
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
File: tWQnMiZdQL91ypSp7IEZIRwbmzI.mft (raw, json)
Hash identifier: 7kiPJCqw1IEI4KONTt/U9yPCHtf8Zi2+Krqd/5bA/l4=
Subject key identifier: 2F:CE:A9:22:EF:F9:B8:70:1A:A8:97:3B:90:15:B5:7D:B4:E2:FD:65
Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
Certificate issuer: /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Certificate serial: 2D3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
Manifest number: 2C83
Signing time: Fri 18 Sep 2026 15:29:54 +0000
Manifest this update: Fri 18 Sep 2026 15:29:54 +0000
Manifest next update: Fri 25 Sep 2026 15:29:54 +0000
Files and hashes: 1: tWQnMiZdQL91ypSp7IEZIRwbmzI.crl (hash: Gz91T8sNnt+OoJ444o0bNZODa5XdEbF5u7qfPL5AMy8=)
2: 4462F034F0EC11EB9D0B176AC4F9AE02.roa (hash: A0kKCJ9LwtDmC1YEa/g9xgt0EE37Ohto39y+EtO3rt0=)
3: zdpO0gyaOty9ncRPEfhtGvEBspY.asa (hash: irL2kj+5b38uZFTIC6OWAZtHNzaWLv9bPTPvqTlgBWs=)
4: E0CC928CABDE11ED954F5C84C4F9AE02.roa (hash: T2ATFndqif2rigzuI4qov++r1+kCWVIg5fV7GxHkRzQ=)
5: 37BAE214429111F18FB6D217B2833773.roa (hash: 8DTZONsJGjymgnSZfnxpolvPLsYSk+tNdQgH6HrBSGI=)
6: 8F199E5086EE11F19E006003A7EE528E.roa (hash: ZuAnAgHg5vFTNcsKh5KM85ZI9A4NW/8yy8AIKsgNOsk=)
7: 13461F60ABDC11EDAE837666C4F9AE02.roa (hash: ERyde/Gka5P6zXPyNt2BzYHHMs7m9I9h8bcGjPetJdo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11578 (0x2d3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C128, serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Validity
Not Before: Sep 18 15:29:54 2026 GMT
Not After : Sep 25 15:29:54 2026 GMT
Subject: CN=6aad58f2-9b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:d9:07:82:eb:a4:dd:df:4c:e6:03:42:39:
42:1f:e3:eb:b9:6d:73:18:5a:2a:88:22:1a:42:64:
5d:28:ca:34:04:10:8e:14:55:a0:a1:37:83:64:4f:
9f:33:c6:cb:32:b4:21:39:84:44:fe:e5:45:b1:8b:
7b:5d:3a:52:26:df:f9:c9:6e:21:46:84:70:02:52:
d2:db:d6:30:94:34:d5:d3:52:4c:8b:9d:9f:f5:0f:
f7:34:a5:c9:ff:79:37:9c:f3:85:21:60:49:a1:2e:
87:da:f2:9a:26:4d:f6:6f:7a:05:d0:8f:fe:0f:dd:
97:51:c6:7e:3f:61:dc:e7:18:92:38:4a:63:32:cc:
e8:81:a8:61:c6:8c:0e:fc:95:6b:4f:94:e8:71:c2:
a0:86:b2:e3:21:06:1e:a7:fb:6d:9d:7f:f0:72:48:
23:68:5e:d3:12:f4:96:b0:59:ea:63:02:ed:99:2b:
8c:e1:1e:e7:92:72:bc:5b:19:63:46:d5:20:7d:77:
a3:1e:db:f3:a8:25:1f:2e:ec:09:31:8a:17:5a:d1:
dd:bf:a1:27:89:bc:e6:ef:ce:7a:49:76:1f:9c:cd:
e3:16:26:61:84:db:88:f6:74:02:dd:68:82:de:34:
4c:f8:eb:fc:e7:f6:f5:0e:98:3b:f8:cc:70:ea:8a:
16:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CE:A9:22:EF:F9:B8:70:1A:A8:97:3B:90:15:B5:7D:B4:E2:FD:65
X509v3 Authority Key Identifier:
keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:6e:50:16:fd:ae:6e:2f:6e:52:a4:32:3e:57:fd:f8:30:ac:
80:04:63:3f:8a:06:76:5d:ca:21:f5:ba:b5:a9:68:91:6a:90:
fe:77:26:b2:a0:90:0e:3d:b6:cc:87:f5:b7:19:26:22:91:79:
ef:d9:97:6f:e3:1f:79:95:f0:e6:4a:2f:b6:8e:ca:75:b0:12:
ac:67:9c:83:f0:19:0c:d7:30:30:16:eb:1e:a9:f9:04:6e:1f:
0b:e6:95:ef:84:81:40:2e:ba:51:40:21:25:64:26:83:0f:0e:
4f:63:99:b7:a5:13:ee:59:b7:05:ff:4e:3e:ac:69:dc:f3:4c:
af:8a:2f:2c:2a:0b:cf:8e:a0:93:4d:c9:cb:e5:79:a8:5d:ef:
6b:df:ba:88:c8:ed:a0:19:99:3d:a7:97:07:86:7d:e5:9d:a0:
4c:d4:2c:66:78:d3:8c:7b:6c:6d:bc:a6:5e:e5:d3:83:89:e9:
f5:62:45:ef:6f:41:18:0d:09:53:d8:e8:d1:d9:15:ec:90:c0:
5a:fe:58:71:55:99:aa:27:97:9a:f8:8e:9d:76:35:c7:38:4b:
45:03:97:30:d2:d5:7e:40:f2:34:fd:a6:d8:95:fc:48:c2:55:
f4:9a:6b:08:94:c5:1c:dc:6d:cc:f1:99:33:17:a5:2f:e1:96:
6e:3f:8d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:48:52 2026 by rpki-client