
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
File: TDZeNqZHnY6wtQ2Q820dexnvhNM.mft (raw, json)
Hash identifier: xI5G2iUw18Pb/eOai8Gdd1qcucNb58MTiNdb62Z5gFc=
Subject key identifier: 85:F7:EE:4B:7A:B8:B3:10:6C:09:83:1E:72:61:86:EE:8D:ED:21:EF
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial: 0204
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
Manifest number: 01CF
Signing time: Tue 21 Jul 2026 05:41:14 +0000
Manifest this update: Tue 21 Jul 2026 05:41:13 +0000
Manifest next update: Tue 28 Jul 2026 05:41:13 +0000
Files and hashes: 1: TDZeNqZHnY6wtQ2Q820dexnvhNM.crl (hash: AY0y1tEtoTFTfCGOLv1tVkTyT3jVGvfN+fU/CPLIXMY=)
2: 26B79D64E9FE11EF8751AE17C4F9AE02.roa (hash: CSwNiNiHBOdBkX8QVfEy5RdNRxWDtIIzMJX3lDPz73I=)
3: CAF0BBBCDB0811F0A3EA0CD881D3641D.roa (hash: K6rhOjUE5MsA7iPT9OzT+5zbheWWIvW6req+7O+50Rk=)
4: ECDF4CE2DB0911F0B89EBE0382D3641D.roa (hash: +cfq+DBj705kE9pcPQ8fHhTnhcZwL0furcECRqclk3Y=)
5: 4699D9EADB0B11F0B7B5790A82D3641D.roa (hash: T2Foy9ASPzGFF0amgq/n/ifzed5ff9yCRwIVozmPQbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 05:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Validity
Not Before: Jul 21 05:41:13 2026 GMT
Not After : Jul 28 05:41:13 2026 GMT
Subject: CN=6a5f067a-639e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b3:1a:11:35:32:89:84:2b:6e:f5:db:b4:53:
75:77:5a:e7:34:bf:8e:fc:10:0e:e8:7a:b0:5c:71:
95:28:4f:6b:38:bc:3e:fe:ca:7a:e9:0b:24:81:e8:
2f:9d:bb:37:9f:5e:52:dc:e9:60:cb:9d:81:c9:fe:
6f:47:2c:cf:69:2a:98:de:46:00:18:33:bf:4e:a8:
db:d3:cb:35:10:ae:00:3e:3a:e7:07:5b:91:1b:e7:
88:50:c8:df:67:98:42:00:d5:7c:5f:78:38:72:6f:
0e:4a:af:4e:18:80:0d:66:e2:31:9a:2e:0e:41:df:
56:00:61:4f:e3:50:0e:e5:db:21:63:92:e0:16:50:
4e:4f:4d:72:4a:ff:fd:55:7e:79:2c:fe:e6:50:09:
eb:e3:21:3c:15:a2:85:af:aa:de:e9:1f:1e:70:f0:
c5:d1:c6:4d:da:78:73:ab:db:6a:78:c4:3a:6c:04:
de:44:57:eb:d1:cc:9c:9b:1a:54:03:2a:7e:09:c6:
aa:a9:d2:98:05:89:85:31:46:4f:52:e8:5d:5f:71:
e9:12:f6:e3:40:24:32:17:f2:e4:97:e7:64:9e:00:
2a:46:75:20:c7:ca:6c:fb:fa:97:81:b5:60:9c:2b:
1a:68:d1:6a:13:6c:6c:9b:74:3f:32:1a:66:e5:79:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F7:EE:4B:7A:B8:B3:10:6C:09:83:1E:72:61:86:EE:8D:ED:21:EF
X509v3 Authority Key Identifier:
keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:91:bb:03:a0:cd:20:4c:94:7c:fb:b0:de:16:12:86:2c:a2:
