
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
File: TzLs_4zUbD7AP6deEAj0qpoM-JM.mft (raw, json)
Hash identifier: vBYHAL1qK+nN4XKVwUJ/+XTR8uk8HoNdaH8IpIvFReQ=
Subject key identifier: 35:B7:0C:F2:47:E4:A7:E0:54:F6:2D:11:F2:7F:46:F6:FB:55:2E:61
Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
Certificate serial: 0C16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
Manifest number: 0BFF
Signing time: Fri 02 Oct 2026 19:11:52 +0000
Manifest this update: Fri 02 Oct 2026 19:11:52 +0000
Manifest next update: Fri 09 Oct 2026 19:11:52 +0000
Files and hashes: 1: TzLs_4zUbD7AP6deEAj0qpoM-JM.crl (hash: aOq0d5OnC7PkjmXVJmpnDf7HIStAA4nFb6HCZSLDiL8=)
2: B34C91C4B14311EF8479AA21C4F9AE02.roa (hash: 1Rl4AWS27tXktsB4oZ9/cQrbDdYUzTGKNR1jiXI3rWI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl
rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 19:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3094 (0xc16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
Validity
Not Before: Oct 2 19:11:52 2026 GMT
Not After : Oct 9 19:11:52 2026 GMT
Subject: CN=6ac001f8-9f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:3e:b0:03:ef:a1:1f:55:53:99:ca:46:7f:
8b:e6:5d:80:66:a3:87:9d:16:e7:6d:dc:37:0c:f1:
b6:48:77:cc:63:ad:94:e2:37:ba:3f:16:6d:5a:82:
9f:c2:31:3b:ed:49:83:fb:29:31:b8:69:0e:b5:4c:
4f:25:83:86:c7:81:07:61:8c:91:af:d7:1a:55:1f:
e7:06:e8:a4:e8:0a:60:32:5c:6a:dd:ea:75:b0:14:
ed:de:e8:86:1e:7e:87:95:b6:36:59:cf:73:8f:50:
23:b6:f6:a1:54:9a:63:f6:70:f2:84:95:47:0d:26:
17:1a:87:8d:51:9d:bc:0a:0b:4b:af:a9:62:4f:34:
d0:21:40:3b:71:8d:f5:bb:9b:66:1c:ab:90:3c:d3:
47:fb:45:a4:ca:93:45:0f:86:61:f9:86:0a:cf:32:
b6:aa:98:da:fc:6c:c3:6e:9b:ef:e6:86:c2:73:80:
87:f4:c6:f8:8d:3b:0c:47:57:10:47:8a:a8:28:29:
fa:83:a5:ed:a4:d5:13:b8:21:32:0a:de:45:e1:60:
28:a7:cd:86:1b:01:12:d3:5c:58:fb:d6:0b:48:a1:
28:6c:e0:8e:dc:3d:65:be:7c:4b:5a:b2:7d:d7:48:
3b:e8:6f:13:e5:e9:90:e2:74:b5:dc:e5:75:e7:fe:
b5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B7:0C:F2:47:E4:A7:E0:54:F6:2D:11:F2:7F:46:F6:FB:55:2E:61
X509v3 Authority Key Identifier:
keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:2e:13:ef:2b:12:99:06:63:37:18:12:f3:df:46:44:57:47:
43:ed:11:15:e2:dc:b5:47:ee:ab:f7:83:28:ee:51:e1:39:64:
04:c8:f1:8f:82:fa:cc:08:96:e2:24:c0:1b:80:62:99:65:a0:
60:73:51:cc:96:c4:fa:20:9a:bd:00:a8:1c:9f:c1:b6:f4:e8:
a8:9b:7b:1d:e3:c2:75:2c:19:c4:f2:f4:d5:6f:81:1a:84:e9:
d2:fc:c3:d7:50:6d:cc:33:bb:3d:bd:99:66:7d:ab:d1:ec:37:
18:af:55:80:b7:16:ec:54:74:c3:a2:ed:94:a3:d1:21:11:40:
d5:3f:07:ad:24:2f:fa:8e:72:8c:5d:af:c9:c1:83:0c:a2:48:
a6:99:8a:ae:4e:e5:93:a0:a5:e4:42:77:35:e3:b2:da:9b:e9:
75:40:3e:b0:d0:ee:41:11:6a:f9:30:53:62:55:0e:86:cf:7b:
6f:94:23:8a:c3:ec:55:9e:40:bf:42:7b:b0:1a:4a:ee:5e:39:
0d:cd:ea:74:cc:e9:13:bd:e1:5c:23:a7:05:ee:9e:34:df:a0:
b2:cb:27:a7:be:ad:03:98:d6:6f:b5:2a:f6:fa:d8:f8:a0:26:
89:fb:f1:fc:58:6a:1f:53:e6:90:44:40:10:53:71:d6:46:d9:
ae:04:d2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:44:56 2026 by rpki-client