
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
File: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft (raw, json)
Hash identifier: 3ivKqVzlnzYbsPkDAaGybHg/Lm7OKaoXIreMVDyQ0OU=
Subject key identifier: C3:60:29:D5:A0:2E:AF:53:03:87:BC:A4:55:A0:AB:F5:88:11:65:49
Authority key identifier: B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76
Certificate issuer: /CN=A9154FFD/serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
Certificate serial: 9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
Manifest number: 9A
Signing time: Wed 19 Aug 2026 08:02:14 +0000
Manifest this update: Wed 19 Aug 2026 08:02:13 +0000
Manifest next update: Wed 26 Aug 2026 08:02:13 +0000
Files and hashes: 1: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl (hash: HlpAvWOvI231uxwzTA6ORbDojI1d9a9G9efrxemFmTk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl
rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154FFD, serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
Validity
Not Before: Aug 19 08:02:13 2026 GMT
Not After : Aug 26 08:02:13 2026 GMT
Subject: CN=6a856306-4200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:4f:95:26:9a:64:57:b5:c1:43:f4:6a:40:
56:31:db:16:86:bf:68:05:17:c5:c7:26:4e:c2:87:
95:23:ea:7e:cc:37:b3:1a:ef:5b:c4:c2:96:d6:72:
4e:81:57:1e:57:a4:8d:e4:6f:18:38:5f:68:22:59:
2a:74:07:13:61:39:89:1e:71:9b:35:c0:9b:f2:f6:
40:12:a1:c0:3c:e3:b9:6c:c2:f2:0f:f9:8c:d3:a1:
21:3b:53:10:1f:fb:e2:87:09:c1:1c:34:55:69:31:
5e:4c:ed:80:8d:76:c3:6f:6c:fb:8d:eb:64:12:a4:
af:b7:17:87:c5:1b:0b:4d:4a:7d:16:41:7c:7a:ac:
ca:39:df:f7:c3:c0:15:7a:6f:bf:50:e1:d8:3e:ac:
30:ee:84:91:74:91:71:ba:de:87:ec:dc:e2:35:0f:
a7:b4:6f:e6:8c:85:ea:d4:7c:2d:8b:43:df:be:a0:
8d:c5:8a:fd:2b:29:7d:d6:e4:37:c4:d9:40:c0:62:
f4:01:5f:b4:2a:a7:4f:3a:50:e6:0c:45:08:ae:a9:
e9:89:29:44:58:d5:ef:75:7e:8f:aa:36:f0:c9:50:
7a:5b:bb:bf:b0:97:2a:98:c8:b1:fb:db:75:61:45:
64:b5:3c:4f:e1:e9:ac:9a:48:30:81:4d:f5:60:fb:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:60:29:D5:A0:2E:AF:53:03:87:BC:A4:55:A0:AB:F5:88:11:65:49
X509v3 Authority Key Identifier:
keyid:B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e3:b8:55:89:1b:59:8e:b4:70:a6:ac:09:b4:03:cd:3f:a5:29:
bd:3f:38:af:1f:c8:1a:a3:24:ea:ec:4e:8a:68:e9:c8:9c:7e:
80:ea:4b:33:a8:ff:04:9e:86:4f:47:17:c2:bc:fc:4a:8c:d5:
ac:62:12:11:35:da:27:9e:3d:8c:ea:6e:15:79:56:aa:d6:ee:
d9:c0:a6:d2:b7:7c:c9:24:cc:12:d3:9b:40:0a:b9:4d:24:ac:
aa:69:4c:69:92:b4:a8:53:f0:6f:ad:a6:ee:57:bd:ac:be:96:
85:35:34:79:4f:61:b5:68:2b:10:f3:75:56:f7:5b:bf:b1:17:
0a:73:9b:2d:85:36:78:4f:d6:4a:77:d3:43:27:a7:84:8a:f5:
f6:7e:32:8c:d4:b3:6b:35:32:c1:99:30:f8:69:ca:72:9d:0e:
0d:c0:40:2b:50:e7:2c:5e:36:fb:69:e1:4a:07:ee:23:c4:4d:
71:fc:5d:8f:34:3d:57:7b:10:b1:2c:87:d8:47:51:d6:17:ae:
ef:28:66:6b:18:2b:56:fb:e6:9b:8b:fc:fa:8c:b5:91:28:46:
79:03:3f:c5:e6:41:62:fc:55:87:a0:66:a1:af:a1:b5:54:90:
36:cb:c2:52:52:71:cd:db:b1:6c:e4:a7:42:15:1f:62:19:03:
ad:bf:54:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:05 2026 by rpki-client