
$ rpki-client -vvf rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
File: tnwkXksr7q0jwfBd0w_5B32HuOY.mft (raw, json)
Hash identifier: L+5E7hswTDByr8UO6vUnLWtwVFsbYOcwxjb2C0aJSLE=
Subject key identifier: 7D:37:00:A1:C4:A8:79:51:5A:8D:63:84:3C:51:67:66:82:AB:F9:F3
Authority key identifier: B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6
Certificate issuer: /CN=A91116C7/serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6
Certificate serial: 133F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
Manifest number: 1335
Signing time: Sat 04 Apr 2026 16:53:52 +0000
Manifest this update: Sat 04 Apr 2026 16:53:51 +0000
Manifest next update: Sat 11 Apr 2026 16:53:51 +0000
Files and hashes: 1: tnwkXksr7q0jwfBd0w_5B32HuOY.crl (hash: eJyNJbe9KOUgqJaeMPpDJ2a3iXdPjewUCVb+T9L9sUY=)
2: 0CAF01A6C6C811E8AECD6165C4F9AE02.roa (hash: p96Pk01HnxFF2EIL/xWnzPT9gE4H/ULfnQINm3EmY2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl
rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4927 (0x133f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91116C7, serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6
Validity
Not Before: Apr 4 16:53:51 2026 GMT
Not After : Apr 11 16:53:51 2026 GMT
Subject: CN=69d14220-d9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:63:12:98:84:7f:34:72:3a:73:4d:21:b1:
97:95:8e:b3:c7:e1:6a:15:a8:56:c8:2b:a1:20:4a:
23:ba:6d:f7:d4:9d:1d:8e:58:56:d1:c8:15:69:6f:
96:4c:1c:18:2d:a4:f0:6a:62:ad:1e:b6:6d:45:73:
0c:ed:7f:a7:40:cc:4f:a5:70:d9:d4:8b:75:34:99:
2b:29:ae:75:0a:9b:7e:08:bb:7e:2d:51:0e:d1:a8:
b4:92:d5:a1:79:bd:a5:96:29:54:4b:b5:8a:bf:9b:
49:28:a8:ff:e8:05:48:49:b2:b9:55:4b:7e:5f:9d:
33:89:26:10:84:36:5a:40:95:ca:5f:47:b5:8a:be:
73:27:52:d4:57:d8:2e:39:1d:31:95:7a:05:0c:18:
12:af:8f:ca:3e:4c:e0:ea:27:b3:6f:e0:db:ba:36:
c1:99:26:15:22:58:ea:da:30:bc:46:83:3e:94:e9:
72:0e:1f:59:4c:77:c2:0d:92:6a:86:ed:92:97:8e:
f7:d0:67:fc:fe:82:59:bd:db:c9:1f:1f:d2:6e:4a:
5e:52:ed:d5:a0:bd:8d:1f:ad:59:99:28:a1:72:61:
1b:57:a6:59:13:56:ed:93:bf:97:aa:eb:f9:76:f2:
86:7f:9d:d2:db:23:08:df:1c:aa:e7:62:f5:2d:79:
c2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:37:00:A1:C4:A8:79:51:5A:8D:63:84:3C:51:67:66:82:AB:F9:F3
X509v3 Authority Key Identifier:
keyid:B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:86:22:95:76:f2:de:69:5b:be:2f:78:20:a4:bf:5d:8b:5b:
9a:5e:9a:d6:39:2e:e4:49:67:79:b2:27:be:59:14:13:58:ee:
e9:63:78:d8:84:8d:fb:86:57:c9:e3:29:04:a0:84:b4:91:67:
2a:d0:9a:41:62:7b:71:82:e1:1a:bf:e1:29:c8:c3:a5:e8:27:
50:1f:e2:d8:4c:ea:d1:fe:25:4b:92:af:ee:d1:05:6a:fe:cc:
05:46:79:64:ed:5e:92:97:4e:d7:6e:8c:55:e4:3a:0d:e0:87:
62:3e:bb:14:38:b9:07:9d:24:17:07:26:32:20:0c:42:0a:87:
c6:8d:09:49:8a:fc:5b:9a:fb:cc:ea:05:67:06:13:43:f3:0a:
b9:46:0a:68:ea:18:a8:4c:93:49:2c:13:4d:a0:2b:e1:0a:89:
ff:95:87:12:43:07:44:13:2f:7e:96:0d:44:61:1f:b7:20:18:
12:56:d5:32:43:a6:c3:ee:b1:65:50:e7:9a:8d:19:57:c3:f7:
7a:7b:5c:c9:1e:a0:f7:49:8b:74:31:5e:ca:f0:86:dd:a5:09:
6f:67:82:3a:e7:86:fc:6f:c4:79:e5:ee:6e:4d:08:e7:00:c1:
b0:f1:0d:d4:d0:29:74:1a:d3:a6:46:3a:b4:90:63:85:59:1a:
53:3a:53:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:45:11 2026 by rpki-client