
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
File: tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json)
Hash identifier: TuBm2ylxJ+9JkOMmnLtuNP8IZ2Lsn0MH/vVwg1QQjUE=
Subject key identifier: 3C:8B:1F:23:2A:AA:E8:5F:F3:58:D4:BF:D3:A9:28:6E:CD:54:51:1B
Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF
Certificate issuer: /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF
Certificate serial: 03A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
Manifest number: 039C
Signing time: Sun 05 Jul 2026 01:07:44 +0000
Manifest this update: Sun 05 Jul 2026 01:07:43 +0000
Manifest next update: Sun 12 Jul 2026 01:07:43 +0000
Files and hashes: 1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: qCBoAOfjKz7BaTGK6VW0IpLBIinqG7pcZXPD1hvR9Eg=)
2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: bL7OIrkXDLMggpL9N/pxg/g9qzrZatjb01uzVRx5kqw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl
rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 01:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932 (0x3a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138E67, serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF
Validity
Not Before: Jul 5 01:07:43 2026 GMT
Not After : Jul 12 01:07:43 2026 GMT
Subject: CN=6a49ae60-0b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:ad:45:f9:2c:6e:3a:78:8c:16:cc:df:26:
76:cc:81:06:66:70:7b:2f:c4:4d:bd:0f:35:c7:72:
c0:20:b8:3a:74:d5:e1:99:c0:ee:27:84:aa:d8:c1:
a1:06:6c:41:98:25:10:4c:54:c1:76:84:20:13:dd:
49:59:5d:32:66:91:07:8b:93:a8:a3:c9:e4:f1:db:
3f:f1:ed:45:ec:48:8b:8f:4f:88:77:dd:e3:a0:d8:
6e:f5:29:72:25:9b:3f:81:a1:9f:e4:08:3a:19:b6:
9f:d2:e9:89:a3:f7:65:da:37:54:c5:fb:60:03:29:
61:36:12:d9:f4:b7:74:73:1f:0d:e7:05:b8:68:21:
54:fa:50:55:a8:bc:22:a6:62:45:b7:3f:04:60:53:
fe:af:bf:57:39:40:fd:16:19:4d:0a:f8:53:4a:8a:
bc:e1:95:b8:7a:67:47:a9:f7:ae:c3:3d:ed:10:8b:
8d:0b:0a:f2:50:1c:a9:73:16:a3:82:a6:bd:b8:f6:
cc:be:c2:d0:94:ff:ee:f5:f9:d5:91:e0:e2:64:35:
7a:c3:60:e0:66:0b:66:8a:98:18:fc:ee:39:97:6a:
c3:48:29:20:e7:48:13:f8:c3:d8:64:70:25:8a:e0:
a1:25:09:2f:df:fa:57:87:82:e2:be:d6:89:d8:cb:
3d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8B:1F:23:2A:AA:E8:5F:F3:58:D4:BF:D3:A9:28:6E:CD:54:51:1B
X509v3 Authority Key Identifier:
keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:36:94:07:c5:48:7a:26:84:71:ab:bb:87:25:6c:79:7c:de:
64:e1:f8:99:c8:26:85:d4:6d:53:ce:48:d5:4d:b4:58:03:19:
91:40:b0:6e:95:57:58:b2:98:9b:94:37:f7:a0:be:bd:69:70:
3c:18:ca:e8:20:66:20:2c:4b:08:7a:67:8d:a7:b0:f6:f4:c1:
71:31:fb:5b:f5:fa:6f:b3:6e:20:85:fb:68:39:47:20:bd:7a:
3a:02:5b:a5:78:14:28:3d:3b:56:ca:a5:34:e0:e0:1b:b8:82:
3a:3f:58:c9:b6:ad:f9:93:2c:05:5e:f8:93:6d:3d:fe:a2:76:
44:cb:1b:1c:f1:09:5a:78:5e:dd:1a:5d:c7:c2:4d:4b:bf:20:
1f:d6:87:32:7b:f2:b6:9e:5b:75:b4:cb:75:7e:1f:bd:60:50:
7b:7f:d0:71:1a:7b:97:e8:25:14:cb:48:17:9c:9c:a5:e3:9d:
2e:37:08:16:21:4d:08:38:39:4b:d2:43:66:8b:16:17:6e:1d:
23:8f:d0:ff:77:d0:b1:5c:75:17:d6:28:2f:fb:e2:21:89:cb:
6a:40:92:14:31:5d:57:69:4e:dd:37:6a:01:29:ad:dd:91:f0:
10:b8:06:f5:ea:36:4b:d3:7c:00:ad:a9:18:45:68:e8:af:54:
2b:ee:69:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:08:04 2026 by rpki-client