
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft
File: tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft (raw, json)
Hash identifier: VvwUy9yhLahRNKwJCrSF26Jpo2zJl2NS0ot5UefVpOc=
Subject key identifier: 59:61:09:16:9F:DB:F6:80:21:EF:22:D9:FF:26:52:D6:DB:2B:E0:8A
Authority key identifier: B6:74:70:83:A4:B5:36:69:36:0F:88:B0:99:D4:97:4F:8F:28:95:0E
Certificate issuer: /CN=A91CF477/serialNumber=B6747083A4B53669360F88B099D4974F8F28950E
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnRwg6S1Nmk2D4iwmdSXT48olQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft
Manifest number: 0F
Signing time: Thu 23 Jul 2026 11:11:36 +0000
Manifest this update: Thu 23 Jul 2026 11:11:35 +0000
Manifest next update: Thu 30 Jul 2026 11:11:35 +0000
Files and hashes: 1: tnRwg6S1Nmk2D4iwmdSXT48olQ4.crl (hash: 8ptWfkPD7SKYTxvgxwquNBjAIkEkFkKYzj69H6O6DWA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.crl
rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnRwg6S1Nmk2D4iwmdSXT48olQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:11:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF477, serialNumber=B6747083A4B53669360F88B099D4974F8F28950E
Validity
Not Before: Jul 23 11:11:35 2026 GMT
Not After : Jul 30 11:11:35 2026 GMT
Subject: CN=6a61f6e8-f657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:84:a5:0e:42:1e:01:73:e3:c0:d0:b9:ee:
a0:28:5c:43:71:e5:f1:2f:c6:f0:43:0b:70:4f:da:
fb:68:18:a5:94:ae:00:39:66:02:97:c2:5f:cb:d3:
79:dc:70:43:03:62:db:2b:52:dc:1c:fa:d3:f0:b7:
a9:4b:da:87:14:1d:3c:08:de:30:ea:c1:af:5f:88:
9b:c9:6d:fd:cd:13:5b:dc:51:8c:20:b7:cd:40:eb:
14:f1:d5:24:ec:49:f4:82:07:41:f9:e2:e7:85:22:
90:2a:ac:e3:aa:18:c7:76:60:ef:34:aa:9f:ff:b1:
84:49:28:5e:1d:53:ea:69:3a:bd:7f:e6:7a:f3:3c:
17:a0:05:4c:e9:d4:b0:e4:2f:ba:70:d0:e0:39:ec:
ec:79:c7:07:9c:04:9f:d0:a4:da:df:af:d1:e4:ab:
84:11:24:69:a5:df:fb:15:88:9b:bf:89:bf:b4:c7:
b2:fe:9b:4f:09:08:df:da:c5:41:9c:e8:05:79:50:
07:6c:43:d1:da:b6:db:61:b2:a5:ce:58:6f:be:23:
d4:dc:ab:6d:6a:82:d1:64:6c:6c:92:87:b9:fa:d0:
38:b3:8b:96:70:36:08:f2:cf:22:1f:15:81:ca:d8:
49:c8:4d:05:a2:93:7d:80:a3:c5:56:06:54:51:ad:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:61:09:16:9F:DB:F6:80:21:EF:22:D9:FF:26:52:D6:DB:2B:E0:8A
X509v3 Authority Key Identifier:
keyid:B6:74:70:83:A4:B5:36:69:36:0F:88:B0:99:D4:97:4F:8F:28:95:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnRwg6S1Nmk2D4iwmdSXT48olQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:59:25:b2:2e:2d:bb:b9:96:eb:77:c5:3b:a8:7e:36:91:f2:
55:7f:64:91:fc:45:e0:2b:ca:46:33:1b:fd:19:d8:57:9c:50:
94:31:0d:99:a2:0a:32:68:30:26:c4:0d:c4:48:5c:64:23:f7:
c7:3d:17:4c:fc:f6:e5:45:11:cd:71:91:1b:9e:4d:91:5a:a8:
64:7b:09:52:32:0e:a9:7f:52:27:36:6f:a1:53:91:ab:9f:ea:
6b:7e:49:29:cb:80:6c:16:3d:df:a1:d4:4e:5c:16:70:bd:75:
4a:a0:51:67:d5:b3:48:4b:9d:1a:eb:83:84:cd:24:e3:37:99:
14:12:80:67:81:a3:93:6b:26:88:96:80:a9:cd:c5:fd:cc:04:
c8:4c:37:58:de:65:58:7d:b4:5a:37:97:ed:98:23:e1:5f:ab:
27:c5:32:2b:b0:23:62:1e:d5:4d:fb:df:5e:9e:70:6b:94:66:
82:ba:26:86:45:d9:f0:a4:db:19:eb:ca:e6:f1:f9:05:61:f9:
6b:43:88:35:cf:a8:34:0b:75:ff:6c:26:a3:95:30:10:41:59:
19:eb:e7:17:e6:1c:dd:13:00:af:68:d1:47:f1:db:da:62:61:
35:03:2a:67:3c:38:ce:26:eb:a2:0e:1c:d9:6e:a8:22:f8:d3:
14:33:ab:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:09 2026 by rpki-client