
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
File: tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json)
Hash identifier: n5IAHKXeYQuIpZK1D8JHXk6WIwAXzEu2Z0x69EMbFFA=
Subject key identifier: 0D:87:96:F3:68:61:35:81:D8:65:E6:4C:F6:43:09:D4:81:F3:D6:0A
Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Certificate serial: 02A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
Manifest number: 027B
Signing time: Mon 07 Sep 2026 02:01:24 +0000
Manifest this update: Mon 07 Sep 2026 02:01:23 +0000
Manifest next update: Mon 14 Sep 2026 02:01:23 +0000
Files and hashes: 1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: YKDz5zKFUNUDzEs5kh6v7z8tFrgLqRl1SUP8oYJuPHU=)
2: C94C5FD4163911F1B9B26C9A3C3D8C67.roa (hash: MYDqaVFwRJB1jmhIu+ie4ItmCnxfdWtMitAnA5vk2cU=)
3: 873859B668B611F1BCF0B20C8047A888.roa (hash: xerdXCtgfdD81kACTYlmhobJVdQsaQnlYFPryqqERd4=)
4: 6F4F0F4230AA11F0AD39210DC4F9AE02.roa (hash: 8l1Wjg/gDk9CaJhrRm6w9SVvYUtM+TgdHiZO59WdB4Y=)
5: 221A3064480411F0A14D5A83C4F9AE02.roa (hash: 2t2Wq1XOsxAK8xIPHJCFe3jwKEwQMUnGPVMPG/cdN/Y=)
6: 2D450BA8B58211F094C92178C4F9AE02.roa (hash: 8RovJ5HrPwKr7ltpxn4WzuCgory3ey/kpplqDXgEB7s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Sep 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675 (0x2a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Validity
Not Before: Sep 7 02:01:23 2026 GMT
Not After : Sep 14 02:01:23 2026 GMT
Subject: CN=6a9e1af4-6739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:eb:a0:58:75:f4:ad:2c:a5:dc:c1:cb:41:19:
dc:b3:10:58:b5:cc:f1:83:29:83:9a:5b:71:e8:29:
00:52:cd:45:1f:ca:03:d5:52:6d:32:13:d0:6f:64:
e6:e2:4f:73:14:d3:00:f3:82:9b:02:3b:e3:14:7a:
b7:fc:ab:82:5c:06:10:6c:fe:55:45:ec:c8:5e:1e:
42:1c:d4:59:2e:4a:6a:78:5b:61:01:b6:a6:c4:bc:
7a:91:87:aa:e1:4e:60:1d:78:ba:d6:94:0b:e2:ad:
b2:e4:7e:d2:5f:42:44:bb:43:c6:38:4c:b8:13:7f:
a7:f8:e8:cc:6b:5c:6c:fb:93:73:46:70:c9:e8:81:
76:23:88:d6:32:93:a9:43:1b:8d:a5:fb:ca:ab:56:
ac:45:e7:bc:f4:69:f9:92:fb:fa:88:3a:37:70:32:
70:df:c8:e1:49:c4:80:e4:90:43:9a:18:c5:5c:ca:
5b:91:6f:84:11:fb:05:f5:e5:d3:e9:50:f7:26:49:
a6:61:56:51:49:59:00:09:d3:92:61:0e:c0:63:b4:
d8:4b:6c:67:8b:4e:da:6d:bb:74:3a:1d:ff:f6:28:
2d:3b:d0:b3:2d:57:38:9b:bd:18:15:e3:ba:53:24:
b2:c5:47:19:0e:61:ea:6a:14:72:07:fa:6b:07:e3:
dd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:87:96:F3:68:61:35:81:D8:65:E6:4C:F6:43:09:D4:81:F3:D6:0A
X509v3 Authority Key Identifier:
keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:22:db:98:1b:cd:2b:fe:43:71:b5:89:50:a1:54:83:bf:b3:
a7:22:8b:6c:33:c9:c0:04:a8:1f:8a:38:41:5a:57:e1:ad:3a:
85:9a:72:0a:02:bb:43:77:4e:69:b1:fe:3f:87:f9:b4:70:dd:
e9:5b:0c:85:b5:36:5d:57:84:c6:13:6f:8a:34:e1:3a:b0:5e:
8e:34:c1:2e:85:05:d9:36:fd:60:3e:11:93:4a:f1:e2:7f:a0:
ae:cc:5d:b2:aa:a6:e6:50:c8:a6:0f:43:2f:97:b9:ae:02:4d:
01:da:a0:d6:1a:91:3b:7f:ea:3e:df:91:40:cf:17:31:48:36:
b2:4e:62:9f:69:7d:45:ee:db:86:29:81:f1:14:4e:78:a7:ad:
b3:48:5d:97:4b:58:e0:ad:0f:c8:74:da:ec:1a:72:a3:c4:0b:
e0:41:78:58:79:ce:28:c2:87:f8:97:b3:f8:07:0e:d6:04:2f:
60:12:35:88:ff:2c:a7:69:49:a1:68:2c:f5:e5:32:23:f1:46:
a6:9d:ea:98:83:aa:c9:e8:74:a8:dc:bf:8d:f9:2c:51:62:dd:
25:71:6c:40:52:44:05:b9:1b:61:d5:eb:06:e2:cc:56:5e:bb:
47:8e:2c:b7:5f:c3:94:62:ad:56:c5:d8:30:d7:68:9b:df:d1:
de:41:f7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 21:57:24 2026 by rpki-client