
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
File: tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft (raw, json)
Hash identifier: DDxTjzx5wQ40jaoUVuO0psNgQiDLBDJA8fWIYep5/G4=
Subject key identifier: 07:1D:1C:53:67:03:BC:EF:A8:8B:25:B9:63:8F:DC:04:FD:6F:49:1E
Authority key identifier: B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05
Certificate issuer: /CN=A916A0AF/serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105
Certificate serial: 0611
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
Manifest number: 0685
Signing time: Sat 04 Apr 2026 22:40:00 +0000
Manifest this update: Sat 04 Apr 2026 22:39:59 +0000
Manifest next update: Sat 11 Apr 2026 22:39:59 +0000
Files and hashes: 1: tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl (hash: G5anD3SljpmJCszXkQjy/gk6FRjaonOsuhuDXE43Ffo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl
rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1553 (0x611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A0AF, serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105
Validity
Not Before: Apr 4 22:39:59 2026 GMT
Not After : Apr 11 22:39:59 2026 GMT
Subject: CN=69d19340-46fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:33:99:b9:c0:ad:9f:d4:0d:75:40:03:9e:
93:6b:2d:e1:91:65:91:df:b6:90:f6:a3:1b:ec:0c:
82:2b:8a:a4:ec:cf:36:f4:d9:e1:a2:6e:f6:e8:85:
31:34:a0:84:5e:67:3a:de:18:c6:01:c9:7f:a2:7b:
8e:9a:50:ba:87:5a:6b:e5:53:97:32:90:ce:f3:3e:
e1:ec:f0:0a:58:41:18:0c:92:53:b5:c2:8a:66:4c:
15:eb:3d:f3:e5:55:7e:1d:7f:41:bc:40:ee:c7:73:
e5:7a:5e:11:a6:68:5e:17:83:15:72:63:6b:0c:12:
d1:0d:85:26:45:62:24:43:95:d0:f3:60:6f:1e:ee:
83:65:56:b2:18:39:55:e4:4c:11:4d:f1:f0:f2:11:
fa:72:61:5e:ef:b9:be:f0:f5:8a:14:57:ab:4c:e3:
16:e9:04:e5:61:ac:5c:75:cf:0b:cf:94:6c:8e:3b:
21:27:7e:bc:c1:21:c8:04:59:42:7c:b5:90:66:65:
69:80:be:76:0a:5a:b4:81:8a:a2:51:5c:ea:29:9f:
4c:e4:08:f8:24:d0:32:a9:c0:ec:33:ef:69:aa:3a:
3c:2b:98:ab:bc:fe:07:2d:8f:9a:a1:37:6a:48:5f:
54:07:b5:a3:1b:3e:bd:30:29:c1:5d:17:02:94:1f:
c7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1D:1C:53:67:03:BC:EF:A8:8B:25:B9:63:8F:DC:04:FD:6F:49:1E
X509v3 Authority Key Identifier:
keyid:B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:c8:8a:38:93:54:df:1e:70:3b:01:a9:68:92:88:db:12:44:
fd:95:ec:91:b9:55:a6:78:21:d8:8f:81:d7:5a:59:a8:e0:47:
c2:55:7f:c4:c6:8a:70:90:3e:c2:9a:8c:2c:68:d6:2f:bc:0a:
13:5d:7b:97:79:37:ed:b8:35:b7:5b:b5:75:c5:5e:1a:4d:45:
16:d1:a9:70:e4:c4:5d:97:29:0e:88:06:c0:84:05:2a:a3:80:
fc:06:b5:c7:d4:78:dc:44:d1:7f:5e:a3:79:45:4d:99:94:66:
3a:81:f0:10:47:9a:a2:9b:70:e9:c0:83:58:67:d1:fb:50:a3:
24:1b:b0:e6:52:61:72:59:d9:24:2b:b1:d6:67:46:c1:59:c3:
24:30:10:30:3b:d9:47:bb:84:6b:98:ef:33:2e:b9:ae:1e:6c:
2b:2b:76:32:25:22:de:4a:41:e1:bb:c4:f2:d3:78:3e:b4:49:
0e:48:3c:bf:48:72:34:4f:c8:4a:99:af:45:b1:2e:d4:63:a5:
77:eb:68:0c:1a:34:a1:06:0e:6a:40:c0:79:f1:10:19:29:de:
6c:d9:58:7d:f5:00:b8:3f:8e:2a:21:f9:f8:ac:72:a1:bd:3c:
17:68:7d:27:a6:fe:3b:17:a1:12:66:39:ec:30:56:6c:02:36:
93:7a:b2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:44 2026 by rpki-client