
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
File: tRdNgmVknN0nQmySfRaHddeD1Tg.mft (raw, json)
Hash identifier: Ymkc3YA7JR9FkktX207yg7QHOHhvxLzJQLpkYMkKrso=
Subject key identifier: 9F:1B:92:14:FE:80:92:4C:6D:49:A9:9A:B0:5E:2A:C7:5B:EC:ED:16
Authority key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
Certificate issuer: /CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538
Certificate serial: 0C23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
Manifest number: 0C18
Signing time: Sat 24 Oct 2026 18:51:00 +0000
Manifest this update: Sat 24 Oct 2026 18:50:59 +0000
Manifest next update: Sat 31 Oct 2026 18:50:59 +0000
Files and hashes: 1: tRdNgmVknN0nQmySfRaHddeD1Tg.crl (hash: E+IR8RWKb/fLkKLS6FuRYdff4aR/iGmIURG5YYxraQ8=)
2: 61E12BD0CA0611EEB05EB92CC4F9AE02.roa (hash: nDxmW75XsnkkvR0/lsX99gyZXa0q7ERrzbEjSla7UOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl
rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 18:50:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3107 (0xc23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D459, serialNumber=B5174D8265649CDD27426C927D168775D783D538
Validity
Not Before: Oct 24 18:50:59 2026 GMT
Not After : Oct 31 18:50:59 2026 GMT
Subject: CN=6adcfe14-3b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:5e:cb:10:17:24:8e:38:c6:4e:b6:e8:db:
a5:8f:ac:7e:4e:4d:5e:18:be:38:08:3c:0c:38:7e:
f3:d5:1e:43:34:de:67:bf:35:e0:02:91:df:82:ca:
6c:d7:13:50:49:30:90:9a:2b:b4:4c:7b:a4:50:16:
ba:62:1f:66:bc:ca:dd:a0:a4:73:b8:8d:62:07:fe:
8a:fb:fd:20:d6:cd:ef:a2:d9:2e:6e:2a:db:bd:1c:
e0:e3:a6:e4:90:70:5a:1c:0d:4d:e5:38:e8:25:5b:
81:4f:9d:31:8a:b3:6a:29:b9:e9:bc:31:fc:3b:ec:
70:e4:0e:7d:d3:1b:bb:7c:0f:5b:43:13:8b:ea:32:
f6:cd:54:47:b8:2c:ec:aa:6e:23:03:aa:2e:ae:f5:
95:6f:37:2c:68:5b:a2:e0:57:81:3b:91:cd:07:66:
86:91:29:65:42:20:a8:00:5a:19:4f:d4:54:d9:ad:
23:8f:87:aa:1a:f9:95:e4:02:bd:ca:15:a1:d4:59:
9d:da:8d:69:c2:b2:e2:c2:0f:9b:9b:12:ec:a2:34:
53:2b:e3:c1:dd:6d:11:00:c4:5d:1f:9f:a2:b0:f5:
7d:30:f2:d4:a5:ea:7b:fd:5a:61:25:d1:76:37:96:
10:e5:5d:40:65:1a:d2:c7:c1:c8:a9:01:c2:96:01:
d6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1B:92:14:FE:80:92:4C:6D:49:A9:9A:B0:5E:2A:C7:5B:EC:ED:16
X509v3 Authority Key Identifier:
keyid:B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:bc:1c:5e:1a:eb:44:8d:14:26:51:fc:a9:43:c7:f1:af:fc:
57:e1:64:a8:46:18:39:59:7e:4c:58:ed:53:cb:04:e8:e2:c6:
f6:83:20:14:c2:6c:cd:b9:62:f4:57:37:91:43:15:66:b5:7e:
70:c1:72:88:08:ee:19:66:73:a4:c3:dc:d0:21:93:f5:ca:08:
68:c8:58:9e:a3:5d:2a:1b:e2:8f:97:9c:61:43:be:04:36:f3:
9c:92:e4:01:b8:a6:4f:a9:58:bc:75:c7:8f:66:21:1f:c2:82:
d3:56:a9:22:2c:6e:c0:c3:73:3a:8d:6e:36:a8:04:89:fe:af:
e5:b5:f6:d9:54:28:2c:ea:2c:3f:de:e6:a7:74:73:66:a3:37:
f2:eb:4c:0b:56:09:e8:5a:a6:e4:77:aa:ce:f4:1c:2d:29:a9:
91:24:71:a7:f3:20:85:15:55:1f:21:37:f4:bc:0f:83:5a:11:
cb:1a:84:d9:97:25:b5:c8:28:d8:c0:6e:f4:39:c0:75:e2:8b:
37:f0:2f:e4:d8:d0:b3:27:ed:9b:41:2f:e1:ef:df:a0:e4:98:
6e:b3:0f:fe:24:cc:17:ac:64:2d:c5:c8:c8:08:9a:44:83:06:
2b:7f:9c:56:bf:fb:2a:c1:b2:03:40:dd:f8:08:6d:63:5b:0d:
8c:bf:15:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:55:52 2026 by rpki-client