
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915DAD6/5CDF6C286FC211F1A79B0BDF7DA30FBC/twEVrld1D_6T4B-teVzi0tGbe2I.mft
File: twEVrld1D_6T4B-teVzi0tGbe2I.mft (raw, json)
Hash identifier: 5B2raf+1Fa1wihMzWmzACWrIZjzM6JuEV0zDWmxvqgo=
Subject key identifier: F3:BC:05:38:63:46:F2:C8:31:C7:B3:8C:EE:01:77:E5:0A:F9:36:1B
Authority key identifier: B7:01:15:AE:57:75:0F:FE:93:E0:1F:AD:79:5C:E2:D2:D1:9B:7B:62
Certificate issuer: /CN=A915DAD6/serialNumber=B70115AE57750FFE93E01FAD795CE2D2D19B7B62
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twEVrld1D_6T4B-teVzi0tGbe2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DAD6/5CDF6C286FC211F1A79B0BDF7DA30FBC/twEVrld1D_6T4B-teVzi0tGbe2I.mft
Manifest number: 38
Signing time: Wed 07 Oct 2026 09:12:25 +0000
Manifest this update: Wed 07 Oct 2026 09:12:25 +0000
Manifest next update: Wed 14 Oct 2026 09:12:25 +0000
Files and hashes: 1: twEVrld1D_6T4B-teVzi0tGbe2I.crl (hash: KibPyth/Tp2dYvxJ/z2vXeed/MB6+/ekicfkRWN/CeY=)
2: E616C2D46FC211F1B92D85077EA30FBC.roa (hash: r1G3iFxfp5nKWVaDjUkmfMF1RQpdWtKzi2fAAZGmR/0=)
3: 6E2474E8917711F1833DDDDB3311F970.roa (hash: tK9R4TTnwkiA+NVVYYp0GZ4YFhOXgyaM28xMd5stJGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915DAD6/5CDF6C286FC211F1A79B0BDF7DA30FBC/twEVrld1D_6T4B-teVzi0tGbe2I.crl
rsync://rpki.apnic.net/member_repository/A915DAD6/5CDF6C286FC211F1A79B0BDF7DA30FBC/twEVrld1D_6T4B-teVzi0tGbe2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twEVrld1D_6T4B-teVzi0tGbe2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 09:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DAD6, serialNumber=B70115AE57750FFE93E01FAD795CE2D2D19B7B62
Validity
Not Before: Oct 7 09:12:25 2026 GMT
Not After : Oct 14 09:12:25 2026 GMT
Subject: CN=6ac60cf9-b494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:42:8d:27:d0:72:66:7e:cf:48:c1:7b:48:
61:89:2b:42:ff:66:9a:50:3e:d9:67:55:06:6a:d9:
58:c3:03:e4:d7:26:1a:c9:22:c2:5e:f4:51:c0:d0:
12:f3:47:cf:f4:53:f9:12:cd:09:92:97:86:05:7a:
86:59:7e:d1:c4:11:62:82:0a:71:d2:ad:ff:c2:a9:
93:7d:c1:ad:46:d0:c4:1a:c7:f9:7c:73:0b:0c:01:
5e:18:c2:53:44:67:c6:35:97:4e:a1:b0:56:49:30:
95:98:ee:00:d9:4c:a6:29:7a:f0:0a:09:4e:e9:5e:
a3:df:56:dc:a3:8d:33:2c:f0:43:89:d8:cf:ce:87:
b8:13:8b:54:72:4f:df:2c:56:ac:6b:11:f5:fb:3a:
78:0b:1e:b8:84:56:0b:57:2e:d7:2a:5f:36:6c:d7:
c4:65:eb:ad:b8:c0:1c:1b:ae:88:d2:50:03:82:f6:
a1:0e:08:e5:b5:48:8b:a3:84:0a:54:ea:ec:ff:31:
c7:e3:47:e7:a8:bd:76:4e:28:09:30:a5:46:49:1a:
d1:85:21:44:51:10:56:8a:dd:f4:bb:76:d5:99:87:
c7:d7:b0:b0:84:d4:e3:9f:af:34:ba:8a:bf:b9:6d:
65:76:bc:6c:85:a9:9e:ab:9c:5e:d1:ca:9f:69:86:
54:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BC:05:38:63:46:F2:C8:31:C7:B3:8C:EE:01:77:E5:0A:F9:36:1B
X509v3 Authority Key Identifier:
keyid:B7:01:15:AE:57:75:0F:FE:93:E0:1F:AD:79:5C:E2:D2:D1:9B:7B:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DAD6/5CDF6C286FC211F1A79B0BDF7DA30FBC/twEVrld1D_6T4B-teVzi0tGbe2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twEVrld1D_6T4B-teVzi0tGbe2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DAD6/5CDF6C286FC211F1A79B0BDF7DA30FBC/twEVrld1D_6T4B-teVzi0tGbe2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:0a:fe:4a:f1:3d:fd:12:bd:21:51:ee:62:36:2f:cb:0a:b9:
5d:0d:99:eb:9d:9d:dd:a8:7d:d7:90:a1:f3:cd:5d:fc:e1:70:
be:d2:ba:ea:27:56:4a:45:65:07:97:d6:fe:57:65:35:5b:7a:
97:9a:a4:e0:93:81:fb:d6:0a:1f:53:8b:40:e4:01:99:04:8c:
d8:ce:2a:47:87:3f:39:36:76:ac:22:b9:66:3b:df:a7:bc:9f:
b4:36:6c:06:f9:c9:ba:0e:ff:b7:38:0c:2b:43:77:35:77:4c:
3c:d9:3d:b2:21:98:72:07:2d:39:b9:69:dd:83:c3:16:ff:01:
bc:a4:16:de:df:73:1e:b8:86:9e:1a:cf:9a:ec:76:86:3c:8c:
a5:81:fd:3a:ed:8c:a2:d0:83:de:83:6d:1c:01:23:de:64:7c:
5e:1b:77:da:21:60:99:a8:25:fd:4a:68:4e:18:1d:6c:63:eb:
37:97:d2:1b:4e:79:a4:ff:2f:b3:43:1a:be:1c:38:15:fc:58:
56:47:29:41:3b:b6:d7:11:d3:7a:26:f8:25:e0:76:cf:f6:f0:
96:2f:1c:d1:99:e6:0c:66:74:24:ba:f4:cb:6c:0c:b4:8d:08:
84:5f:e0:18:8a:63:bd:ee:b7:26:97:7a:c5:af:be:cb:d1:14:
75:f6:2d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:23:48 2026 by rpki-client