
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.mft
File: TShKyE8O4JX9a-sO2MZfx15p__g.mft (raw, json)
Hash identifier: VigRAVuqwqh6yrBwnTgQ9fMOlVoHsOsWS4ve8wNvJkI=
Subject key identifier: 96:B0:91:1C:B7:FC:AA:7A:4C:48:9E:D3:7C:91:23:E6:2B:D8:CC:F7
Authority key identifier: 4D:28:4A:C8:4F:0E:E0:95:FD:6B:EB:0E:D8:C6:5F:C7:5E:69:FF:F8
Certificate issuer: /CN=A915542D/serialNumber=4D284AC84F0EE095FD6BEB0ED8C65FC75E69FFF8
Certificate serial: 085C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TShKyE8O4JX9a-sO2MZfx15p__g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.mft
Manifest number: 085A
Signing time: Tue 06 Oct 2026 21:05:06 +0000
Manifest this update: Tue 06 Oct 2026 21:05:06 +0000
Manifest next update: Tue 13 Oct 2026 21:05:06 +0000
Files and hashes: 1: TShKyE8O4JX9a-sO2MZfx15p__g.crl (hash: qGv8RKPX4mVPn004MWgXutpcatYovzc/HyL1Sr3/alU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.crl
rsync://rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TShKyE8O4JX9a-sO2MZfx15p__g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 21:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2140 (0x85c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915542D, serialNumber=4D284AC84F0EE095FD6BEB0ED8C65FC75E69FFF8
Validity
Not Before: Oct 6 21:05:06 2026 GMT
Not After : Oct 13 21:05:06 2026 GMT
Subject: CN=6ac56282-7885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:aa:cb:63:ab:bc:68:fa:4b:3e:b2:d4:37:
2e:03:f7:c6:25:31:ad:bb:58:8e:55:34:f9:19:ec:
be:cf:6b:65:5a:53:a5:1f:35:e1:34:15:71:eb:cb:
ad:bd:be:97:aa:8b:a4:6e:44:2b:63:b3:9a:21:8a:
cd:20:41:01:cc:37:1f:14:e8:4b:64:d1:56:d7:49:
7b:63:b3:7a:14:ff:5e:dc:42:3b:55:d1:6b:0c:b5:
91:ea:a0:01:5c:b9:28:be:04:bb:d5:5f:93:b2:ab:
5b:4a:c3:d7:c7:20:38:ac:d8:58:96:bf:40:05:d1:
6a:d7:d2:1b:83:c0:69:7b:8a:72:c3:d2:10:51:2f:
54:c7:aa:b1:3e:fb:cb:6f:91:48:c4:5f:c4:cd:97:
81:43:e2:97:2a:93:42:71:ad:9d:0a:cc:d7:42:00:
38:d1:56:61:41:84:ba:a2:e7:44:59:25:2e:48:d6:
24:ba:b6:4a:39:ec:97:a8:ca:46:dd:2b:09:d2:27:
34:aa:8b:82:57:d7:41:26:c3:87:10:78:88:74:51:
c1:cf:68:8d:a2:76:99:09:49:2a:0b:eb:d2:65:0c:
e9:da:57:83:65:9d:00:5e:64:f8:db:35:cd:af:a9:
ff:7c:d6:8b:69:96:44:0c:99:49:33:af:d8:f9:7e:
b4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B0:91:1C:B7:FC:AA:7A:4C:48:9E:D3:7C:91:23:E6:2B:D8:CC:F7
X509v3 Authority Key Identifier:
keyid:4D:28:4A:C8:4F:0E:E0:95:FD:6B:EB:0E:D8:C6:5F:C7:5E:69:FF:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TShKyE8O4JX9a-sO2MZfx15p__g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:ab:a0:95:ae:60:b7:74:10:62:42:9a:1a:64:dd:cb:27:78:
c7:68:85:4f:14:9f:8a:0e:52:f1:d3:34:0f:58:9d:0e:d1:e9:
69:84:65:37:eb:9a:e2:70:c3:dc:be:9c:4e:5f:29:c6:79:a1:
4f:99:df:0c:df:58:bd:06:44:fe:32:7e:cd:f7:ae:79:f9:fe:
ce:fb:bf:dd:f7:c4:6e:3d:d9:65:9b:1a:76:5f:60:45:32:11:
e6:ad:7e:7a:73:e5:f7:e3:ca:ce:e3:62:95:92:2d:d2:b1:6c:
bf:71:07:3e:65:5c:f5:b1:c2:5f:66:2e:24:69:6c:58:16:73:
3d:7c:86:b1:d2:54:92:7c:4c:d8:14:77:77:e4:76:3b:36:3c:
da:bd:15:21:a9:c9:ec:93:79:86:c5:5a:da:c2:59:de:a5:46:
df:c9:a8:13:a0:6c:17:5f:74:b9:80:67:9c:0d:4a:cf:ca:42:
8b:11:8c:e8:e8:f5:22:bb:6e:12:29:be:fa:9a:52:ad:a1:3e:
f0:14:76:57:02:14:16:d0:d1:34:2a:3a:88:a3:08:8c:29:f0:
0d:d3:9f:b5:19:d6:69:74:a0:25:f1:ee:53:18:d6:2e:e0:65:
7f:d0:b8:7b:e4:4c:7b:39:4b:0c:99:0e:97:e8:60:a4:f5:d9:
1e:70:9b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:24:45 2026 by rpki-client