
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
File: tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json)
Hash identifier: fiqCqK6UFgachwxwXn+n64XhC18eMuBQtSNoU/vIAxQ=
Subject key identifier: 16:3D:35:1D:76:71:9D:06:64:69:38:2D:3F:87:3D:68:CD:18:1D:8E
Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Certificate serial: 085D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
Manifest number: 07D1
Signing time: Mon 26 Oct 2026 21:53:39 +0000
Manifest this update: Mon 26 Oct 2026 21:53:39 +0000
Manifest next update: Mon 02 Nov 2026 21:53:39 +0000
Files and hashes: 1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: bHicH/Id9uqs9Ddno0M02wVrhyYWRNnW+mG0wFjf8lw=)
2: 61D8F6CCDC8D11F0969601B93D6F56BC.roa (hash: ddJZo//lHq9Ctx7y0h5Z1hWR5denN2+4dnjr/28CZNY=)
3: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: UqCULZpr33i9wM28d9/ADAw4Z3FTaU1dvqC0cM5wfCc=)
4: A716CA94954611EC9B320352C4F9AE02.roa (hash: ckSaIaBp0C2tnzfJNrPjglmyLfVPcguaEhWoRdz8O68=)
5: BE76C8186C6811F0B3FF7E69C4F9AE02.roa (hash: R8I4phETOiBeAPEYJEZeN+zM3emu7i6ZII3wUWn+zBQ=)
6: 42F4260E86F211F1B8F66003A7EE528E.roa (hash: vfUZixrUj69f8oGm3SJCT4P/nwbYiHNMmZYHs7EynG4=)
7: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: vlg26itogzimWhrZ0i1+Tb3EqjG8TstW5T7rv6utFcs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 21:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2141 (0x85d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Validity
Not Before: Oct 26 21:53:39 2026 GMT
Not After : Nov 2 21:53:39 2026 GMT
Subject: CN=6adfcbe3-a505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:79:ef:4d:3f:6b:19:11:8f:f5:ba:5c:03:44:
c5:5d:e4:64:a7:c0:0b:39:98:d6:bd:d7:c7:3c:25:
62:4d:48:4e:a4:59:f1:03:99:00:32:a8:2d:1e:97:
1f:95:3e:4e:9d:64:13:01:fe:a9:3b:0a:dd:c2:5d:
0b:5c:8a:0e:ab:52:49:4e:7d:54:b6:81:8b:59:9d:
cc:f1:e5:c4:30:b1:90:5e:25:46:9e:07:7e:49:e4:
2d:24:b1:72:92:35:ea:c5:1d:81:20:f5:75:44:48:
15:3d:e4:f9:90:c2:0d:06:4b:8b:6b:a2:db:68:76:
92:f7:3f:d1:c3:66:5b:23:ca:48:6a:74:54:68:f7:
ed:2a:a1:4f:10:f3:ca:cd:ff:83:7d:1f:c2:e0:e0:
a7:c8:02:ba:d6:79:3c:ce:86:db:97:6f:04:eb:9a:
7f:85:98:d9:d9:90:98:14:aa:b6:d7:58:00:8d:ce:
6e:b9:6e:fe:a7:af:ef:61:17:b4:09:97:3f:65:05:
5f:50:1b:32:b5:a7:8a:68:25:40:23:cb:da:d9:5e:
55:37:0b:30:44:60:93:83:1d:f2:78:23:40:fe:b0:
ef:d5:69:fb:bc:10:7d:43:1a:30:c8:a5:96:6b:df:
96:0b:0b:9d:29:07:45:99:c5:da:cb:26:8c:0e:6e:
53:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3D:35:1D:76:71:9D:06:64:69:38:2D:3F:87:3D:68:CD:18:1D:8E
X509v3 Authority Key Identifier:
keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:e5:3d:a9:ef:a9:27:b1:18:98:48:7a:1c:a3:76:66:8b:a9:
0d:ad:ae:db:4e:d5:f4:e5:c4:bb:fd:8a:89:d8:1f:82:0c:62:
44:f0:86:2b:cf:ad:ee:4b:1f:8a:14:cc:0b:4d:a2:f0:ac:67:
7f:6f:df:93:4b:b7:53:fd:5e:8f:40:ff:a0:21:e3:77:f3:06:
0b:bf:1b:39:6d:e2:d8:9a:4a:b1:a1:df:43:6d:01:2f:6b:4a:
22:05:42:06:e8:48:ad:d2:f5:7d:f1:74:11:1e:06:eb:5d:3a:
63:76:aa:5e:53:82:86:0a:f0:45:3e:cb:ef:b5:4b:0e:5b:3d:
93:6f:15:a7:ce:c1:cb:b1:c6:42:84:b8:06:25:da:3f:5c:fa:
09:c8:1a:8c:d5:a1:2d:82:8a:ce:45:34:79:e1:81:f9:9b:d4:
40:9f:bb:f7:34:f2:5e:1c:cb:72:a7:ee:16:11:26:31:72:2d:
a5:83:45:ed:83:c7:b8:57:15:2a:d0:9c:dd:3a:6a:1c:ae:34:
9f:5d:b2:66:a2:e3:14:e5:c0:56:96:20:ee:5b:3c:22:03:8d:
ca:4e:30:f0:35:7a:2c:e8:25:63:dc:06:95:df:c8:aa:72:db:
02:50:18:07:0d:89:1a:cf:7d:26:0c:2a:71:c3:53:25:77:19:
eb:c3:0b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:58:10 2026 by rpki-client