
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
File: tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json)
Hash identifier: IQcOM31S6ZnKKTRc1tZyBhenTh6lOEKK9cnbbDkL8yw=
Subject key identifier: 83:8C:EF:3F:34:2D:24:FB:CC:C7:F4:3A:10:C7:08:33:BD:70:D0:C3
Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Certificate serial: 0841
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
Manifest number: 07B5
Signing time: Mon 31 Aug 2026 22:00:18 +0000
Manifest this update: Mon 31 Aug 2026 22:00:17 +0000
Manifest next update: Mon 07 Sep 2026 22:00:17 +0000
Files and hashes: 1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: Nd6GfM6JRdn6Ml6rDZDzgS8piNX3zyLvHT05beVRdak=)
2: 42F4260E86F211F1B8F66003A7EE528E.roa (hash: vfUZixrUj69f8oGm3SJCT4P/nwbYiHNMmZYHs7EynG4=)
3: BE76C8186C6811F0B3FF7E69C4F9AE02.roa (hash: R8I4phETOiBeAPEYJEZeN+zM3emu7i6ZII3wUWn+zBQ=)
4: 61D8F6CCDC8D11F0969601B93D6F56BC.roa (hash: ddJZo//lHq9Ctx7y0h5Z1hWR5denN2+4dnjr/28CZNY=)
5: A716CA94954611EC9B320352C4F9AE02.roa (hash: ckSaIaBp0C2tnzfJNrPjglmyLfVPcguaEhWoRdz8O68=)
6: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: vlg26itogzimWhrZ0i1+Tb3EqjG8TstW5T7rv6utFcs=)
7: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: UqCULZpr33i9wM28d9/ADAw4Z3FTaU1dvqC0cM5wfCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2113 (0x841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Validity
Not Before: Aug 31 22:00:17 2026 GMT
Not After : Sep 7 22:00:17 2026 GMT
Subject: CN=6a95f971-78aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:55:3a:a2:10:01:fc:44:2d:2d:a2:d8:a6:
44:d6:c6:50:40:5f:d5:e9:a6:6c:37:5f:95:f0:f4:
2e:47:59:c3:35:7c:55:26:6b:21:de:3e:a7:d9:de:
e2:a3:e6:ff:df:ce:ae:72:55:70:e2:1f:2a:9e:09:
24:b9:49:de:23:f2:6e:85:4f:2c:fc:f2:f0:b1:1c:
9c:b1:ce:68:a6:e2:b5:89:c4:a4:f3:18:c0:db:ae:
4e:b7:8a:7f:da:b9:dd:3a:e3:11:bf:62:59:3b:46:
98:6c:0e:96:fa:10:7c:3d:11:75:79:fc:74:ab:8e:
e3:be:db:31:0b:05:e5:ef:93:b1:5f:4f:fb:04:df:
a2:2e:28:41:e9:25:0d:26:15:16:79:be:20:b4:49:
44:f4:a5:a0:8d:6f:81:10:5a:65:c8:0f:54:ff:a5:
77:79:16:39:de:e5:fe:2a:1b:1e:42:05:cc:25:7c:
56:38:2b:50:a8:1d:7a:3e:73:10:21:76:8d:35:04:
fd:7a:e1:89:bc:ad:bc:d5:c9:a2:94:63:75:3c:62:
c4:dc:5b:e9:57:55:14:00:11:6a:cd:7d:1e:41:b9:
1e:31:08:1f:a3:7d:23:a1:d8:91:c6:fb:56:b6:2f:
8f:33:b5:c2:ad:3c:f2:93:42:cb:e2:5d:b5:42:2b:
7a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8C:EF:3F:34:2D:24:FB:CC:C7:F4:3A:10:C7:08:33:BD:70:D0:C3
X509v3 Authority Key Identifier:
keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:52:4d:e3:81:89:e3:32:6d:e7:1c:32:16:1d:0e:4f:43:59:
b2:cc:7e:37:5b:bf:0c:e3:6e:f2:2c:9d:49:16:25:1a:76:50:
4c:8c:65:19:3e:bb:6c:cc:fd:fc:c6:55:e1:e9:f4:55:92:e4:
29:1b:c8:f6:55:ff:bd:10:d8:c2:10:8e:0f:f5:b4:26:88:45:
68:90:d0:01:28:fe:20:31:bb:2d:ce:bd:48:3b:b3:4c:77:98:
14:c8:8c:84:cb:6b:74:1d:70:bf:c1:c6:dd:d3:3a:ee:87:8f:
f3:62:f2:90:f3:32:67:7c:7c:cc:a9:84:20:11:fe:3e:0b:b6:
b7:85:35:58:40:b3:61:3b:32:a5:27:05:63:15:8a:1a:8d:f0:
1e:30:04:41:da:e4:18:a6:5b:58:3d:af:9e:17:a2:e0:10:56:
2d:fe:fa:15:0a:77:42:27:d2:f2:f3:c0:76:cd:95:07:b6:92:
76:27:ea:08:3a:72:ca:a4:e8:f2:a1:e6:be:e9:be:52:d1:c8:
6b:54:55:3c:48:bf:e5:da:ce:14:eb:53:a6:53:92:e3:e4:3a:
74:0e:d7:de:ff:00:d1:05:3e:c9:af:ae:e3:3e:93:4a:f1:cd:
2a:e9:11:2f:05:e8:6b:f3:70:ff:b5:10:4a:9c:8d:7f:3c:35:
e0:8c:42:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:48:37 2026 by rpki-client