
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
File: tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json)
Hash identifier: +2gFgL99OXCO8zMpcK93Dg6j7cOMlMlldZbwEyGaCA0=
Subject key identifier: 13:68:27:05:E3:2B:F9:B2:DD:1F:8D:53:36:EA:69:91:A9:7A:7A:AD
Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Certificate serial: 0856
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
Manifest number: 07CA
Signing time: Mon 12 Oct 2026 22:09:29 +0000
Manifest this update: Mon 12 Oct 2026 22:09:29 +0000
Manifest next update: Mon 19 Oct 2026 22:09:29 +0000
Files and hashes: 1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: XiPte26CLJbREz05eb8++PvAu0z0JIwNs+NU+OZBg40=)
2: 42F4260E86F211F1B8F66003A7EE528E.roa (hash: vfUZixrUj69f8oGm3SJCT4P/nwbYiHNMmZYHs7EynG4=)
3: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: vlg26itogzimWhrZ0i1+Tb3EqjG8TstW5T7rv6utFcs=)
4: BE76C8186C6811F0B3FF7E69C4F9AE02.roa (hash: R8I4phETOiBeAPEYJEZeN+zM3emu7i6ZII3wUWn+zBQ=)
5: A716CA94954611EC9B320352C4F9AE02.roa (hash: ckSaIaBp0C2tnzfJNrPjglmyLfVPcguaEhWoRdz8O68=)
6: 61D8F6CCDC8D11F0969601B93D6F56BC.roa (hash: ddJZo//lHq9Ctx7y0h5Z1hWR5denN2+4dnjr/28CZNY=)
7: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: UqCULZpr33i9wM28d9/ADAw4Z3FTaU1dvqC0cM5wfCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 22:09:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2134 (0x856)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Validity
Not Before: Oct 12 22:09:29 2026 GMT
Not After : Oct 19 22:09:29 2026 GMT
Subject: CN=6acd5a99-1cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:17:cd:be:e7:e3:4d:3f:ac:ac:d5:bb:40:
3b:9e:1f:45:e7:d3:8f:fe:22:6b:44:d1:62:7d:32:
57:18:0c:7b:1c:d3:dd:3d:2d:4c:6d:1e:69:2e:35:
7b:d3:c8:4c:cd:f5:38:5d:f9:a7:a3:9a:db:5e:5d:
a2:48:7b:e0:a2:b6:a9:c8:b7:57:79:e9:8e:48:7b:
12:45:2f:e1:4b:e6:d5:4d:e7:2c:45:29:48:b4:bf:
35:11:c6:10:26:f4:8f:f2:0e:8a:79:0a:08:ff:64:
8d:df:bb:dc:c6:b9:b2:90:f6:89:04:93:a9:5b:69:
ef:c0:4e:14:cb:b2:60:70:c8:cb:3a:1e:85:9c:0b:
e6:cc:7d:60:bd:cc:8d:7b:65:99:54:50:f2:a0:fb:
91:a0:bb:f9:45:77:1b:96:d9:cd:4e:82:8d:c0:49:
f4:3c:82:70:f0:a2:a1:44:4e:ec:03:cc:53:7e:cc:
a9:36:7d:f8:21:ae:04:a5:ba:7b:72:e5:0b:cd:e1:
a3:0e:1b:1f:96:dc:17:19:2a:67:91:9f:13:ad:8c:
d1:89:82:b3:4e:00:89:84:f0:1a:c0:a2:d0:e3:e9:
a4:d9:ae:ca:41:8d:a5:f3:d7:6d:17:f1:ed:64:23:
f5:7c:bb:01:e4:43:f8:04:fd:5e:e9:a3:8d:4a:4c:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:68:27:05:E3:2B:F9:B2:DD:1F:8D:53:36:EA:69:91:A9:7A:7A:AD
X509v3 Authority Key Identifier:
keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:26:cf:77:53:93:67:b4:05:57:16:ee:53:17:15:73:7a:38:
61:95:31:78:ff:0a:3c:4d:ac:ca:97:82:ad:47:80:09:cd:17:
92:63:ab:66:9a:97:35:df:6b:0b:eb:d4:fc:90:1d:1a:f5:72:
34:b5:5c:b7:cf:37:3f:2c:18:da:d2:4b:0e:c0:70:ee:42:20:
41:fc:fe:5e:82:e6:63:89:cb:5b:f2:f3:10:b0:8a:ad:c8:eb:
06:ca:4b:87:60:9a:23:cf:c2:27:ca:8f:ad:8f:ae:6a:a2:1f:
3e:bc:a0:b8:b8:25:b9:a1:49:50:f6:5c:5c:ac:97:dd:08:ec:
4f:8d:58:51:ff:7c:a4:25:ca:4c:4b:b8:5f:8b:44:35:ff:d9:
a3:ad:4f:17:65:8a:5b:2d:f3:ec:7c:3b:57:47:a7:22:2c:00:
df:be:50:cb:9c:ec:0d:77:8d:51:d3:78:ce:5a:44:25:9e:ff:
5c:cb:bf:20:f4:0b:02:bf:45:b6:d7:d3:0b:36:c9:2c:2c:b4:
a2:8b:67:e7:cf:49:dd:ce:0f:9b:a3:57:7a:c1:a0:03:b1:76:
80:b3:af:a6:b5:06:5d:78:61:c5:79:fa:a8:f6:9c:e7:95:0f:
fb:d7:e4:a7:ee:a6:eb:93:3e:ca:51:99:67:5a:6f:8b:47:ac:
60:eb:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:09:44 2026 by rpki-client