
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
File: tKlqre7ce-3VfWL8mknqCz_29Qw.mft (raw, json)
Hash identifier: cmmjbq8/qWfHeDUEspx6NIOYPioTGKesXeHPGKf3vkQ=
Subject key identifier: 8C:F4:5F:77:AA:8B:7D:EF:E4:7E:B2:F1:60:AE:A5:62:B6:65:79:14
Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C
Certificate issuer: /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C
Certificate serial: 1347
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
Manifest number: 133D
Signing time: Thu 04 Jun 2026 17:00:11 +0000
Manifest this update: Thu 04 Jun 2026 17:00:10 +0000
Manifest next update: Thu 11 Jun 2026 17:00:10 +0000
Files and hashes: 1: tKlqre7ce-3VfWL8mknqCz_29Qw.crl (hash: UmcuVLm/b6FHZdqEsL0lX9z9rVWExn6mm95arXnvz2E=)
2: 1C839F861BA111EA8BDD6114C4F9AE02.roa (hash: 9goWELW0trcqEqqFWMwPmGOCRkrjj1+FxG/eq2UNrIY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl
rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 17:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4935 (0x1347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983, serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C
Validity
Not Before: Jun 4 17:00:10 2026 GMT
Not After : Jun 11 17:00:10 2026 GMT
Subject: CN=6a21af1b-8ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:54:7d:24:47:64:48:e4:f7:5e:8c:2c:92:
24:d6:5a:77:fb:39:93:0f:5e:2d:aa:57:0c:ac:59:
2d:11:f0:23:87:34:d6:6e:86:28:dd:28:50:cd:73:
bc:cd:8d:dd:f9:70:3d:7f:cf:6e:b4:1b:29:e8:98:
da:ec:e6:01:4c:0e:bf:c1:b4:0f:e6:d2:97:97:44:
39:b8:33:04:6e:a4:66:e6:74:d6:16:14:de:0b:d0:
1a:2a:b4:8c:13:0e:47:39:f5:d6:d2:d1:b7:f3:6f:
de:07:fe:52:9a:29:f2:72:eb:ed:a5:1b:b2:61:7e:
5b:f6:4c:d2:78:3b:36:fb:c7:23:f7:ef:07:a4:8e:
f0:5b:01:c6:f3:40:6d:d3:90:a2:b1:dd:24:d6:a5:
90:02:d2:56:89:ca:2e:4a:b5:d2:fc:39:53:3e:c3:
b9:c5:48:02:1f:68:08:a8:94:17:2e:d2:c8:56:73:
f2:0d:a3:68:88:d6:dd:dd:ff:76:98:2c:4b:be:13:
ee:44:e2:ba:26:10:58:73:4c:58:2c:57:55:c8:c6:
b3:1f:14:35:ed:14:35:45:1c:b3:21:62:2d:bd:ce:
9a:8a:a9:0d:c6:49:03:6c:b7:a8:6c:32:a5:68:d9:
b8:e1:da:fb:18:99:4c:c3:ec:83:58:96:85:bd:95:
62:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F4:5F:77:AA:8B:7D:EF:E4:7E:B2:F1:60:AE:A5:62:B6:65:79:14
X509v3 Authority Key Identifier:
keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:1b:8c:32:fd:1f:09:13:14:5c:12:65:1a:80:48:9d:a4:01:
49:6d:40:6a:22:69:45:a8:c0:02:97:95:05:5b:88:ce:80:b4:
b9:af:e3:3c:25:ee:35:df:e0:87:ad:7e:d4:0c:50:ad:95:83:
4c:ff:af:da:96:b1:94:1f:75:f5:b7:65:8c:5a:45:4a:0b:3a:
a1:4f:71:6d:9e:16:9c:95:a9:e5:c7:1c:af:28:a6:7c:cf:79:
82:7d:6d:b5:94:6e:03:11:17:0e:ec:c8:36:a0:1e:12:7a:d9:
53:d9:5f:c2:9b:60:24:a7:c5:85:5a:cc:a2:a7:58:3c:d8:c4:
15:97:a2:ac:8e:aa:c4:68:c9:18:c3:e0:77:65:c2:92:b4:45:
89:1e:aa:fc:d5:7d:c5:70:fb:30:35:55:8f:b3:99:64:56:ed:
8e:fd:71:1d:82:11:43:f1:60:0b:56:ae:08:62:17:be:84:81:
00:88:51:d5:7a:dc:21:f0:bd:bf:89:28:be:09:7c:fe:8c:f9:
c2:2a:6b:a9:ea:ed:9f:44:f2:87:2f:9b:98:07:be:b5:bc:c8:
1d:03:0c:3c:72:8b:a3:6d:70:67:20:59:59:6c:a9:28:eb:22:
a1:b7:00:ab:b1:c8:d2:a6:02:a8:ce:ea:68:bd:41:f2:34:8a:
ce:0a:f1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:15:12 2026 by rpki-client