
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
File: tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json)
Hash identifier: zTZLx4QD8DrhJkp8H5tTCzXYDFUNJ/PbvcsMjL1nqsc=
Subject key identifier: AE:7C:E5:61:08:CF:20:63:4E:AB:F1:84:EF:91:EE:E3:70:A8:DE:AB
Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Certificate serial: 07E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
Manifest number: 075F
Signing time: Tue 24 Mar 2026 21:59:44 +0000
Manifest this update: Tue 24 Mar 2026 21:59:44 +0000
Manifest next update: Tue 31 Mar 2026 21:59:44 +0000
Files and hashes: 1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: jGradL0YA8gQLP1v1yutz8h00bFOs/3Ug3OxtZNZxPM=)
2: A716CA94954611EC9B320352C4F9AE02.roa (hash: 4qA+RtnSmzARZEuLDJudhmGjLkvfSOuyPyzBMrZx6XQ=)
3: DF7AF1FC42D811EF8EEF4E51C4F9AE02.roa (hash: +VENXKCDJU5tqZ75p1cfT1kgD+4+BvWB+MfDMwUYXIQ=)
4: BE76C8186C6811F0B3FF7E69C4F9AE02.roa (hash: tUTZjjkoFev8GauKEY0WhhyVriNA3TnviyNz039cIqM=)
5: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: lT9v5NbnxVK9U7DD2mXmktWfDqpxVXAsPAeJ0tH/UGg=)
6: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: kQZgqUPhWxQ/s1vLLJSg5OXJR8byy65yctciDi5QS0Q=)
7: 61D8F6CCDC8D11F0969601B93D6F56BC.roa (hash: 5/GOMDxkfyKk+7C84eAtaRHAHViPSBsOdYGaCzmfEP8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:59:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2020 (0x7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Validity
Not Before: Mar 24 21:59:44 2026 GMT
Not After : Mar 31 21:59:44 2026 GMT
Subject: CN=69c30950-701f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0e:71:1c:38:fa:3c:bd:2e:79:63:67:3e:7c:
da:66:93:92:39:3e:07:af:90:52:6b:43:b3:22:5d:
4f:ac:9f:a4:a1:61:c9:f6:d6:9c:30:f5:d9:6b:c9:
f2:d9:e4:42:a7:b2:6d:3b:42:c2:a4:6f:53:f5:59:
ac:ea:79:8b:06:70:b3:a2:b4:43:64:d2:c0:ce:49:
a0:c0:f7:4a:bb:6e:a9:0a:15:4c:96:66:54:c9:10:
18:31:98:2b:70:7c:0d:d5:ff:42:1e:e4:88:d2:d6:
79:60:11:cf:46:38:00:5d:f2:f6:ac:4f:37:55:c7:
57:4a:2f:9b:b3:be:d2:02:d0:83:0c:5f:39:52:57:
de:86:2a:56:42:c8:f0:0d:b9:17:d8:81:b4:d5:51:
cf:f4:61:2c:6d:f7:57:19:86:17:92:d3:55:57:ad:
18:7c:21:59:91:83:d7:37:e5:d2:07:c5:0f:7d:13:
eb:d9:9f:e1:1f:d7:99:b0:d4:82:1b:2a:7e:9c:68:
a4:3c:ee:f9:79:41:1c:39:08:6b:cb:a0:a6:69:b2:
51:39:ae:d6:93:83:22:1a:bc:63:3a:94:03:74:8e:
c6:60:1e:9c:55:4a:b3:95:59:df:dc:4a:75:08:a2:
d8:2a:42:a7:35:19:c9:3e:64:78:51:5d:57:58:90:
8a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7C:E5:61:08:CF:20:63:4E:AB:F1:84:EF:91:EE:E3:70:A8:DE:AB
X509v3 Authority Key Identifier:
keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:ac:8b:b2:b3:b7:ca:12:3a:5d:c9:d6:70:8e:1a:15:cb:c3:
3d:41:2a:48:67:90:c5:f4:60:35:26:9c:5f:b5:07:1e:f2:c2:
b7:50:45:01:e2:ea:86:21:e5:f9:96:fb:fe:dc:bd:8e:4e:28:
5f:5e:c6:48:7e:cb:c5:71:a3:2e:46:a1:a4:c7:e1:8d:d4:08:
32:dd:d8:47:88:1d:d9:82:81:96:c5:5e:5d:38:0e:3e:59:63:
3a:00:cd:48:bb:17:2f:24:5a:7b:20:32:27:a8:b0:38:58:82:
0f:ca:60:9e:c2:cc:f3:0b:65:a8:9c:94:cc:5e:bc:9a:f3:77:
ab:f6:ff:8e:00:a0:b6:9b:ea:24:ad:07:39:94:0e:75:19:21:
dc:68:65:24:96:91:09:29:41:6d:e8:53:86:09:c4:fe:fc:f4:
83:3a:8e:6f:1a:e3:01:b0:5c:8e:9a:87:e5:d7:bf:c1:79:1e:
4d:f6:dd:7f:62:cf:1a:26:43:19:4d:c9:7b:1c:f1:34:cd:aa:
c6:68:a8:da:a3:92:7f:26:a6:b0:2f:59:ae:90:48:bd:55:e9:
44:25:a3:30:a1:25:bc:70:64:e8:17:2e:24:5d:8d:a3:c0:89:
cd:91:4b:07:34:d7:11:bc:36:6d:9f:82:43:a9:2d:f2:6a:b5:
23:c1:4e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:57:04 2026 by rpki-client