
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
File: TSkgNoEWBfjziJgBUhslcnoc12U.mft (raw, json)
Hash identifier: 2P+GN++tC6DJCqeM32Of53ftdnS73wx7NHf9X34JwgI=
Subject key identifier: E0:A5:0A:E2:59:66:DD:20:99:6E:35:BE:CC:56:46:22:3A:C9:BC:C4
Authority key identifier: 4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65
Certificate issuer: /CN=A9154DE2/serialNumber=4D292036811605F8F3889801521B25727A1CD765
Certificate serial: 03F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
Manifest number: 03EB
Signing time: Wed 19 Aug 2026 00:50:56 +0000
Manifest this update: Wed 19 Aug 2026 00:50:56 +0000
Manifest next update: Wed 26 Aug 2026 00:50:56 +0000
Files and hashes: 1: TSkgNoEWBfjziJgBUhslcnoc12U.crl (hash: Ifio8WdHQYKK6bs+Vw7IHFDWcLqhzvbcl9nS/Yr1yRI=)
2: EB4F77B8D5E411ECB31AC843C4F9AE02.roa (hash: osHneI9FvoCZRKQxl7txl+jB8Ly+Es1NyoWP2eT8CMg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl
rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1010 (0x3f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154DE2, serialNumber=4D292036811605F8F3889801521B25727A1CD765
Validity
Not Before: Aug 19 00:50:56 2026 GMT
Not After : Aug 26 00:50:56 2026 GMT
Subject: CN=6a84fdf0-8a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:da:79:9f:86:36:11:66:c1:24:e2:4f:9e:57:
2a:cd:e8:81:32:9c:06:9c:30:54:d6:22:dc:f6:f8:
70:f4:c6:2f:b9:1c:77:e3:50:ef:9f:4b:5f:54:40:
2a:26:3d:40:85:83:98:01:d6:11:6e:1d:3b:dc:f2:
22:ab:fd:1f:c4:35:89:f0:af:89:5f:b3:98:1b:ee:
fb:dc:02:ec:5c:12:b4:43:4f:59:85:a6:e3:1d:ce:
6c:3e:87:66:13:f2:69:99:96:73:44:93:30:5e:46:
ff:36:15:c2:39:81:4d:2d:54:82:72:99:ab:7a:fa:
79:1c:70:89:cb:be:a4:ee:af:ec:b3:7f:a9:a0:d1:
d8:2a:c0:b6:73:6e:69:1f:89:27:83:6a:94:21:fd:
75:ac:7e:60:8e:a1:0a:43:86:40:33:23:5c:fd:69:
6e:d5:a6:8a:f7:c6:6b:2d:27:ac:9e:54:63:ed:ac:
e9:8c:df:bd:48:ac:ec:b9:16:99:78:87:30:50:d4:
09:9d:0e:d1:d3:68:59:e1:b9:72:e7:15:f3:ac:e9:
bd:9a:3c:55:cb:09:0d:83:b2:e6:39:bf:52:64:f5:
56:74:18:4b:98:23:5a:a5:d9:53:e5:be:a1:b4:b7:
9e:89:4d:38:58:af:f9:59:ec:29:59:c2:b4:f3:15:
8d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A5:0A:E2:59:66:DD:20:99:6E:35:BE:CC:56:46:22:3A:C9:BC:C4
X509v3 Authority Key Identifier:
keyid:4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:72:57:13:ca:c6:65:6b:eb:9e:f9:d5:d6:61:d2:56:27:bb:
70:b4:fd:d9:d4:43:d2:ee:44:6d:27:4e:9e:d8:82:b8:c5:fd:
d9:23:7e:c9:a4:31:80:d6:cd:7e:99:c4:c0:cf:3b:1f:df:f7:
09:03:db:72:65:ae:5d:18:2c:9a:56:39:12:7d:25:07:cb:4a:
35:1f:dc:23:09:12:a6:bc:05:df:e2:9b:fe:6a:89:86:7f:12:
ff:06:08:6b:e5:be:0c:1b:c2:31:11:05:a6:ca:da:a3:0e:25:
0b:12:49:e0:78:d4:92:55:e0:5d:f6:3c:55:39:5f:86:95:65:
74:32:48:d4:11:95:5b:3c:f8:c4:73:76:99:85:cd:84:44:65:
f3:78:28:e0:73:27:f6:c4:c8:de:9b:59:3b:5e:c3:cb:b5:00:
b0:3a:12:c1:64:f3:57:28:49:18:53:5c:74:5b:e2:f9:b3:cd:
07:b7:14:4e:5c:45:c7:b0:5b:f8:ab:d7:5c:25:9a:83:5f:ac:
3b:20:fb:1e:3b:9f:37:02:00:d8:ba:5b:ed:c0:22:ba:0e:ea:
7e:52:bc:6d:ac:47:76:f5:39:cb:fc:4e:84:7a:47:e2:86:79:
48:e0:18:67:2a:52:9e:da:5d:f4:84:c3:ee:6c:a3:ca:9e:3f:
9f:ba:d2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:19 2026 by rpki-client