
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
File: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft (raw, json)
Hash identifier: y6gsux/tvAtdzAkL0hpcqbGrA/eXhCfvcXPFDOn3bJM=
Subject key identifier: 12:00:1B:48:3B:68:45:A1:C9:0F:CD:0B:D1:2C:87:4B:2C:E6:1F:20
Authority key identifier: B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6
Certificate issuer: /CN=A911A4F7/serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
Manifest number: 0180
Signing time: Fri 23 Oct 2026 05:11:06 +0000
Manifest this update: Fri 23 Oct 2026 05:11:06 +0000
Manifest next update: Fri 30 Oct 2026 05:11:06 +0000
Files and hashes: 1: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl (hash: G3IEDBIdG7r2ye3SYFl1XCJ74twzi9cwfIb+N/MXnHc=)
2: F17DA0FE85FC11EFBD7A485FC4F9AE02.roa (hash: TOEX7WADj4WjdUpGNDc+jbCKJbKY4o/A8AREidTmfiM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl
rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 05:11:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A4F7, serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6
Validity
Not Before: Oct 23 05:11:06 2026 GMT
Not After : Oct 30 05:11:06 2026 GMT
Subject: CN=6adaec6a-49b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a9:5c:98:65:59:63:a5:0a:ae:ee:ff:b4:ef:
4c:09:f2:23:04:6f:a6:13:c0:fd:4f:18:a7:cb:7a:
25:be:d7:63:43:32:e5:b3:ec:66:ae:f0:c2:80:1e:
d9:d7:89:8d:88:67:2c:43:fa:91:c7:19:5c:46:29:
f9:5f:54:cc:4f:cb:4d:20:0b:1a:3a:67:cd:cb:2d:
72:b8:c0:50:19:3d:77:86:a0:4d:0b:9b:23:8d:d5:
f0:20:b0:41:35:87:b8:be:0e:af:b6:f5:8c:7e:57:
89:fa:c8:60:8d:52:6d:67:cc:48:f0:b1:d0:dd:9a:
df:66:e6:27:00:e4:14:95:1b:40:58:2a:14:38:c2:
ac:79:06:c6:38:a9:d5:b0:3a:d1:ac:bc:c0:74:4e:
62:c2:fd:70:f7:f9:5a:9c:e9:3d:d6:6e:2f:1a:6e:
49:fd:fa:3a:8f:06:51:74:22:07:87:52:01:58:30:
cb:a8:bd:83:d9:ed:bc:66:7f:8f:18:2d:2c:16:3e:
95:92:ff:13:4c:91:3c:8e:71:dd:c1:22:80:e6:d2:
5a:95:f1:42:85:21:f6:02:36:90:96:bf:f6:5d:68:
46:b5:20:8e:9c:9f:72:87:41:31:b8:a8:2c:60:6d:
7a:56:95:8a:ad:fd:3b:1c:aa:52:8e:d5:47:8e:cb:
a6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:00:1B:48:3B:68:45:A1:C9:0F:CD:0B:D1:2C:87:4B:2C:E6:1F:20
X509v3 Authority Key Identifier:
keyid:B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e3:77:7b:42:93:86:76:9e:77:47:bb:de:73:77:c1:96:bf:
26:04:66:ad:f2:1f:dc:89:9d:45:c6:7c:9b:ca:0a:23:89:05:
88:2f:1a:77:e5:4e:9b:05:34:40:10:df:fd:cf:98:db:e5:39:
fa:65:68:d8:0a:a1:c9:ea:cb:c8:a9:e9:99:b1:ae:e7:9c:09:
2b:86:d6:6e:d2:9b:e4:47:08:d8:74:95:56:ee:3c:ab:6e:b5:
37:2b:5a:80:fa:e3:a4:9a:a0:8a:8d:cc:6e:05:d2:f9:94:27:
cd:c5:5c:86:ce:54:7c:68:85:a6:b6:ab:21:46:a2:e7:96:65:
f5:a2:77:40:0d:d8:b5:83:65:87:89:09:1e:f4:2e:02:cd:bf:
96:96:e9:7a:38:02:a9:77:80:88:9d:9b:75:0a:28:57:c2:73:
e0:dd:a2:43:74:a0:c2:6d:b9:d3:35:c7:e1:0b:20:0e:59:65:
71:33:1e:15:a7:43:d9:2e:ef:af:66:15:3b:29:07:9f:2e:64:
cc:ee:ed:f9:bb:3d:54:25:db:b7:72:c3:13:e4:63:c5:89:8f:
9c:ca:20:04:b9:90:4b:5c:16:ec:c3:0f:5e:0f:4a:c4:c9:8a:
4a:a9:35:c1:ce:5a:44:e0:be:6c:55:0a:a5:37:8f:4d:e6:64:
4a:d0:f3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:46:10 2026 by rpki-client