
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft
File: tw3qbHe56OzOWDkTKBnvkTc_xSc.mft (raw, json)
Hash identifier: 494sz5Qhzz7ypU8i1LbsxY0xa+Cq21ZcXWjnPbHnO6E=
Subject key identifier: F4:29:28:D8:26:0C:98:4C:5F:E0:CA:66:9B:0A:2D:A0:AA:BA:EB:57
Authority key identifier: B7:0D:EA:6C:77:B9:E8:EC:CE:58:39:13:28:19:EF:91:37:3F:C5:27
Certificate issuer: /CN=A914E2B2/serialNumber=B70DEA6C77B9E8ECCE5839132819EF91373FC527
Certificate serial: 01B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft
Manifest number: 01AD
Signing time: Wed 19 Aug 2026 04:41:19 +0000
Manifest this update: Wed 19 Aug 2026 04:41:19 +0000
Manifest next update: Wed 26 Aug 2026 04:41:19 +0000
Files and hashes: 1: tw3qbHe56OzOWDkTKBnvkTc_xSc.crl (hash: aelRjUYbF9J4UkQMmWxtkrrIxP04c7uJWyGhz0zbxB4=)
2: D6AEA2D20DE311EFA1E24F25C4F9AE02.roa (hash: SjviPWHP1DeQCRL5zA27ZA6ZX61NzlG+Six3xPkugE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.crl
rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E2B2, serialNumber=B70DEA6C77B9E8ECCE5839132819EF91373FC527
Validity
Not Before: Aug 19 04:41:19 2026 GMT
Not After : Aug 26 04:41:19 2026 GMT
Subject: CN=6a8533ef-2e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:82:47:98:b3:11:64:f9:20:dd:90:e4:bf:af:
4d:f4:5b:f3:9c:91:c0:94:c4:e5:43:9e:31:21:06:
44:06:7d:ae:33:c4:9c:ff:22:5c:dd:35:16:fb:48:
86:16:21:f4:08:72:1f:57:9d:3c:87:71:78:b3:92:
f5:c4:5c:2d:f0:95:bb:34:94:15:17:01:67:9a:e1:
6b:b4:52:4f:06:36:83:81:a7:7e:c0:cc:95:7a:23:
54:a3:b1:0b:a8:a6:17:2a:b5:5f:33:37:06:42:f5:
43:96:52:e5:d5:4f:eb:3a:7d:6e:03:d1:8d:3e:64:
0b:64:a5:e7:56:20:22:24:ed:fd:b3:5d:fe:d5:0c:
79:f3:65:cc:01:2d:f5:44:68:75:2c:b8:d0:23:9f:
e6:c3:ac:a1:af:32:f0:e5:e3:74:ab:1c:a1:51:1e:
43:f3:92:dc:c5:43:99:58:39:1b:c6:63:4c:93:92:
7d:9d:0f:dd:b5:1b:41:fe:f7:62:0a:66:02:ac:6a:
ed:ff:6a:82:9e:38:36:a7:0c:c4:07:b5:a8:4a:ba:
80:f4:b2:e7:c4:4a:75:8a:7b:09:c9:8f:79:18:85:
94:18:a0:31:09:65:6d:41:23:35:81:ae:38:25:db:
df:b4:83:bf:c3:b7:ce:14:67:4a:b2:7e:1c:85:7f:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:29:28:D8:26:0C:98:4C:5F:E0:CA:66:9B:0A:2D:A0:AA:BA:EB:57
X509v3 Authority Key Identifier:
keyid:B7:0D:EA:6C:77:B9:E8:EC:CE:58:39:13:28:19:EF:91:37:3F:C5:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:cb:aa:07:8b:fd:70:0b:3d:5f:2b:0a:1e:c0:b6:9d:a9:e0:
cc:7e:0b:ca:c9:bd:b9:55:de:5c:3d:26:84:d8:1f:f0:88:1b:
54:97:fa:65:43:aa:4a:df:db:35:9c:72:39:b8:6c:48:ef:73:
c4:d7:be:a3:9f:62:a4:76:f9:53:0b:ca:e7:6b:72:38:e4:28:
e8:45:df:70:a7:27:6e:c2:5f:50:d5:81:72:0d:7a:2a:5d:e8:
93:d9:27:ef:70:72:27:9f:53:25:67:34:56:32:2d:fd:b8:28:
b4:ee:2b:42:d0:36:21:ba:1e:55:c3:e2:ca:f6:4d:0f:39:c8:
d9:66:b8:8d:ef:e6:26:ce:24:07:87:d5:af:75:0a:c5:b5:35:
5d:d8:a2:c1:22:1d:62:c5:c9:43:0d:5d:92:e9:4a:24:4d:82:
82:b4:eb:32:f6:d3:97:12:f3:14:0e:ef:5e:54:b0:d6:e2:d3:
67:67:b2:35:a0:53:83:1f:ba:6c:de:af:36:73:4b:2e:07:cf:
2c:1c:bf:92:c7:5d:5a:66:a6:4b:e0:de:e2:a5:7b:a9:e0:56:
a6:91:af:3d:c7:89:d8:06:00:2b:c6:80:9d:f3:60:08:36:c0:
bf:c2:65:ec:40:f4:86:30:b6:a8:8f:50:85:0a:e6:c3:9f:4c:
b2:1b:8c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:59 2026 by rpki-client