
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
File: tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft (raw, json)
Hash identifier: P9kcevw3sqI9rjiWdeNTo+QbH6YcPv6x7XMeR/VWSNM=
Subject key identifier: 93:7D:2E:E8:AF:80:6D:C6:A3:0F:83:14:79:59:3C:89:79:89:83:EF
Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A
Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
Certificate serial: 0616
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
Manifest number: 0606
Signing time: Thu 10 Sep 2026 22:47:34 +0000
Manifest this update: Thu 10 Sep 2026 22:47:33 +0000
Manifest next update: Thu 17 Sep 2026 22:47:33 +0000
Files and hashes: 1: tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl (hash: nn11ZBQPBvf9rVDPJ3MZRZJ20fguPoslPba0rsilDlc=)
2: FC48A6E45FA711EF81D7F60DC4F9AE02.roa (hash: ZwaaaCTB5MJnKC+ti5oXMWpTHrYQMXviyJGrRl6G7v4=)
3: 90AEB6B26C0411EF903ED20BC4F9AE02.roa (hash: 39dWXtJ3zNJllsdeoKvUITiTmTYBuJqx9UsYIBiECf8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl
rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 22:47:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1558 (0x616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED3C, serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
Validity
Not Before: Sep 10 22:47:33 2026 GMT
Not After : Sep 17 22:47:33 2026 GMT
Subject: CN=6aa33386-1a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:5b:db:8b:d2:8a:2f:f5:21:2d:83:5a:46:
08:d1:4f:bd:38:67:08:73:d6:00:16:1a:d4:2a:61:
d0:70:66:82:a1:6a:5e:f1:be:27:d0:18:1e:ae:58:
f5:32:bc:b6:d6:d0:04:7f:f9:80:2c:86:b6:07:d4:
75:83:e8:b3:b5:75:72:bd:bb:2e:24:dd:3d:ef:f3:
b6:0a:08:92:20:c9:51:74:ce:ff:1b:00:db:21:3c:
5d:5b:1f:de:a9:00:b6:7d:19:bb:b1:46:99:d9:c0:
8a:b6:05:64:eb:b5:56:d7:c6:46:ff:71:fe:a7:4c:
b6:e6:90:fe:e0:d1:8e:c6:66:0f:53:ea:64:56:34:
0e:1f:78:51:8b:45:88:88:77:54:e8:6e:5b:5e:9c:
f7:60:6a:3f:72:28:af:f7:0e:12:73:c3:5d:9e:bd:
7c:80:8b:95:30:1f:ee:75:3b:8b:9b:e8:4f:17:0e:
2d:72:b8:55:3c:10:63:47:e0:e1:22:18:ad:8b:e9:
28:e1:b0:d6:f2:fc:dc:24:38:38:6f:fe:83:b8:90:
19:19:a3:21:47:f7:40:35:ca:3c:5d:39:58:84:96:
65:d8:78:3d:e7:95:6a:25:88:79:12:6c:2a:8a:97:
c2:e3:88:2f:cb:3d:e5:55:5d:aa:92:a0:87:f0:90:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7D:2E:E8:AF:80:6D:C6:A3:0F:83:14:79:59:3C:89:79:89:83:EF
X509v3 Authority Key Identifier:
keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:cb:a7:02:32:f4:13:26:5f:a5:18:0f:20:25:ff:d7:2a:ad:
ed:b4:16:92:74:50:99:54:ff:65:79:21:49:75:22:64:73:79:
ff:e6:84:bb:46:3f:e7:08:66:44:cd:8d:3a:cd:22:bc:b1:1b:
a3:cf:f8:da:3b:b6:5d:3e:95:ff:98:dc:36:0b:10:d3:3d:4b:
1a:ea:77:76:2d:31:29:df:16:9b:18:dd:87:6c:63:e8:5f:21:
56:26:b2:8c:c8:5c:84:36:3b:0e:b4:40:7c:10:c1:33:b3:8f:
35:7c:11:90:29:2f:47:5e:4d:a3:f5:3e:af:25:f7:31:da:0f:
9d:49:16:5d:03:91:72:3b:f6:6d:8a:9f:0f:40:29:c9:a0:97:
f5:39:7d:ad:c6:b0:3a:5f:af:5e:09:33:a1:ed:3a:2b:c9:14:
15:8e:75:a7:f5:ae:ff:73:ca:19:b4:bd:7d:58:67:44:60:8c:
bd:e3:38:c8:b0:98:ed:f8:85:5d:80:cc:1e:70:1d:56:08:16:
ec:b6:20:48:a8:4c:bb:0e:00:c5:73:25:c8:fb:9b:c8:84:64:
6b:00:fc:04:99:09:31:77:ec:6b:3a:2a:54:c0:d0:14:53:f8:
40:4b:d1:3c:b1:ef:e0:a1:b9:44:54:56:a7:90:bf:83:16:f6:
e9:99:b4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:26:33 2026 by rpki-client