
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
File: TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft (raw, json)
Hash identifier: er2GPQm7bYu5+OIlqQpsth9FKUkCb1dy+WtcNjbEWTk=
Subject key identifier: D9:AB:DC:86:72:AB:C2:A8:42:E7:D3:B8:10:3B:92:EA:3D:E9:1C:D4
Authority key identifier: 4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D
Certificate issuer: /CN=A91847A4/serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D
Certificate serial: 0130
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
Manifest number: 0127
Signing time: Sun 11 Oct 2026 06:23:30 +0000
Manifest this update: Sun 11 Oct 2026 06:23:29 +0000
Manifest next update: Sun 18 Oct 2026 06:23:29 +0000
Files and hashes: 1: TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl (hash: 5YhX0hwfRi3fjahGYl4lTE+pe38slIN9+FT22Z2PE1Q=)
2: 1201EAF6083911F0B43D9172C4F9AE02.roa (hash: rbHttiCNfct4rPH7XHoUz+IWP4BlD4I/02xhzj8Jyag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl
rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 06:23:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A4, serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D
Validity
Not Before: Oct 11 06:23:29 2026 GMT
Not After : Oct 18 06:23:29 2026 GMT
Subject: CN=6acb2b62-3415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:7d:de:1e:f9:81:36:b0:50:11:6e:5b:9a:
9c:2e:b9:93:4a:92:bf:bf:40:4a:64:8f:c7:51:fd:
98:1e:63:d4:e9:de:e6:97:b7:5d:ae:c9:57:d0:e8:
a1:88:b3:5b:fa:86:cb:70:9f:4d:40:bf:9d:8e:77:
10:20:e7:42:8b:de:e7:7d:84:56:7c:ff:d4:98:4e:
91:b7:fd:44:ec:93:66:be:95:44:30:b5:41:bc:e1:
5a:02:2a:fe:3b:c6:d7:34:7a:a1:29:31:58:0d:19:
bd:35:9a:29:a1:b9:24:22:63:4c:77:ca:16:60:a5:
67:5f:1c:66:89:77:ee:3b:06:29:67:66:e3:37:3d:
17:81:ea:a6:a3:3d:0e:a9:34:99:32:9d:66:1f:77:
33:f7:8e:5f:d2:0c:0c:3c:e0:f1:61:0e:65:d3:2b:
8a:ba:0a:13:27:62:75:c3:ac:28:1b:0b:2c:68:e9:
36:3f:6f:ee:52:54:17:60:ec:54:e0:e3:0b:f4:e2:
33:d8:94:fa:78:df:5a:0a:46:63:c6:20:fe:d1:3d:
ba:c9:3d:66:80:f4:4e:ad:50:6e:20:4f:46:42:28:
2f:9e:ed:ec:9e:d8:fa:92:23:27:19:87:ba:db:ab:
46:3f:45:ca:6c:0f:2c:e3:84:3d:42:77:69:33:ec:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AB:DC:86:72:AB:C2:A8:42:E7:D3:B8:10:3B:92:EA:3D:E9:1C:D4
X509v3 Authority Key Identifier:
keyid:4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:33:a4:b0:d1:13:30:56:04:1c:3d:43:ff:3b:98:1c:bc:9a:
bd:d2:72:14:36:81:dc:69:4d:78:da:18:46:9b:51:e4:3f:e3:
87:42:d6:68:71:b5:f5:ca:c1:92:04:d3:e7:b8:0b:4e:e1:52:
42:3e:6d:aa:66:0f:d4:6f:9e:0c:f0:d3:7d:e0:b2:2c:2e:a3:
63:bd:84:63:80:2f:f4:a3:70:07:14:a7:54:51:a4:ef:63:64:
20:07:fe:93:cf:4b:41:3e:43:45:5f:1c:4d:fe:72:a7:29:d7:
a6:bd:01:bf:7b:0a:e4:01:fa:da:3c:fe:dd:bd:39:36:eb:ea:
eb:4c:a6:ac:2f:c7:7d:80:4c:9e:7c:20:1d:f1:98:71:a2:9d:
fd:ce:53:ce:af:14:63:ba:e3:c8:f9:32:df:6a:55:f4:21:6d:
d6:dc:57:8d:d1:f2:6a:3c:f1:8f:5d:92:85:28:5b:4b:70:60:
d4:e1:70:bb:5e:63:68:99:7a:2f:51:42:fd:12:70:3e:8d:4e:
3c:26:35:12:df:6c:66:13:37:3d:c9:44:64:06:04:9f:ec:db:
11:b8:5c:ed:0e:91:77:64:fa:d3:a1:6c:a2:2a:e5:c5:26:e0:
c8:1b:f2:6a:46:f7:72:3b:64:18:13:37:5e:19:d4:78:b7:3a:
58:bf:de:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ3QTQxMTAvBgNVBAUTKDRDREY5OUU3MDdGOTAyMzM4RTE0RDUxMDI0OUE5NjI1
QkNBMEZGOUQwHhcNMjYxMDExMDYyMzI5WhcNMjYxMDE4MDYyMzI5WjAYMRYwFAYD
VQQDEw02YWNiMmI2Mi0zNDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqGF93h75gTawUBFuW5qcLrmTSpK/v0BKZI/HUf2YHmPU6d7ml7ddrslX0Oih
iLNb+obLcJ9NQL+djncQIOdCi97nfYRWfP/UmE6Rt/1E7JNmvpVEMLVBvOFaAir+
O8bXNHqhKTFYDRm9NZopobkkImNMd8oWYKVnXxxmiXfuOwYpZ2bjNz0Xgeqmoz0O
qTSZMp1mH3cz945f0gwMPODxYQ5l0yuKugoTJ2J1w6woGwssaOk2P2/uUlQXYOxU
4OML9OIz2JT6eN9aCkZjxiD+0T26yT1mgPROrVBuIE9GQigvnu3sntj6kiMnGYe6
26tGP0XKbA8s44Q9QndpM+zq/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNmr3IZy
q8KoQufTuBA7kuo96RzUMB8GA1UdIwQYMBaAFEzfmecH+QIzjhTVECSaliW8oP+d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBNC9GMjlFQjIwQTA3
RTAxMUYwQjYxODUxNjJDNEY5QUUwMi9UTi1aNXdmNUFqT09GTlVRSkpxV0pieWdf
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ROLVo1d2Y1QWpPT0ZOVVFKSnFXSmJ5Z181MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDdBNC9GMjlFQjIwQTA3RTAxMUYwQjYxODUxNjJDNEY5QUUwMi9UTi1aNXdmNUFq
T09GTlVRSkpxV0pieWdfNTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmzOksNETMFYEHD1D/zuYHLyavdJyFDaB3GlNeNoYRptR5D/jh0LWaHG19crB
kgTT57gLTuFSQj5tqmYP1G+eDPDTfeCyLC6jY72EY4Av9KNwBxSnVFGk72NkIAf+
k89LQT5DRV8cTf5ypynXpr0Bv3sK5AH62jz+3b05Nuvq60ymrC/HfYBMnnwgHfGY
caKd/c5Tzq8UY7rjyPky32pV9CFt1txXjdHyajzxj12ShShbS3Bg1OFwu15jaJl6
L1FC/RJwPo1OPCY1Et9sZhM3PclEZAYEn+zbEbhc7Q6Rd2T606FsoirlxSbgyBvy
akb3cjtkGBM3XhnUeLc6WL/ekg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:02:19 2026 by rpki-client