
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.mft
File: TABjIQ1dhGUCvmLuKrTtJU-hUzE.mft (raw, json)
Hash identifier: mNbRe+UZW1CCMpWxSblYU/HhwYDUFmVglMicLX0LuL0=
Subject key identifier: 4E:43:24:CD:FD:9F:D9:63:D8:80:51:7C:C4:A6:49:F3:00:43:82:A9
Authority key identifier: 4C:00:63:21:0D:5D:84:65:02:BE:62:EE:2A:B4:ED:25:4F:A1:53:31
Certificate issuer: /CN=A919FC57/serialNumber=4C0063210D5D846502BE62EE2AB4ED254FA15331
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TABjIQ1dhGUCvmLuKrTtJU-hUzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.mft
Manifest number: 3E
Signing time: Sun 27 Sep 2026 09:07:31 +0000
Manifest this update: Sun 27 Sep 2026 09:07:30 +0000
Manifest next update: Sun 04 Oct 2026 09:07:30 +0000
Files and hashes: 1: TABjIQ1dhGUCvmLuKrTtJU-hUzE.crl (hash: /uPWdWogyeZ3splXLgBq+hhvKIOwV9TXdajf9BWJOWw=)
2: 7F6617725EE411F1B0096E1CFD79AC22.roa (hash: iEtERU/YxbdfzHAt/g+SXbLAaj7SO/HjyfXDuyj6Hkc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.crl
rsync://rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TABjIQ1dhGUCvmLuKrTtJU-hUzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 09:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FC57, serialNumber=4C0063210D5D846502BE62EE2AB4ED254FA15331
Validity
Not Before: Sep 27 09:07:30 2026 GMT
Not After : Oct 4 09:07:30 2026 GMT
Subject: CN=6ab8dcd3-bbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:65:cf:8a:ce:e5:38:77:21:5a:63:9d:3e:
6f:e8:aa:07:12:f6:1f:b0:83:41:13:59:0b:46:3a:
2c:2d:62:1f:d0:5f:b8:e2:f8:30:e5:e6:40:d6:57:
70:68:82:b2:a4:22:1b:ad:62:6f:2f:01:e3:48:2e:
d4:82:cb:78:1f:d5:ea:ad:a1:71:01:2a:5b:d2:fe:
9c:50:78:16:19:74:41:76:49:e4:26:9a:38:bb:05:
6f:33:02:f8:ab:14:e0:55:58:10:79:14:2c:7c:32:
2e:a4:33:86:ce:d8:6a:cd:01:45:48:ec:e6:bf:8c:
e8:ff:76:6b:89:14:57:c1:58:b5:29:da:a8:55:e9:
77:78:55:92:07:b0:49:7e:c2:40:5a:55:7a:e3:50:
e1:81:94:b5:8f:78:0f:b0:35:46:e5:19:e5:53:49:
0c:ab:ce:9a:c2:b7:1a:05:7b:8b:6a:80:64:70:21:
5f:55:62:a4:68:d6:b3:82:ea:89:0f:4f:c9:48:f2:
31:af:d4:d7:6a:f7:7b:4d:87:6b:97:65:60:9b:67:
25:3a:a1:d3:72:c6:2e:07:23:ae:63:09:6c:74:a6:
54:eb:bf:02:a6:2f:e0:b1:d9:8b:60:04:cc:1d:97:
a3:6e:c5:32:fb:ff:b5:88:db:7e:93:77:82:9b:5e:
7d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:43:24:CD:FD:9F:D9:63:D8:80:51:7C:C4:A6:49:F3:00:43:82:A9
X509v3 Authority Key Identifier:
keyid:4C:00:63:21:0D:5D:84:65:02:BE:62:EE:2A:B4:ED:25:4F:A1:53:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TABjIQ1dhGUCvmLuKrTtJU-hUzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:2d:63:49:d2:9d:5a:43:15:9b:0c:e9:b1:cb:02:c9:e6:f7:
25:b1:90:a9:66:4f:37:1e:d5:66:af:e9:a6:c9:0e:9d:ab:59:
a1:8a:15:16:1e:77:5a:2e:f4:6a:c6:d7:6c:fe:b5:f0:eb:57:
14:d3:16:0f:84:ba:e4:f0:e5:17:6c:69:01:68:1e:5f:11:66:
98:e7:3b:96:fd:d6:c8:70:62:ad:3e:9b:21:7c:9b:4f:60:9d:
60:c2:5f:b6:11:b3:00:13:25:cc:66:d9:42:c3:a4:a6:49:76:
ec:e0:cb:ef:0c:d5:77:fc:d8:bd:ed:0c:dc:4a:b8:ca:34:ed:
26:ec:c6:02:09:9b:7d:d2:60:5d:92:83:f0:77:05:e2:dc:37:
b0:37:c6:30:be:58:d1:66:dd:e2:08:4f:1e:15:13:b0:74:93:
96:8b:cc:88:9a:5e:99:b0:bc:06:e8:c1:ea:cc:54:8e:99:e3:
70:51:48:37:db:5c:5f:31:a5:3a:01:3f:f5:6e:05:01:fc:ba:
30:50:23:62:a2:90:96:88:6a:dc:52:9f:b3:72:aa:6d:df:b5:
56:f0:14:9c:f2:b4:79:1b:93:45:27:89:86:5e:03:ac:f7:a0:
34:f2:a6:69:74:ca:9b:ac:00:ec:77:cc:12:90:5d:63:ed:0e:
90:57:8e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:41:00 2026 by rpki-client