3f:34:01:a7:07:60:4d:10:3b:30:35:ad:8f:72:06:5b:d4:3e:
f0:b5:26:5f:5c:40:bf:25:0e:3e:10:dc:7e:a7:ff:1c:13:d3:
6e:e6:06:87:ff:75:d1:c2:33:8d:10:89:3b:f6:a0:d6:d6:ff:
42:80:dd:87:ed:f6:df:da:b2:11:8d:2f:83:0b:4b:ff:3e:9e:
63:2f:75:f2:fd:55:9f:72:c1:db:16:e8:49:62:0f:71:55:65:
34:03:4c:83:88:62:31:e5:ff:d2:e4:9f:c6:27:b7:7d:9f:29:
e1:4c:46:34:48:57:8b:ae:e1:23:bf:81:4c:75:24:53:32:50:
da:a2:33:41:97:25:dd:07:72:91:f1:59:47:87:9c:71:39:d8:
c7:b3:84:7d:24:59:16:71:f0:19:85:c3:c7:d1:7f:18:ed:70:
b3:a0:7c:99:47:c7:bd:d3:88:20:6c:13:1f:13:92:b9:f8:65:
6c:13:ee:91:0c:4d:99:ef:93:1a:6e:83:0b:e6:1d:22:ad:29:
b6:f1:0c:0e:80:e4:58:3d:01:4a:f1:87:cc:b2:52:61:4a:1a:
38:fa:5e:ad:aa:38:fa:4f:ac:e2:a1:25:b0:a8:70:d2:1b:e7:
83:53:71:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVCNDkxMTAvBgNVBAUTKDRDMzY1RTM2QTY0NzlEOEVCMEI1MEQ5MEYzNkQxRDdC
MTlFRjg0RDMwHhcNMjYwNzIxMDU0MTEzWhcNMjYwNzI4MDU0MTEzWjAYMRYwFAYD
VQQDEw02YTVmMDY3YS02MzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjLMaETUyiYQrbvXbtFN1d1rnNL+O/BAO6HqwXHGVKE9rOLw+/sp66Qskgegv
nbs3n15S3Olgy52Byf5vRyzPaSqY3kYAGDO/Tqjb08s1EK4APjrnB1uRG+eIUMjf
Z5hCANV8X3g4cm8OSq9OGIANZuIxmi4OQd9WAGFP41AO5dshY5LgFlBOT01ySv/9
VX55LP7mUAnr4yE8FaKFr6re6R8ecPDF0cZN2nhzq9tqeMQ6bATeRFfr0cycmxpU
Ayp+CcaqqdKYBYmFMUZPUuhdX3HpEvbjQCQyF/Lkl+dkngAqRnUgx8ps+/qXgbVg
nCsaaNFqE2xsm3Q/Mhpm5XkiYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIX37kt6
uLMQbAmDHnJhhu6N7SHvMB8GA1UdIwQYMBaAFEw2XjamR52OsLUNkPNtHXsZ74TT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0OS81MzE4QTEwODEy
MDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5ZNnd0UTJRODIwZGV4bnZo
Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1REWmVOcVpIblk2d3RRMlE4MjBkZXhudmhOTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUI0OS81MzE4QTEwODEyMDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5Z
Nnd0UTJRODIwZGV4bnZoTk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMJG7A6DNIEyUfPuw3hYShiyiPzQBpwdgTRA7MDWtj3IGW9Q+8LUmX1xAvyUO
PhDcfqf/HBPTbuYGh/910cIzjRCJO/ag1tb/QoDdh+3239qyEY0vgwtL/z6eYy91
8v1Vn3LB2xboSWIPcVVlNANMg4hiMeX/0uSfxie3fZ8p4UxGNEhXi67hI7+BTHUk
UzJQ2qIzQZcl3QdykfFZR4eccTnYx7OEfSRZFnHwGYXDx9F/GO1ws6B8mUfHvdOI
IGwTHxOSufhlbBPukQxNme+TGm6DC+YdIq0ptvEMDoDkWD0BSvGHzLJSYUoaOPpe
rao4+k+s4qElsKhw0hvng1Nx7A==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:35:31 2026 by rpki-client