
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
File: tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json)
Hash identifier: C8Kx8vL04+Umf4iWV13PXFp3VmF98CpZJaSYoN8EUw0=
Subject key identifier: CB:5A:28:C3:00:98:7B:08:38:48:D9:62:A2:7E:4D:5C:8E:03:2A:8E
Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Certificate serial: 0860
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
Manifest number: 07D4
Signing time: Sat 31 Oct 2026 22:28:03 +0000
Manifest this update: Sat 31 Oct 2026 22:28:03 +0000
Manifest next update: Sat 07 Nov 2026 22:28:03 +0000
Files and hashes: 1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: Ic0sKQP2nL064NLlSxyh3JN5FHH6/O5FI3X+OLm+rI0=)
2: 42F4260E86F211F1B8F66003A7EE528E.roa (hash: vfUZixrUj69f8oGm3SJCT4P/nwbYiHNMmZYHs7EynG4=)
3: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: UqCULZpr33i9wM28d9/ADAw4Z3FTaU1dvqC0cM5wfCc=)
4: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: vlg26itogzimWhrZ0i1+Tb3EqjG8TstW5T7rv6utFcs=)
5: BE76C8186C6811F0B3FF7E69C4F9AE02.roa (hash: R8I4phETOiBeAPEYJEZeN+zM3emu7i6ZII3wUWn+zBQ=)
6: A716CA94954611EC9B320352C4F9AE02.roa (hash: ckSaIaBp0C2tnzfJNrPjglmyLfVPcguaEhWoRdz8O68=)
7: 61D8F6CCDC8D11F0969601B93D6F56BC.roa (hash: ddJZo//lHq9Ctx7y0h5Z1hWR5denN2+4dnjr/28CZNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 22:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2144 (0x860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Validity
Not Before: Oct 31 22:28:03 2026 GMT
Not After : Nov 7 22:28:03 2026 GMT
Subject: CN=6ae66b73-7cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:4d:fa:44:68:01:fa:04:35:fb:35:f5:33:
cd:03:09:a5:2e:ea:c2:77:0d:60:36:7e:05:5b:8b:
b5:fa:86:3d:1c:04:1f:d4:92:aa:97:db:d9:e9:0e:
de:2f:77:77:c7:94:c5:1b:f6:a9:4a:93:e1:d4:d5:
b7:df:86:6a:87:15:90:66:2a:0f:07:4c:5e:b6:de:
2d:6e:78:69:d0:5f:72:59:61:3e:9c:97:b5:d1:09:
60:7a:0f:fc:b1:2f:7a:6b:bd:5a:05:b9:25:6b:eb:
1b:45:6c:67:fe:35:ea:e5:6a:90:e5:7a:7d:2e:48:
6d:88:11:a0:98:cd:eb:fc:d8:87:21:37:99:e0:ee:
d5:09:43:f7:f5:0b:d2:45:b1:3f:90:63:51:26:f6:
c8:4c:31:22:53:c4:12:e1:c5:96:89:22:83:d7:38:
d2:f1:da:da:48:1d:17:32:e0:4f:b9:89:f4:33:05:
57:86:04:e7:a1:6e:69:61:74:cc:2e:36:8a:63:be:
fd:39:f6:73:0b:8f:5b:3f:19:24:96:b3:37:a3:6a:
64:3d:40:6b:18:fb:1c:2b:cc:49:81:1c:db:11:6f:
31:0e:06:13:c8:71:e3:4c:b3:4b:2c:1c:91:da:a3:
69:cf:fd:68:bc:0e:3d:19:3f:ab:23:a9:01:43:5e:
b9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5A:28:C3:00:98:7B:08:38:48:D9:62:A2:7E:4D:5C:8E:03:2A:8E
X509v3 Authority Key Identifier:
keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:9f:6d:fa:78:64:45:66:0d:a3:ab:5a:3b:bd:99:8d:b6:05:
ab:fc:54:99:ac:c7:05:63:20:fd:e2:df:00:f8:36:06:11:db:
09:8f:0c:74:0d:16:2f:4e:f5:86:63:4d:77:33:d8:de:73:0c:
41:51:54:68:69:76:2a:d7:34:bc:d6:ae:1d:a1:6f:38:0c:5f:
cc:be:29:45:ca:ee:e9:29:d5:b9:19:92:97:95:be:65:2d:5e:
21:10:fd:c1:b4:f6:04:f2:34:be:d6:50:e3:b3:17:86:8f:e6:
d2:1e:45:c7:23:52:34:f4:a5:c3:eb:fc:35:8f:8d:dc:ff:00:
24:86:f9:2c:db:d7:19:21:f9:70:47:52:dc:9c:90:00:46:5e:
ee:8c:45:d5:35:a9:4e:8d:f8:9f:cf:a2:45:39:f4:f5:dc:11:
2d:3b:6b:69:2c:4f:95:10:61:f1:6d:88:da:55:f6:55:23:64:
09:dd:d5:88:27:18:5f:fc:2b:6a:f2:23:5c:0e:ec:c1:56:00:
4f:f3:79:09:bb:ab:03:12:f7:66:20:dc:71:df:1a:82:36:43:
a4:40:6b:e3:3d:f3:27:ae:58:62:db:b4:5f:8f:08:03:c6:bf:
eb:d5:66:1f:80:44:ff:8d:1b:35:15:56:26:a5:73:02:98:58:
ba:86:03:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 06:20:15 2026 by rpki-client