
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft
File: TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft (raw, json)
Hash identifier: T2uaCBJ0G082PfRd+ovIc3hbLtKABRYLanTEmDbvjzM=
Subject key identifier: 01:83:0D:93:51:D0:FE:DF:3E:C1:D4:A8:84:01:EC:16:84:C8:5A:8B
Authority key identifier: 4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C
Certificate issuer: /CN=A914FE53/serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C
Certificate serial: 01A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft
Manifest number: 018B
Signing time: Thu 21 May 2026 04:30:20 +0000
Manifest this update: Thu 21 May 2026 04:30:20 +0000
Manifest next update: Thu 28 May 2026 04:30:20 +0000
Files and hashes: 1: TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl (hash: PnhD8v2K1I7Fzbinybx6PcvQ7+tBsXblgpuVbeG16iY=)
2: E3F7E3DAFBDD11EE8914AD31C4F9AE02.roa (hash: hOKbF/UZYbhecuwlV+zdHCPg8weFXKYWyqedrkILS2Y=)
3: E387F700FBDD11EE8914AD31C4F9AE02.roa (hash: RZGsuM18I2i40ER50aptVtuKnle26jHhlIg+fS/FkLU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl
rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FE53, serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C
Validity
Not Before: May 21 04:30:20 2026 GMT
Not After : May 28 04:30:20 2026 GMT
Subject: CN=6a0e8a5c-97bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:50:65:a4:dd:d4:86:77:f8:4d:03:f9:e1:
d4:96:81:fc:51:d0:41:e9:d2:0c:50:49:d1:d1:ed:
96:7b:d8:4f:c8:db:9b:6e:36:c4:27:3d:4f:0e:56:
89:77:42:fc:c4:85:19:97:42:db:9a:e4:b1:44:37:
70:0f:1b:27:dd:f5:b0:ef:01:9e:c4:47:96:a1:1e:
1c:36:69:84:96:17:98:fc:26:e6:d1:96:9a:88:26:
26:c6:34:b5:e8:e2:2d:e7:a7:a2:91:35:c1:f9:6e:
af:1d:03:a7:99:34:4a:f5:d4:95:fc:fd:e9:b1:52:
80:ad:07:5e:c0:bb:60:c4:4a:d4:67:cd:3b:a6:69:
f7:da:5e:0e:3c:0c:78:27:69:b4:6f:2f:70:5d:d8:
69:a7:e7:3d:b7:d2:07:7b:a9:67:40:19:27:d4:2a:
0e:a6:90:e5:bb:f8:c0:f6:a7:34:aa:90:63:98:f5:
8f:a2:d1:2f:23:b6:93:d8:54:93:77:17:ac:33:3c:
a6:bd:8e:0e:8c:64:70:da:05:85:db:c4:62:83:ca:
66:12:8a:b3:ec:fc:f2:7e:f4:4a:f5:6f:9d:ef:f2:
46:e1:c4:e7:27:33:a2:ee:75:37:74:39:a8:c9:14:
c2:00:e2:e0:46:9d:0b:a7:aa:82:4e:e5:f0:47:db:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:83:0D:93:51:D0:FE:DF:3E:C1:D4:A8:84:01:EC:16:84:C8:5A:8B
X509v3 Authority Key Identifier:
keyid:4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:84:47:63:f5:56:eb:0e:ae:77:84:38:f5:7b:8f:32:64:82:
