
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json)
Hash identifier: qnc1tpHDgXnbwc5iHhZwrE9BLrb/VP7fG1t8tc19XRM=
Subject key identifier: 54:91:99:4A:60:8E:03:BB:27:04:1B:C4:8F:0B:6F:8F:62:29:C4:C2
Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Certificate serial: 0EEC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
Manifest number: 0ED0
Signing time: Wed 22 Jul 2026 17:53:40 +0000
Manifest this update: Wed 22 Jul 2026 17:53:39 +0000
Manifest next update: Wed 29 Jul 2026 17:53:39 +0000
Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: j/u3YdRfhHa2+uQbZP3khfc2m9PlYAEin86KZbDioIo=)
2: AC549BBCD64C11F086D19BCFA9248E41.roa (hash: vvgoFlOLUvNpwk59Pxo0XUWthaxoz+rQXYsEb/78o8o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl
rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3820 (0xeec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Validity
Not Before: Jul 22 17:53:39 2026 GMT
Not After : Jul 29 17:53:39 2026 GMT
Subject: CN=6a6103a4-9251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:94:d2:73:48:e7:95:84:bd:6c:3c:4e:4e:77:
4f:4e:73:9b:3c:3e:41:67:b4:4d:43:b0:4a:b6:3e:
3c:88:40:25:fe:5f:0f:78:f2:cb:33:c8:ba:b8:d6:
e5:27:ef:26:da:01:b3:0f:b2:07:95:55:b6:ee:13:
db:05:75:1d:26:56:5e:2a:51:21:91:8e:05:ab:a3:
3e:a4:6d:d8:fb:9d:7c:f5:42:ba:d8:07:f6:15:9b:
ae:76:01:a0:39:ba:a2:e7:21:02:9f:00:e4:e3:43:
c0:58:29:1c:1b:e0:86:57:9a:b0:c1:47:65:cf:d3:
49:e2:2b:4a:bd:be:8e:75:ae:e2:15:15:ac:b2:0e:
95:ef:89:49:da:a6:50:8c:92:3e:51:d2:cb:c4:fe:
e2:dd:30:52:c8:51:0a:81:90:82:af:8b:4a:64:29:
bc:23:4e:f5:dc:c3:67:8e:d5:d5:35:39:b0:91:f9:
7d:f3:12:54:43:18:98:c1:83:8e:99:15:b5:2f:d8:
54:d1:a6:3d:7f:5b:0b:91:0c:81:37:76:ce:a9:01:
27:01:ee:3a:44:b9:90:17:5f:5a:30:1f:c1:75:54:
4b:24:e6:c1:1a:4d:34:82:f5:97:f4:f6:56:c4:bd:
69:07:09:37:ca:10:d8:07:95:64:68:66:0b:39:0d:
a6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:91:99:4A:60:8E:03:BB:27:04:1B:C4:8F:0B:6F:8F:62:29:C4:C2
X509v3 Authority Key Identifier:
keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:1a:7e:b0:28:1c:ad:8e:51:96:f5:fe:81:1b:47:f6:e2:f5:
96:8b:0d:ca:c6:31:b8:e0:a6:be:a6:46:da:f1:f0:4f:d3:23:
fd:fc:8f:2f:37:32:4a:66:fe:72:cd:67:0c:11:74:ca:35:d3:
cf:0d:8f:7b:bc:55:cf:8b:7d:f5:72:65:91:21:dd:38:d5:31:
7b:8d:e6:93:46:13:f6:63:9f:b4:a0:b7:59:82:da:c2:34:3f:
a9:2f:59:b9:2d:f4:9c:05:53:d4:58:4b:7f:a2:5c:d8:88:94:
0d:8a:26:ba:e9:61:53:8c:4a:82:56:58:dd:c5:24:0e:4d:ba:
21:42:06:d1:26:7e:2c:1a:f1:16:89:50:77:cd:3a:50:d7:9c:
53:98:85:77:1e:a3:7e:c1:54:16:f1:17:18:ac:00:f7:e5:78:
dc:b9:dd:fb:32:fa:2c:55:8b:e7:e4:9c:2a:b1:ab:c1:30:63:
05:c0:9d:48:0f:d9:72:b7:1e:a9:e7:23:86:da:f4:7d:73:33:
6c:de:59:68:ae:2a:02:e6:e0:74:e0:08:c1:32:60:1b:ce:64:
d0:6f:8b:33:a4:cd:f8:48:fb:37:44:e9:a8:cc:a8:ea:d9:51:
5d:52:21:7f:80:a1:f9:29:e8:c9:13:6a:43:40:b8:d6:42:d8:
c9:2b:73:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:09:57 2026 by rpki-client