
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
File: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft (raw, json)
Hash identifier: Ew3Odz0B7tAFeECiJ3fz4Xel1sX4OfywBL/fhRCsdoQ=
Subject key identifier: 9B:7D:AF:38:C3:8D:6B:D2:BC:E9:27:11:D4:4C:BC:C2:36:F1:59:D3
Authority key identifier: 4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B
Certificate issuer: /CN=A916C4BC/serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B
Certificate serial: 056A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
Manifest number: 055F
Signing time: Fri 02 Oct 2026 23:42:19 +0000
Manifest this update: Fri 02 Oct 2026 23:42:18 +0000
Manifest next update: Fri 09 Oct 2026 23:42:18 +0000
Files and hashes: 1: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl (hash: yG25kqUq3O8msIgE5u4WOG3b38xtKiN/gxwhp3aKZfM=)
2: DCC02342BBF311F1B6A2C49B7011F970.roa (hash: PE8vVZzXvm2tF7QRpkkCTwOMI/HwyrU+jFrqwRcMlxw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl
rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 23:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1386 (0x56a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C4BC, serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B
Validity
Not Before: Oct 2 23:42:18 2026 GMT
Not After : Oct 9 23:42:18 2026 GMT
Subject: CN=6ac0415b-4970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:fd:7c:0d:fb:aa:c8:22:e6:06:a9:23:35:
00:ae:a0:a4:ce:72:55:0a:ed:8e:f9:a3:08:08:1a:
b7:5e:cb:c8:7d:81:15:50:b8:ef:17:81:79:82:7d:
de:d2:be:cc:cc:7a:dc:35:09:ca:25:9a:5b:33:94:
f9:6f:2c:02:c5:4f:e3:a5:56:c8:06:cf:00:72:ad:
6a:07:6f:95:1d:f4:5d:a7:88:e2:d0:37:82:33:9e:
09:81:b1:87:c6:2e:00:a0:84:01:08:17:18:e6:42:
14:19:09:08:39:bb:75:4f:16:01:12:0b:1f:d0:06:
0a:c2:1b:e3:af:45:61:9d:14:db:e9:93:4b:e2:6e:
a4:34:1d:c3:b7:90:36:89:77:3e:a2:80:21:25:a4:
20:f5:bb:cf:66:48:f7:86:f5:1a:a1:e8:6e:19:de:
7b:28:89:78:21:cf:d7:1b:46:b9:d6:49:e7:d7:cd:
5e:16:3b:ad:c4:2f:d0:0c:6c:35:ab:65:17:d5:e8:
46:4d:1b:7f:ac:8d:e0:27:49:2c:2d:7f:9b:49:ce:
db:4f:3a:5e:a8:b5:b8:29:8c:af:3e:11:61:17:b4:
6b:30:9d:2e:42:3c:55:b6:bb:3b:69:06:ef:c2:ea:
ea:ac:ab:58:f5:e2:87:4d:77:83:25:04:90:92:e1:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7D:AF:38:C3:8D:6B:D2:BC:E9:27:11:D4:4C:BC:C2:36:F1:59:D3
X509v3 Authority Key Identifier:
keyid:4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:2a:6e:4a:18:ab:87:62:76:1b:07:6d:2a:d0:b9:cf:86:df:
2b:68:60:ac:3f:68:92:1e:e2:88:75:05:a1:ed:50:b8:b5:e5:
d5:45:42:9b:b7:a2:56:2a:82:28:2b:29:46:02:4b:0d:0b:ce:
78:1d:a6:9e:c6:e3:6c:68:59:b2:b4:66:09:69:24:20:65:b0:
a6:ba:9b:fe:61:76:bd:47:05:73:6a:ad:91:14:cc:33:11:9e:
57:a1:c7:32:bb:1a:78:ad:9a:57:f3:38:2b:ee:0b:bb:e0:c9:
94:97:f4:3c:76:be:6e:df:47:16:16:4d:c6:63:e8:21:57:58:
b3:c0:d6:b4:1a:21:40:77:f3:24:b1:03:f3:9c:21:71:d5:0d:
42:15:fb:c1:0c:79:de:a4:0c:16:8b:ff:e8:1d:e8:e5:73:4f:
cf:a0:04:87:ec:15:a9:2e:bc:ab:8d:3f:eb:02:89:f6:84:7a:
99:0c:2a:e3:b4:a9:7f:28:07:92:bb:f8:dd:74:39:08:75:8b:
b7:ee:86:9d:61:22:89:ca:d2:72:4b:ee:4f:3b:11:21:ff:d6:
dc:bb:6a:b7:80:57:5d:93:d2:af:27:cd:14:3c:1e:14:48:72:
a7:48:28:d2:cd:63:e9:55:32:33:97:a9:c0:74:1d:3b:3d:40:
e6:8c:9e:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM0QkMxMTAvBgNVBAUTKDRERkVDMzQzN0M5MEJGNDE0RDA1MTg4QjQ4MkM3ODQ4
RTZGMzE2MUIwHhcNMjYxMDAyMjM0MjE4WhcNMjYxMDA5MjM0MjE4WjAYMRYwFAYD
VQQDEw02YWMwNDE1Yi00OTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz8D9fA37qsgi5gapIzUArqCkznJVCu2O+aMICBq3XsvIfYEVULjvF4F5gn3e
0r7MzHrcNQnKJZpbM5T5bywCxU/jpVbIBs8Acq1qB2+VHfRdp4ji0DeCM54JgbGH
xi4AoIQBCBcY5kIUGQkIObt1TxYBEgsf0AYKwhvjr0VhnRTb6ZNL4m6kNB3Dt5A2
iXc+ooAhJaQg9bvPZkj3hvUaoehuGd57KIl4Ic/XG0a51knn181eFjutxC/QDGw1
q2UX1ehGTRt/rI3gJ0ksLX+bSc7bTzpeqLW4KYyvPhFhF7RrMJ0uQjxVtrs7aQbv
wurqrKtY9eKHTXeDJQSQkuGXwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJt9rzjD
jWvSvOknEdRMvMI28VnTMB8GA1UdIwQYMBaAFE3+w0N8kL9BTQUYi0gseEjm8xYb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRCQy9BOTcwQjJFQzUx
QUMxMUVDOUVEOTA0MUJDNEY5QUUwMi9UZjdEUTN5UXYwRk5CUmlMU0N4NFNPYnpG
aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RmN0RRM3lRdjBGTkJSaUxTQ3g0U09iekZocy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QzRCQy9BOTcwQjJFQzUxQUMxMUVDOUVEOTA0MUJDNEY5QUUwMi9UZjdEUTN5UXYw
Rk5CUmlMU0N4NFNPYnpGaHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYCpuShirh2J2GwdtKtC5z4bfK2hgrD9okh7iiHUFoe1QuLXl1UVCm7eiViqC
KCspRgJLDQvOeB2mnsbjbGhZsrRmCWkkIGWwprqb/mF2vUcFc2qtkRTMMxGeV6HH
MrsaeK2aV/M4K+4Lu+DJlJf0PHa+bt9HFhZNxmPoIVdYs8DWtBohQHfzJLED85wh
cdUNQhX7wQx53qQMFov/6B3o5XNPz6AEh+wVqS68q40/6wKJ9oR6mQwq47SpfygH
krv43XQ5CHWLt+6GnWEiicrSckvuTzsRIf/W3Ltqt4BXXZPSryfNFDweFEhyp0go
0s1j6VUyM5epwHQdOz1A5oyehw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:40:16 2026 by rpki-client