
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
File: tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json)
Hash identifier: Sj41RZNhlBKL5HSB2jP1slGPedf+MvzBY1PrHVFrbgg=
Subject key identifier: D9:67:3B:9C:DF:81:97:0C:ED:36:8F:5A:1A:8C:D9:8E:20:A1:93:34
Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Certificate serial: 0824
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
Manifest number: 079E
Signing time: Fri 24 Jul 2026 01:47:18 +0000
Manifest this update: Fri 24 Jul 2026 01:47:18 +0000
Manifest next update: Fri 31 Jul 2026 01:47:18 +0000
Files and hashes: 1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: tMa9oSAksFW9RPxAUN2iBgw105uiafYOM/xLcR37owI=)
2: 61D8F6CCDC8D11F0969601B93D6F56BC.roa (hash: 5/GOMDxkfyKk+7C84eAtaRHAHViPSBsOdYGaCzmfEP8=)
3: 42F4260E86F211F1B8F66003A7EE528E.roa (hash: EcWvWkr/FOCLOdWYQWqsbL2CeCsuMLBdI3Q98fhCW4k=)
4: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: lT9v5NbnxVK9U7DD2mXmktWfDqpxVXAsPAeJ0tH/UGg=)
5: A716CA94954611EC9B320352C4F9AE02.roa (hash: 4qA+RtnSmzARZEuLDJudhmGjLkvfSOuyPyzBMrZx6XQ=)
6: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: kQZgqUPhWxQ/s1vLLJSg5OXJR8byy65yctciDi5QS0Q=)
7: BE76C8186C6811F0B3FF7E69C4F9AE02.roa (hash: tUTZjjkoFev8GauKEY0WhhyVriNA3TnviyNz039cIqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 01:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2084 (0x824)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Validity
Not Before: Jul 24 01:47:18 2026 GMT
Not After : Jul 31 01:47:18 2026 GMT
Subject: CN=6a62c426-1d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:7f:c2:b6:76:28:91:d0:67:f3:24:b0:40:
55:b5:7b:c5:e6:7f:e7:3c:1b:99:d1:dd:39:0b:25:
a2:ee:f0:a0:98:a0:89:da:67:b4:73:85:94:ea:72:
bb:2a:02:24:88:2d:f2:5a:14:9c:f4:ba:aa:e5:87:
dc:74:d7:94:8f:6b:9d:92:49:54:48:8b:c0:71:f0:
e7:17:72:32:85:8a:75:70:d5:3f:df:45:fa:3e:af:
56:8e:e4:61:92:cb:a4:83:41:f2:7f:1e:bd:98:97:
59:ae:e6:22:bc:f0:0c:b7:54:00:01:39:5d:3a:ff:
b3:ab:5e:64:58:df:85:0e:18:3d:77:1c:93:eb:af:
2c:6c:15:28:7b:61:7d:fd:ad:5b:8a:53:da:2a:ca:
a3:3e:47:71:ca:8b:1c:91:42:a0:22:ca:76:be:ed:
3b:bf:d7:2c:40:e0:fd:bc:7d:be:74:79:d5:ec:bb:
f1:2c:bb:a2:75:1d:c8:a7:18:86:68:e4:91:45:08:
1c:14:f5:ec:15:a4:19:41:4b:c6:06:35:35:db:f2:
26:54:46:f6:5d:28:0f:ff:8f:a0:60:7f:a0:7d:fb:
51:e3:2f:1d:e8:64:12:95:22:44:17:40:09:87:01:
2f:96:ee:84:30:7c:ae:ba:b8:99:65:71:0d:a2:f6:
47:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:67:3B:9C:DF:81:97:0C:ED:36:8F:5A:1A:8C:D9:8E:20:A1:93:34
X509v3 Authority Key Identifier:
keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:e0:ff:f3:8b:ba:3f:db:e5:d5:cb:1a:e5:dc:fd:c6:a6:8c:
7d:d9:0f:5d:02:65:18:5a:69:42:98:b0:36:63:be:98:16:13:
8c:14:f9:67:a6:93:f4:05:bb:53:48:6e:de:5c:e7:74:b1:92:
a7:13:1d:1e:50:96:bc:23:c1:7c:1e:44:cd:d1:b0:1f:95:15:
1a:82:6a:7e:45:ed:45:8d:93:26:64:15:07:9b:14:b2:82:38:
a7:bd:29:38:b6:c1:ee:af:e0:6b:9e:f8:e5:45:17:00:58:40:
e2:33:a9:6f:02:d5:de:58:2d:9c:da:60:2b:b8:9c:8c:24:17:
7b:d7:67:06:02:2a:46:26:74:c7:66:ae:ec:ed:1d:d9:01:3b:
30:8f:78:dd:1c:9d:6a:e5:7a:0e:3b:f5:d2:97:74:56:6e:96:
91:84:4e:4a:42:be:20:d5:e5:e5:07:a9:01:f7:25:f7:d7:e1:
2f:69:09:6c:17:85:86:2a:a3:e4:65:1a:6d:9c:ba:09:68:4a:
fc:f0:a6:1e:a9:48:ff:8d:5b:3f:24:d9:c1:bc:a5:7b:f3:79:
bf:a7:11:d9:f1:4e:e2:24:39:89:1f:c1:c4:a7:5e:2c:ab:99:
d3:d1:2a:79:31:97:12:64:0a:10:61:10:2d:cb:b9:54:e7:df:
c8:66:4b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:40:01 2026 by rpki-client