
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
File: TDZeNqZHnY6wtQ2Q820dexnvhNM.mft (raw, json)
Hash identifier: 9/bcROuQVT9pE00PZHJgEezoW7chzWpkk7av3ZWPNY4=
Subject key identifier: AB:91:16:A2:34:14:AC:77:18:01:6C:F2:BD:21:59:CA:4D:27:0A:07
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial: 0234
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
Manifest number: 01FF
Signing time: Fri 23 Oct 2026 04:15:18 +0000
Manifest this update: Fri 23 Oct 2026 04:15:17 +0000
Manifest next update: Fri 30 Oct 2026 04:15:17 +0000
Files and hashes: 1: TDZeNqZHnY6wtQ2Q820dexnvhNM.crl (hash: NKP2H6jSVB2ayTq5I9AL0B3zkV9nkAPuPsnGNSvih3I=)
2: 4699D9EADB0B11F0B7B5790A82D3641D.roa (hash: T2Foy9ASPzGFF0amgq/n/ifzed5ff9yCRwIVozmPQbI=)
3: 26B79D64E9FE11EF8751AE17C4F9AE02.roa (hash: CSwNiNiHBOdBkX8QVfEy5RdNRxWDtIIzMJX3lDPz73I=)
4: ECDF4CE2DB0911F0B89EBE0382D3641D.roa (hash: +cfq+DBj705kE9pcPQ8fHhTnhcZwL0furcECRqclk3Y=)
5: CAF0BBBCDB0811F0A3EA0CD881D3641D.roa (hash: K6rhOjUE5MsA7iPT9OzT+5zbheWWIvW6req+7O+50Rk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 04:15:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Validity
Not Before: Oct 23 04:15:17 2026 GMT
Not After : Oct 30 04:15:17 2026 GMT
Subject: CN=6adadf55-7e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:2d:69:a4:18:b1:b6:55:f9:79:0d:23:e0:
c6:e2:d1:2b:03:b0:27:57:92:d2:e8:e0:ec:aa:47:
61:04:7b:04:58:0e:7d:91:7c:9a:29:a5:f7:b3:94:
e3:49:1f:26:56:3d:01:00:85:c6:a7:bb:54:f6:16:
43:8d:7f:f2:0a:94:ee:53:07:99:5c:e3:5c:21:c4:
80:98:cc:7f:43:a9:75:43:ec:1c:2a:82:e2:2c:d9:
78:fb:ed:90:35:c2:36:ec:9a:d3:e9:23:23:95:8f:
be:62:05:0f:a4:09:ad:b9:92:ed:41:56:6c:d4:29:
be:b5:86:93:be:79:e4:7d:68:77:37:e8:d2:96:a3:
5f:d8:0d:e1:bb:69:9b:4d:c0:0c:41:e5:5b:bf:fc:
ff:61:39:15:0f:4b:9f:26:cd:37:cd:d0:01:5d:72:
e4:68:62:b4:57:d8:65:b3:f3:41:d8:33:9e:5f:23:
ff:f8:71:7d:3d:c1:51:62:65:3b:5f:d5:b9:08:f3:
60:9e:c4:10:72:15:b6:84:22:69:52:72:84:ea:77:
57:18:a7:36:f5:eb:31:36:42:e5:01:c0:26:99:b8:
b5:89:d2:5d:c1:5c:30:2e:ae:29:03:c4:46:7a:c1:
52:8a:24:e4:af:f1:b7:72:99:e5:d2:2c:04:a5:d3:
8a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:91:16:A2:34:14:AC:77:18:01:6C:F2:BD:21:59:CA:4D:27:0A:07
X509v3 Authority Key Identifier:
keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:f7:dc:53:6e:75:59:54:60:85:f7:8c:2d:b5:53:f7:5a:3c:
09:d6:bc:14:13:3d:48:3d:8b:fa:90:e4:d5:7e:50:aa:6e:d4:
fb:46:92:51:cd:97:9d:9b:7e:f6:0e:0f:08:89:82:6a:49:5a:
a5:6e:4d:a5:7c:1e:de:c3:4f:a7:5d:eb:dd:70:be:2d:57:d3:
a9:d3:b5:7c:f4:3c:fb:bd:a1:2d:99:29:58:71:2e:e1:30:6c:
34:98:9c:24:6b:ff:0b:5f:d9:93:c2:33:66:fc:de:9b:28:bb:
5b:80:d5:85:e1:8b:76:99:2a:3f:39:78:e7:76:b0:07:5a:e0:
48:53:bf:9d:bc:c1:47:e4:4d:29:ad:82:54:57:3c:52:a7:bd:
4e:dd:4a:c3:6b:b8:38:36:da:e6:3d:7f:57:14:8b:78:31:d8:
94:d5:9d:43:97:bc:c4:c0:3f:c8:74:70:eb:72:69:ab:aa:a1:
13:ee:04:68:2e:6b:43:f3:d1:6f:36:1c:df:a0:e5:89:d1:f7:
10:bd:4a:ac:92:6e:77:be:83:85:a9:29:fc:17:b7:36:a0:e4:
aa:62:f4:8d:16:ee:c9:2c:ec:e5:a7:6c:76:f9:60:af:51:a0:
a8:5d:3d:b3:14:06:fa:fc:90:da:85:76:b2:01:ae:d8:d2:24:
36:f9:f0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 10:06:29 2026 by rpki-client