6b:3a:95:1f:66:41:38:e5:cb:8f:6c:a1:ec:bf:6c:e7:1d:03:
dc:3e:96:64:54:fb:c3:61:8c:2c:9c:bf:8f:72:3b:d0:d7:fd:
fd:40:1f:d0:12:5f:71:8b:74:0c:f6:d8:27:19:56:d3:6e:ed:
20:89:cd:d2:26:5f:cd:c1:9e:88:21:b1:44:65:86:e1:a9:a1:
6c:e8:69:33:93:2d:32:62:aa:b7:2e:f5:33:85:ec:27:3c:c7:
40:66:f0:e7:a3:ba:63:68:d3:6d:ec:4f:d5:06:d4:5a:de:d9:
79:7f:30:50:15:d3:4b:25:03:30:6c:fd:cf:71:9c:80:61:2a:
a1:8e:ab:3b:38:8d:0e:46:0b:48:81:80:34:ae:c5:24:56:b7:
ee:a1:16:ce:10:4a:74:54:16:0d:2d:ef:32:b9:86:be:76:10:
ac:b4:fa:04:16:9e:84:da:1d:70:94:5f:19:6a:ce:5f:ed:18:
f6:8c:38:fe:09:02:a3:fe:ef:d6:fe:79:42:a5:6b:0c:ab:2d:
87:01:a3:fc:fc:17:db:d1:f9:30:70:bd:21:2b:a3:c3:60:10:
95:22:1f:ce:de:76:5e:35:94:c4:d2:f4:86:f9:93:c4:92:5b:
05:bd:00:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEZFNTMxMTAvBgNVBAUTKDRGMzE5OTBBQ0ZENTlEQkUzNkE3MEMwNTIwNEI0M0I5
Mjk2RjUzNkMwHhcNMjYwNTIxMDQzMDIwWhcNMjYwNTI4MDQzMDIwWjAYMRYwFAYD
VQQDEw02YTBlOGE1Yy05N2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs+pQZaTd1IZ3+E0D+eHUloH8UdBB6dIMUEnR0e2We9hPyNubbjbEJz1PDlaJ
d0L8xIUZl0LbmuSxRDdwDxsn3fWw7wGexEeWoR4cNmmElheY/Cbm0ZaaiCYmxjS1
6OIt56eikTXB+W6vHQOnmTRK9dSV/P3psVKArQdewLtgxErUZ807pmn32l4OPAx4
J2m0by9wXdhpp+c9t9IHe6lnQBkn1CoOppDlu/jA9qc0qpBjmPWPotEvI7aT2FST
dxesMzymvY4OjGRw2gWF28Rig8pmEoqz7PzyfvRK9W+d7/JG4cTnJzOi7nU3dDmo
yRTCAOLgRp0Lp6qCTuXwR9tmyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAGDDZNR
0P7fPsHUqIQB7BaEyFqLMB8GA1UdIwQYMBaAFE8xmQrP1Z2+NqcMBSBLQ7kpb1Ns
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU1My84MEIyMjhGOEZC
REQxMUVFODk4NEVEMzBDNEY5QUUwMi9UekdaQ3NfVm5iNDJwd3dGSUV0RHVTbHZV
MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R6R1pDc19WbmI0MnB3d0ZJRXREdVNsdlUydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RkU1My84MEIyMjhGOEZCREQxMUVFODk4NEVEMzBDNEY5QUUwMi9UekdaQ3NfVm5i
NDJwd3dGSUV0RHVTbHZVMncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF4RHY/VW6w6ud4Q49XuPMmSCazqVH2ZBOOXLj2yh7L9s5x0D3D6WZFT7w2GM
LJy/j3I70Nf9/UAf0BJfcYt0DPbYJxlW027tIInN0iZfzcGeiCGxRGWG4amhbOhp
M5MtMmKqty71M4XsJzzHQGbw56O6Y2jTbexP1QbUWt7ZeX8wUBXTSyUDMGz9z3Gc
gGEqoY6rOziNDkYLSIGANK7FJFa37qEWzhBKdFQWDS3vMrmGvnYQrLT6BBaehNod
cJRfGWrOX+0Y9ow4/gkCo/7v1v55QqVrDKsthwGj/PwX29H5MHC9ISujw2AQlSIf
zt52XjWUxNL0hvmTxJJbBb0A0w==
-----END CERTIFICATE-----
Generated at Thu May 21 10:19:45 2026 by rpki-client