
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
File: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft (raw, json)
Hash identifier: 8AepEVrNqRbU9SFOIfj5RhKcYCSyMc2mtTNTJJogI7k=
Subject key identifier: F0:7B:A7:9A:2A:B7:11:C4:17:53:C6:87:C6:26:14:79:D7:94:6D:FE
Authority key identifier: 4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B
Certificate issuer: /CN=A916C4BC/serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B
Certificate serial: 0547
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
Manifest number: 0540
Signing time: Tue 18 Aug 2026 23:49:52 +0000
Manifest this update: Tue 18 Aug 2026 23:49:51 +0000
Manifest next update: Tue 25 Aug 2026 23:49:51 +0000
Files and hashes: 1: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl (hash: vtjcYDbC+TV2qd39GLPKQj9pkE3IEzIT+bRtYGzKkQU=)
2: F593443851B011ECB5188E24C4F9AE02.roa (hash: 0WVnAY5EHkV8sUZiTU2edZq8VGQc3j9oVtptJkhHgCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl
rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1351 (0x547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C4BC, serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B
Validity
Not Before: Aug 18 23:49:51 2026 GMT
Not After : Aug 25 23:49:51 2026 GMT
Subject: CN=6a84ef9f-2fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:b9:5d:47:db:23:94:b3:68:09:bc:73:9b:
28:54:11:6c:aa:8b:5b:49:3d:6d:d8:5d:92:26:9f:
52:ed:eb:f5:f7:09:2a:f3:42:55:d0:6d:dc:56:f1:
c9:19:58:bc:4a:49:fc:a9:b3:e0:de:a6:65:fa:e2:
dd:12:7f:49:5f:a2:67:a5:29:70:b7:06:89:4c:9f:
58:96:02:93:84:91:18:17:cf:a9:81:29:9b:c3:1e:
19:80:df:42:02:2b:3a:c8:24:6e:a1:91:aa:4f:cf:
d4:cf:77:8e:a9:61:8e:bf:7d:eb:ab:00:15:e1:1d:
65:e2:75:a8:66:c9:af:70:cd:34:26:2a:e8:86:16:
0f:26:45:91:56:e1:4e:b9:40:8e:90:e1:ec:27:9d:
4e:db:95:94:3c:c6:28:ed:ad:a8:31:7d:00:74:84:
c2:7e:7b:32:2d:9c:5e:eb:62:04:88:7e:48:54:6e:
0f:3a:79:b3:6c:d1:c4:59:5d:3b:74:8f:7f:bf:8f:
1e:87:50:99:73:93:b7:f7:e4:85:d1:0c:1e:0d:7d:
e5:f3:4c:ed:60:1d:7d:eb:4b:42:d2:75:43:5c:95:
da:f1:5a:f6:9f:29:75:1d:8e:36:b3:b5:05:91:5f:
a8:be:3f:65:c5:c6:69:92:60:6f:48:9c:cf:34:4f:
23:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7B:A7:9A:2A:B7:11:C4:17:53:C6:87:C6:26:14:79:D7:94:6D:FE
X509v3 Authority Key Identifier:
keyid:4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:71:4d:7e:ac:14:c7:3e:55:fd:31:0f:25:55:f2:dd:ef:a2:
73:0d:44:49:09:97:99:95:a4:57:2b:8f:63:45:dd:50:ba:78:
8f:7f:22:e8:78:fc:af:9a:40:bd:e3:13:98:8f:13:75:e4:7e:
ed:78:72:07:49:f9:36:a2:77:0d:ff:a0:10:38:21:08:14:ef:
78:66:b7:56:3c:52:56:bd:11:f7:a7:6e:a2:f2:da:a2:de:27:
02:d1:65:24:a3:d6:19:e7:9b:f0:60:43:6d:ee:0f:e9:23:8c:
11:7a:9b:fb:4c:22:ca:9c:eb:51:68:1c:a2:ec:3e:d5:ed:98:
7a:e5:d2:54:8a:df:36:e9:ea:9e:93:e1:07:d5:0e:3e:ac:33:
a1:f9:ad:16:aa:97:c8:7f:53:c2:18:a1:54:80:05:0d:d8:a9:
24:86:e4:05:66:6c:fe:f8:c7:ba:34:60:e1:84:83:96:6a:2c:
96:f0:96:87:64:d1:2f:08:6e:d4:64:c8:0f:86:e5:53:dc:83:
ee:e9:e0:69:2f:6e:32:5d:64:9f:e1:2b:79:40:ce:26:48:53:
49:30:ba:39:7b:d7:0e:cd:06:b0:8f:a0:a1:6a:a8:2e:3f:e7:
44:13:07:d1:5a:36:34:e9:de:2b:66:0f:7e:82:55:a3:2b:96:
1e:de:d2:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM0QkMxMTAvBgNVBAUTKDRERkVDMzQzN0M5MEJGNDE0RDA1MTg4QjQ4MkM3ODQ4
RTZGMzE2MUIwHhcNMjYwODE4MjM0OTUxWhcNMjYwODI1MjM0OTUxWjAYMRYwFAYD
VQQDEw02YTg0ZWY5Zi0yZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtyW5XUfbI5SzaAm8c5soVBFsqotbST1t2F2SJp9S7ev19wkq80JV0G3cVvHJ
GVi8Skn8qbPg3qZl+uLdEn9JX6JnpSlwtwaJTJ9YlgKThJEYF8+pgSmbwx4ZgN9C
Ais6yCRuoZGqT8/Uz3eOqWGOv33rqwAV4R1l4nWoZsmvcM00JirohhYPJkWRVuFO
uUCOkOHsJ51O25WUPMYo7a2oMX0AdITCfnsyLZxe62IEiH5IVG4POnmzbNHEWV07
dI9/v48eh1CZc5O39+SF0QweDX3l80ztYB1960tC0nVDXJXa8Vr2nyl1HY42s7UF
kV+ovj9lxcZpkmBvSJzPNE8jxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPB7p5oq
txHEF1PGh8YmFHnXlG3+MB8GA1UdIwQYMBaAFE3+w0N8kL9BTQUYi0gseEjm8xYb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRCQy9BOTcwQjJFQzUx
QUMxMUVDOUVEOTA0MUJDNEY5QUUwMi9UZjdEUTN5UXYwRk5CUmlMU0N4NFNPYnpG
aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RmN0RRM3lRdjBGTkJSaUxTQ3g0U09iekZocy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QzRCQy9BOTcwQjJFQzUxQUMxMUVDOUVEOTA0MUJDNEY5QUUwMi9UZjdEUTN5UXYw
Rk5CUmlMU0N4NFNPYnpGaHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoXFNfqwUxz5V/TEPJVXy3e+icw1ESQmXmZWkVyuPY0XdULp4j38i6Hj8r5pA
veMTmI8TdeR+7XhyB0n5NqJ3Df+gEDghCBTveGa3VjxSVr0R96duovLaot4nAtFl
JKPWGeeb8GBDbe4P6SOMEXqb+0wiypzrUWgcouw+1e2YeuXSVIrfNunqnpPhB9UO
PqwzofmtFqqXyH9TwhihVIAFDdipJIbkBWZs/vjHujRg4YSDlmoslvCWh2TRLwhu
1GTID4blU9yD7ungaS9uMl1kn+EreUDOJkhTSTC6OXvXDs0GsI+goWqoLj/nRBMH
0Vo2NOneK2YPfoJVoyuWHt7SDw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:00 2026 by rpki-client