
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
File: tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft (raw, json)
Hash identifier: DG4NJamoaZB+sIcPe/ssTt2Y0YwWyd7r5xzSewj4MNk=
Subject key identifier: 66:73:CD:12:6C:39:2A:CD:C7:95:08:22:49:32:72:46:F2:43:07:3C
Authority key identifier: B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05
Certificate issuer: /CN=A916A0AF/serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105
Certificate serial: 0657
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
Manifest number: 0712
Signing time: Tue 18 Aug 2026 23:01:29 +0000
Manifest this update: Tue 18 Aug 2026 23:01:29 +0000
Manifest next update: Tue 25 Aug 2026 23:01:29 +0000
Files and hashes: 1: tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl (hash: 7f+RvNpFIMg5kp10kcfFA+VDqf6urdRE35vX9Dg/6OI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl
rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1623 (0x657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A0AF, serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105
Validity
Not Before: Aug 18 23:01:29 2026 GMT
Not After : Aug 25 23:01:29 2026 GMT
Subject: CN=6a84e449-4374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0e:71:e9:8a:db:a7:e2:c2:a2:89:a1:a8:6a:
72:57:f3:86:74:e9:e1:f6:49:eb:d0:a6:1d:03:05:
b7:3f:77:2d:10:65:d0:04:cb:31:f4:e0:5c:28:bc:
42:46:88:7f:eb:83:b7:8f:60:50:5c:0d:ed:89:c8:
c2:d0:8d:d8:d3:fe:81:f2:0e:14:bc:82:c5:83:7f:
b0:15:2c:2e:88:ef:20:6e:94:67:df:96:db:72:1b:
30:64:09:ec:20:93:bb:07:a0:ed:33:b1:a8:3c:28:
0a:41:0d:71:53:06:32:a9:71:25:20:8b:5b:aa:d3:
61:7f:09:cb:fc:a9:2f:56:2a:a6:88:d1:f7:f6:5b:
23:4d:f6:1a:5b:db:4e:d5:14:7e:59:1d:b8:9e:8d:
dc:b1:6e:1c:5e:5a:5e:ca:72:99:38:9b:de:38:de:
4b:a3:4f:1f:a3:c2:af:a5:ae:ae:fc:f2:c7:1e:10:
20:07:c7:cc:dd:06:37:77:39:1b:7a:d0:89:19:f0:
f5:a9:f4:fb:1b:44:c0:02:f8:2c:db:9b:a9:df:8f:
1c:69:49:c1:c9:aa:4e:e9:12:41:e8:fe:90:d7:c0:
db:48:0a:55:d5:37:3a:b2:1a:10:57:f3:fc:6e:03:
7b:e0:26:33:99:b7:fc:ec:fa:57:69:f9:42:09:47:
05:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:73:CD:12:6C:39:2A:CD:C7:95:08:22:49:32:72:46:F2:43:07:3C
X509v3 Authority Key Identifier:
keyid:B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c9:ac:33:93:81:9f:8e:27:9a:85:8e:22:5e:6b:d7:93:77:
0f:18:8d:32:fd:f4:db:a9:a2:3e:d5:00:25:67:f1:c2:7f:f8:
4e:e8:2f:ca:47:97:25:65:74:d0:79:d5:e3:b0:bf:03:66:eb:
0f:2b:e7:f1:62:39:fa:53:ce:b2:5f:f9:95:33:37:13:46:7e:
e6:41:a1:c3:43:47:ea:e6:49:ef:3b:1c:f7:f7:b5:f8:46:43:
ee:00:a6:37:c4:ca:3f:4e:07:9d:d9:f0:38:06:7e:5b:a6:6b:
cd:bd:92:8c:5c:c4:69:9e:c2:ff:30:c7:c0:20:db:ab:09:30:
42:11:63:81:58:e1:e5:2f:f0:84:db:1e:fe:f3:29:fa:f1:15:
c6:78:69:b6:90:a1:ab:68:98:78:6d:06:9d:85:76:b4:6c:d2:
12:ed:9b:c2:74:ec:39:fb:28:b1:42:ae:0a:f6:71:88:56:e8:
56:ad:a1:e6:c6:6a:ae:1c:36:d7:76:de:16:d8:e6:b3:0b:9a:
2a:37:f0:14:74:06:9d:27:d5:19:16:32:89:a5:cf:f8:a7:31:
ce:22:df:09:9c:dc:ae:6d:1c:72:89:6c:6c:ee:1b:d4:a1:af:
80:e7:f8:e7:82:04:4b:bb:3b:9e:94:74:7b:81:cf:a7:37:8c:
e0:bf:37:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEwQUYxMTAvBgNVBAUTKEI2NjQ1MUY5NzE4OENBRjgxODREMDdDMTMwQTI1RDk1
NzZGOEMxMDUwHhcNMjYwODE4MjMwMTI5WhcNMjYwODI1MjMwMTI5WjAYMRYwFAYD
VQQDEw02YTg0ZTQ0OS00Mzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjw5x6Yrbp+LCoomhqGpyV/OGdOnh9knr0KYdAwW3P3ctEGXQBMsx9OBcKLxC
Roh/64O3j2BQXA3ticjC0I3Y0/6B8g4UvILFg3+wFSwuiO8gbpRn35bbchswZAns
IJO7B6DtM7GoPCgKQQ1xUwYyqXElIItbqtNhfwnL/KkvViqmiNH39lsjTfYaW9tO
1RR+WR24no3csW4cXlpeynKZOJveON5Lo08fo8Kvpa6u/PLHHhAgB8fM3QY3dzkb
etCJGfD1qfT7G0TAAvgs25up348caUnByapO6RJB6P6Q18DbSApV1Tc6shoQV/P8
bgN74CYzmbf87PpXaflCCUcFXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGZzzRJs
OSrNx5UIIkkyckbyQwc8MB8GA1UdIwQYMBaAFLZkUflxiMr4GE0HwTCiXZV2+MEF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTBBRi9GRDY1QjREOEU0
QTYxMUVCQjk0QUE1NENDNEY5QUUwMi90bVJSLVhHSXl2Z1lUUWZCTUtKZGxYYjR3
UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RtUlItWEdJeXZnWVRRZkJNS0pkbFhiNHdRVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTBBRi9GRDY1QjREOEU0QTYxMUVCQjk0QUE1NENDNEY5QUUwMi90bVJSLVhHSXl2
Z1lUUWZCTUtKZGxYYjR3UVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbsmsM5OBn44nmoWOIl5r15N3DxiNMv3026miPtUAJWfxwn/4TugvykeXJWV0
0HnV47C/A2brDyvn8WI5+lPOsl/5lTM3E0Z+5kGhw0NH6uZJ7zsc9/e1+EZD7gCm
N8TKP04HndnwOAZ+W6Zrzb2SjFzEaZ7C/zDHwCDbqwkwQhFjgVjh5S/whNse/vMp
+vEVxnhptpChq2iYeG0GnYV2tGzSEu2bwnTsOfsosUKuCvZxiFboVq2h5sZqrhw2
13beFtjmswuaKjfwFHQGnSfVGRYyiaXP+KcxziLfCZzcrm0ccolsbO4b1KGvgOf4
54IES7s7npR0e4HPpzeM4L83TQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:54 2026 by rpki-client