
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
File: tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json)
Hash identifier: NTImDSYC1+zK2GpVIa18h78fZQ/Y61TJFpSlJAoYvPE=
Subject key identifier: 6C:D9:09:BF:DA:F3:27:E0:33:BE:38:A1:AD:58:44:E5:30:34:ED:F4
Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Certificate serial: 07FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
Manifest number: 0778
Signing time: Tue 12 May 2026 22:18:11 +0000
Manifest this update: Tue 12 May 2026 22:18:10 +0000
Manifest next update: Tue 19 May 2026 22:18:10 +0000
Files and hashes: 1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: kWasuC7O7vlfLJWcpo+GdfrGCqK69QuSExf484fhoMg=)
2: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: lT9v5NbnxVK9U7DD2mXmktWfDqpxVXAsPAeJ0tH/UGg=)
3: BE76C8186C6811F0B3FF7E69C4F9AE02.roa (hash: tUTZjjkoFev8GauKEY0WhhyVriNA3TnviyNz039cIqM=)
4: A716CA94954611EC9B320352C4F9AE02.roa (hash: 4qA+RtnSmzARZEuLDJudhmGjLkvfSOuyPyzBMrZx6XQ=)
5: DF7AF1FC42D811EF8EEF4E51C4F9AE02.roa (hash: +VENXKCDJU5tqZ75p1cfT1kgD+4+BvWB+MfDMwUYXIQ=)
6: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: kQZgqUPhWxQ/s1vLLJSg5OXJR8byy65yctciDi5QS0Q=)
7: 61D8F6CCDC8D11F0969601B93D6F56BC.roa (hash: 5/GOMDxkfyKk+7C84eAtaRHAHViPSBsOdYGaCzmfEP8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2045 (0x7fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Validity
Not Before: May 12 22:18:10 2026 GMT
Not After : May 19 22:18:10 2026 GMT
Subject: CN=6a03a722-84a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:64:46:ec:54:2a:95:38:fa:b7:17:09:41:
ef:02:fe:cd:54:14:a9:b1:68:00:a2:b1:d1:9e:04:
ae:f9:5a:f4:f8:a8:20:31:cc:f2:82:8c:13:79:e3:
6e:42:6a:b0:ec:4e:c3:c4:91:b7:ea:42:37:48:56:
27:83:44:c5:07:d1:f1:f9:e4:ff:dd:cd:e6:7a:9e:
c4:f4:db:7b:bf:9f:62:24:17:0e:9d:88:28:0f:74:
e7:af:ef:a1:82:b7:09:92:8e:ee:f2:32:9d:56:25:
e8:e1:54:71:6f:4b:5f:f3:75:ad:93:7e:77:50:5b:
58:a9:f4:9e:12:7e:94:d2:ce:9c:8b:02:2e:90:e1:
ec:03:38:7c:af:90:68:e5:cd:fb:93:ea:fb:df:a5:
8b:49:7a:f0:34:7d:b7:53:d6:c5:65:ef:15:7b:54:
91:bb:ee:83:52:5c:57:b8:f4:76:8a:da:fb:27:02:
95:f9:50:07:f5:09:88:a9:79:c1:a4:32:03:29:9f:
85:e8:c5:e4:fa:4c:67:f0:22:a5:86:68:35:d1:a1:
73:35:f3:56:cf:cb:67:5f:32:35:c8:a7:3a:2a:e9:
5f:09:41:9e:c2:c1:d1:e2:42:e2:6a:e3:ea:2d:a1:
14:46:c5:88:70:a7:37:c7:11:b2:3a:d3:29:9d:02:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D9:09:BF:DA:F3:27:E0:33:BE:38:A1:AD:58:44:E5:30:34:ED:F4
X509v3 Authority Key Identifier:
keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:eb:5a:b8:cb:1d:e4:b0:3e:e8:3a:99:d5:5e:a0:67:c5:34:
1e:8b:a3:34:32:50:23:01:11:fb:b9:cc:a0:eb:3f:17:04:2f:
dd:fb:3d:57:fc:ce:82:df:8c:17:a5:84:b3:a5:98:b8:e3:14:
72:75:e9:13:86:e5:6d:8d:ed:09:71:89:16:29:9d:0d:0c:6b:
45:4f:c8:8e:9b:01:39:5f:fc:a7:d9:a0:df:19:20:10:3f:89:
40:90:2a:63:f7:e0:70:87:7c:5c:38:cc:60:78:a1:ea:64:3d:
09:48:46:bd:32:c7:e7:6c:5d:9c:f1:79:10:68:be:4f:b7:35:
16:3a:77:42:3d:31:d4:cc:4e:e0:42:a2:c8:c1:41:63:b0:31:
f0:df:86:de:8f:01:28:cc:74:8f:3e:b0:72:02:eb:fc:9b:f7:
09:5e:3c:11:9a:78:7d:e4:85:47:65:da:a6:22:12:ce:f6:78:
68:c6:07:89:3f:0b:f8:aa:54:84:5b:dd:bc:ee:bd:91:78:19:
b7:46:5b:50:d6:87:17:9b:dc:40:2c:a2:6f:00:84:53:3d:b1:
ca:a8:4a:e0:b6:55:98:e7:51:fa:09:96:ba:af:54:c1:f8:1a:
9e:72:e3:a1:64:b5:22:3b:90:60:63:80:be:e1:d7:17:47:fb:
89:79:75:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0RFQTQxMTAvBgNVBAUTKEI0RDZGRkQ1REZGOUVBQzQxM0FCNDQwOEUwOTYzN0Iw
OTQ5NERCQzgwHhcNMjYwNTEyMjIxODEwWhcNMjYwNTE5MjIxODEwWjAYMRYwFAYD
VQQDEw02YTAzYTcyMi04NGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoT9kRuxUKpU4+rcXCUHvAv7NVBSpsWgAorHRngSu+Vr0+KggMczygowTeeNu
Qmqw7E7DxJG36kI3SFYng0TFB9Hx+eT/3c3mep7E9Nt7v59iJBcOnYgoD3Tnr++h
grcJko7u8jKdViXo4VRxb0tf83Wtk353UFtYqfSeEn6U0s6ciwIukOHsAzh8r5Bo
5c37k+r736WLSXrwNH23U9bFZe8Ve1SRu+6DUlxXuPR2itr7JwKV+VAH9QmIqXnB
pDIDKZ+F6MXk+kxn8CKlhmg10aFzNfNWz8tnXzI1yKc6KulfCUGewsHR4kLiauPq
LaEURsWIcKc3xxGyOtMpnQIgjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGzZCb/a
8yfgM744oa1YROUwNO30MB8GA1UdIwQYMBaAFLTW/9Xf+erEE6tECOCWN7CUlNvI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REVBNC9BMjQyNkI2MDk4
MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZzUVRxMFFJNEpZM3NKU1Uy
OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ROYl8xZF81NnNRVHEwUUk0Slkzc0pTVTI4Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
REVBNC9BMjQyNkI2MDk4MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZz
UVRxMFFJNEpZM3NKU1UyOGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAketauMsd5LA+6DqZ1V6gZ8U0HoujNDJQIwER+7nMoOs/FwQv3fs9V/zOgt+M
F6WEs6WYuOMUcnXpE4blbY3tCXGJFimdDQxrRU/IjpsBOV/8p9mg3xkgED+JQJAq
Y/fgcId8XDjMYHih6mQ9CUhGvTLH52xdnPF5EGi+T7c1Fjp3Qj0x1MxO4EKiyMFB
Y7Ax8N+G3o8BKMx0jz6wcgLr/Jv3CV48EZp4feSFR2XapiISzvZ4aMYHiT8L+KpU
hFvdvO69kXgZt0ZbUNaHF5vcQCyibwCEUz2xyqhK4LZVmOdR+gmWuq9UwfgannLj
oWS1IjuQYGOAvuHXF0f7iXl1CA==
-----END CERTIFICATE-----
Generated at Wed May 13 17:17:14 2026 by rpki-client