
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
File: TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json)
Hash identifier: 9wCkhsR5R9BKq9d5wfOczgdgBnLZh1gqJauSwS8eKzc=
Subject key identifier: 86:6C:DB:A0:81:9E:A0:0E:21:E8:C8:36:3A:74:BE:20:0A:64:4C:43
Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0
Certificate issuer: /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
Certificate serial: 0372
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
Manifest number: 036B
Signing time: Sun 05 Apr 2026 00:38:40 +0000
Manifest this update: Sun 05 Apr 2026 00:38:40 +0000
Manifest next update: Sun 12 Apr 2026 00:38:40 +0000
Files and hashes: 1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: AS/9X07FxymlLCyzFqZXXxhODZzPAigOHRXs2o32W2E=)
2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: mBL1TBP+Msd9AlCfomB44CtyYjx9JeXY/drpx8eClaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl
rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 882 (0x372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
Validity
Not Before: Apr 5 00:38:40 2026 GMT
Not After : Apr 12 00:38:40 2026 GMT
Subject: CN=69d1af10-a3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8d:e3:5f:53:47:02:87:a2:67:d7:03:6f:2f:
c6:74:2f:33:a0:83:24:b9:87:fb:3f:71:ae:74:a6:
57:54:ce:8b:ee:c9:5e:05:e5:bf:2b:6e:1d:f9:14:
cf:dc:ad:a0:83:51:38:53:05:5c:d0:25:72:77:bf:
66:90:79:9b:fc:d7:97:d5:b7:12:ef:9d:d3:e9:08:
a9:1d:5e:fb:99:db:f4:8a:f0:bd:43:c9:4b:7d:d0:
20:7b:34:4f:18:8e:3c:ef:b6:91:05:36:9d:30:50:
76:ef:d4:09:76:af:63:9f:26:e7:68:f6:ab:da:ba:
6b:b1:6f:09:4c:ec:78:9b:b9:8d:e0:ed:8f:14:be:
70:ab:92:cb:75:c9:00:94:ef:2f:b6:49:be:9d:9d:
6c:77:28:b1:45:41:89:f2:02:d0:32:8e:b4:0d:86:
37:30:ad:f0:c8:1b:5e:99:73:6e:02:16:27:17:62:
35:8d:4c:aa:6d:a8:31:3d:cf:a8:1b:fe:24:dc:af:
02:60:9a:66:74:83:03:93:54:90:a6:82:a4:f7:78:
33:ff:02:c7:aa:46:b4:a0:61:75:9a:60:d4:22:9c:
24:c8:34:d0:b4:ba:4a:4c:e4:b4:8d:15:74:6b:15:
1f:d1:56:ce:82:9c:00:78:46:b4:45:38:0a:cf:18:
d6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6C:DB:A0:81:9E:A0:0E:21:E8:C8:36:3A:74:BE:20:0A:64:4C:43
X509v3 Authority Key Identifier:
keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:8f:61:b3:3e:67:00:4a:41:b5:83:c7:22:cb:81:52:e2:cc:
47:c0:2a:b5:cf:7c:b4:66:71:b6:70:1a:57:01:10:cb:42:c1:
bc:39:a3:d5:29:54:a6:8e:6d:12:65:03:5a:d0:ee:ec:cb:c0:
fa:d3:01:73:63:a6:80:9f:15:d3:37:ef:c4:3b:df:f0:6f:6b:
1c:f1:f3:28:c3:75:74:4c:3c:45:4e:5c:13:34:ae:92:14:95:
c3:0d:f1:95:5d:dc:16:d6:a7:9a:d8:7c:1c:4a:52:04:d2:ca:
2a:03:38:79:1f:17:be:6b:97:13:97:60:b8:f3:13:88:8d:34:
2f:19:ff:82:56:0d:53:47:04:ac:da:4e:a3:a1:b3:cd:8e:7f:
07:6b:9d:21:01:f4:de:78:f1:86:50:e6:3d:d2:c2:20:ba:8d:
28:46:1a:e1:8e:5a:30:f3:5e:05:24:5d:6e:3f:af:d4:ec:f3:
3c:d6:02:7a:2d:fa:c7:e1:2b:e0:b5:d4:ae:7e:9d:fc:de:d6:
ba:28:09:8b:ac:05:c7:7a:8d:92:69:12:f5:3c:51:31:4a:09:
1b:30:7c:42:59:47:dc:5b:1e:ed:2b:4e:3b:4d:36:3f:4e:5a:
6c:94:99:a2:68:28:55:a7:6b:c6:c1:33:2e:9d:f1:c9:8a:5b:
4a:36:8f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:27:02 2026 by rpki-client