:E6:36:0D:90:FB:6D:BF:21:DD:E0:07:67:81:27:00:B0:A3
Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A
Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
Certificate serial: 05BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
Manifest number: 05AF
Signing time: Tue 24 Mar 2026 22:52:00 +0000
Manifest this update: Tue 24 Mar 2026 22:51:59 +0000
Manifest next update: Tue 31 Mar 2026 22:51:59 +0000
Files and hashes: 1: tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl (hash: 2GoqJXfByQHM9GaiPYNP3HoRL0jnItX3cakWi21nlxA=)
2: FC48A6E45FA711EF81D7F60DC4F9AE02.roa (hash: ZwaaaCTB5MJnKC+ti5oXMWpTHrYQMXviyJGrRl6G7v4=)
3: 90AEB6B26C0411EF903ED20BC4F9AE02.roa (hash: 39dWXtJ3zNJllsdeoKvUITiTmTYBuJqx9UsYIBiECf8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl
rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:51:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1471 (0x5bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED3C, serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
Validity
Not Before: Mar 24 22:51:59 2026 GMT
Not After : Mar 31 22:51:59 2026 GMT
Subject: CN=69c31590-bc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:32:cd:d1:7a:a4:bb:96:f4:68:13:16:a5:
07:74:6a:3e:b1:d6:3d:24:bb:19:1b:b1:de:19:6a:
f0:3e:a9:0e:53:52:c2:99:a1:14:d3:d2:86:34:72:
71:a7:69:3d:23:49:d1:d1:e7:58:77:5a:5d:63:9c:
d0:df:22:d0:1e:87:04:bb:6f:39:44:63:c2:c2:7f:
d3:b9:88:f0:15:35:0b:ab:e8:6f:a0:a1:df:7b:fd:
2e:6e:19:fe:8d:58:29:ef:6f:fc:4a:2f:9b:57:03:
db:5e:48:b1:1e:f0:ab:a6:eb:89:b8:73:56:07:11:
6e:62:d7:e3:6d:4a:9f:19:eb:49:f9:aa:d7:1d:e0:
4a:0d:62:08:2c:39:2f:a2:05:17:e5:b2:ae:02:f6:
19:18:b8:d8:2e:9b:f7:07:f8:cb:34:3a:84:28:8a:
4e:48:06:16:a1:52:21:ce:03:86:96:d5:fc:ca:d5:
9a:b0:bd:dc:0b:d9:b7:60:71:cd:67:87:55:8c:12:
51:ef:4d:01:11:91:30:76:ef:85:cc:06:07:e1:e8:
6d:a4:3d:90:76:36:7e:22:0a:b6:39:7d:d8:9f:76:
c6:cc:51:bf:5c:18:4b:f7:24:75:d2:63:dc:14:6d:
49:df:bb:d6:03:d6:38:4f:31:64:c8:23:43:e3:b6:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B1:A7:E6:36:0D:90:FB:6D:BF:21:DD:E0:07:67:81:27:00:B0:A3
X509v3 Authority Key Identifier:
keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2a:6f:5d:b8:64:9a:3c:9e:91:da:0e:de:86:38:de:e4:ca:
d7:ee:89:61:b1:04:54:5c:47:ed:ec:66:10:ed:3d:8f:b8:65:
42:9f:b7:42:70:de:75:01:52:7c:2e:a9:e0:ce:70:06:a9:2a:
c3:f0:26:7e:a6:04:2d:98:eb:d2:95:13:22:6f:80:64:91:6a:
b1:00:2b:cf:2e:45:0a:93:49:3c:0e:6f:02:c4:59:b7:17:a6:
83:c1:d5:26:fb:f5:39:36:ee:2b:46:0f:c6:12:4a:83:10:f4:
52:ee:4f:29:bc:e5:7f:4d:d8:2d:c4:11:e6:80:e5:54:c7:8a:
c2:bb:6f:13:78:73:a2:6e:86:d9:49:e6:96:86:3b:fd:45:8a:
55:50:73:5d:bd:04:86:f7:0b:f2:0b:76:d3:2c:4f:87:99:ae:
96:61:c7:3f:47:0e:17:71:5d:14:41:a7:f1:79:f5:ba:9d:93:
bf:ca:38:49:24:9d:ce:15:7b:2a:6d:60:1b:2e:00:ff:d9:06:
5c:05:13:dd:bd:64:72:bd:44:54:cc:44:56:96:bf:0d:25:f4:
bd:ac:82:c7:1a:85:a7:7e:76:6c:65:a8:a9:a7:c7:65:94:6f:
75:2d:b8:f7:f9:87:49:e7:a6:a0:9d:32:0c:29:53:5c:47:92:
ab:52:d1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:10 2026 by rpki-client