
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft
File: tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft (raw, json)
Hash identifier: 8XglL45M8Yanqjpzx75ZY8W4faqLkMLKzL84f3zB0hM=
Subject key identifier: 7A:13:A8:8A:D7:65:CB:0C:AD:2A:44:F3:6B:2F:AC:64:C1:85:E8:99
Authority key identifier: B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D
Certificate issuer: /CN=A9197CBD/serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D
Certificate serial: 01CE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft
Manifest number: 01C6
Signing time: Mon 01 Jun 2026 04:34:41 +0000
Manifest this update: Mon 01 Jun 2026 04:34:40 +0000
Manifest next update: Mon 08 Jun 2026 04:34:40 +0000
Files and hashes: 1: tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl (hash: +DCRy5cniBklFJVvD0xyvtD5Dlibe5IW5X/iD6n10JU=)
2: DDFD7F92A36311F0BCF40B3CC4F9AE02.roa (hash: +itwix5tg1TL0xARCgIhfb+QDUeml9Ar+ujsgMhe8AM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl
rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 04:34:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197CBD, serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D
Validity
Not Before: Jun 1 04:34:40 2026 GMT
Not After : Jun 8 04:34:40 2026 GMT
Subject: CN=6a1d0be0-cd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3e:9a:c0:6d:f7:dc:14:67:4a:e8:a2:d9:c8:
b2:96:4e:f1:56:c8:92:c3:8d:a2:5f:c5:b2:8a:d3:
d7:d3:38:b7:1e:1a:73:01:23:65:26:87:77:b2:92:
0e:a9:7a:00:70:f3:f4:d0:3d:b4:a6:86:f2:79:82:
63:48:8e:c8:83:61:cb:78:d2:df:31:e7:91:55:48:
eb:11:c2:e3:63:31:3a:b9:b4:50:bd:6f:b9:14:e8:
ff:05:7c:07:ca:32:75:76:ee:db:cf:54:ea:7f:e4:
03:2e:8b:7d:ef:3b:c5:eb:60:af:f6:f0:f8:0e:8f:
b0:10:45:a2:68:dc:6a:03:3b:ed:9f:88:ed:d9:65:
8a:a9:97:57:69:36:8f:ec:d3:e9:4b:b3:1e:be:99:
6f:da:fe:35:18:dc:ee:76:9f:74:18:65:30:22:0c:
f9:d0:42:36:44:2b:1e:12:93:57:7e:4d:d4:2a:5f:
ef:e2:da:ba:4f:9d:3c:10:cb:90:dc:21:c9:d0:72:
8f:9c:2c:ca:a5:c7:4b:73:1e:c9:73:a4:26:d7:12:
43:a6:04:7a:bb:45:30:57:4b:12:3d:08:31:3a:99:
d3:6a:58:f4:1c:b1:82:76:ac:7b:18:4b:62:0d:ef:
c6:24:e6:f5:12:4b:64:38:e2:c7:35:fa:77:a5:2d:
7c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:13:A8:8A:D7:65:CB:0C:AD:2A:44:F3:6B:2F:AC:64:C1:85:E8:99
X509v3 Authority Key Identifier:
keyid:B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:3d:46:31:bb:9c:5c:43:c8:4c:58:e8:a0:4d:0d:5f:8f:fa:
0f:fe:bc:20:25:7b:d7:29:b5:3f:1c:2a:e2:56:ef:29:ce:27:
d0:25:06:34:c1:68:d5:88:79:44:ce:23:24:e1:72:fa:75:21:
fd:bb:42:0a:7f:a1:76:5c:e2:a9:43:53:33:35:8c:2a:88:36:
73:3f:9e:10:fe:c0:1f:f9:f4:a4:76:79:e4:9e:30:b1:3e:5f:
a4:6f:b5:b6:bf:a0:d8:30:4f:ab:dc:d6:f3:07:1f:2b:e5:af:
4e:2c:3e:e1:24:11:99:a7:16:65:57:c8:16:5b:48:14:6e:ae:
80:48:41:16:d5:58:72:47:34:c9:3e:7e:ae:b1:25:2f:8d:9b:
fa:e8:39:96:51:8a:9b:b3:a0:10:61:1b:3a:05:f4:d4:db:57:
dc:e3:2d:a6:9f:d1:bf:72:d6:bd:57:80:e2:71:c3:ed:39:3a:
a3:33:7c:95:e6:02:0b:b1:09:24:cf:e5:f5:94:64:78:db:87:
6e:02:f5:9b:62:3b:37:6a:1f:bb:15:28:aa:11:a8:e0:3e:dc:
6d:3e:3a:42:33:56:06:e1:21:c8:60:61:6b:ee:88:a4:a7:e2:
4d:eb:91:b9:4a:f2:18:bc:47:c1:2c:0d:10:8f:7b:56:df:6f:
71:23:b0:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTdDQkQxMTAvBgNVBAUTKEI0ODY1RTNCRTlDNTY5RDJCOTNGMkMzNTFDQUIyNEQx
NTA2QUFDMEQwHhcNMjYwNjAxMDQzNDQwWhcNMjYwNjA4MDQzNDQwWjAYMRYwFAYD
VQQDEw02YTFkMGJlMC1jZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmT6awG333BRnSuii2ciylk7xVsiSw42iX8WyitPX0zi3HhpzASNlJod3spIO
qXoAcPP00D20pobyeYJjSI7Ig2HLeNLfMeeRVUjrEcLjYzE6ubRQvW+5FOj/BXwH
yjJ1du7bz1Tqf+QDLot97zvF62Cv9vD4Do+wEEWiaNxqAzvtn4jt2WWKqZdXaTaP
7NPpS7Mevplv2v41GNzudp90GGUwIgz50EI2RCseEpNXfk3UKl/v4tq6T508EMuQ
3CHJ0HKPnCzKpcdLcx7Jc6Qm1xJDpgR6u0UwV0sSPQgxOpnTalj0HLGCdqx7GEti
De/GJOb1EktkOOLHNfp3pS18hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHoTqIrX
ZcsMrSpE82svrGTBheiZMB8GA1UdIwQYMBaAFLSGXjvpxWnSuT8sNRyrJNFQaqwN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NCRC8zNTcwREYyRUIx
MTQxMUVFOTVFNzQzNjVDNEY5QUUwMi90SVplTy1uRmFkSzVQeXcxSEtzazBWQnFy
QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3RJWmVPLW5GYWRLNVB5dzFIS3NrMFZCcXJBMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
N0NCRC8zNTcwREYyRUIxMTQxMUVFOTVFNzQzNjVDNEY5QUUwMi90SVplTy1uRmFk
SzVQeXcxSEtzazBWQnFyQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFz1GMbucXEPITFjooE0NX4/6D/68ICV71ym1Pxwq4lbvKc4n0CUGNMFo1Yh5
RM4jJOFy+nUh/btCCn+hdlziqUNTMzWMKog2cz+eEP7AH/n0pHZ55J4wsT5fpG+1
tr+g2DBPq9zW8wcfK+WvTiw+4SQRmacWZVfIFltIFG6ugEhBFtVYckc0yT5+rrEl
L42b+ug5llGKm7OgEGEbOgX01NtX3OMtpp/Rv3LWvVeA4nHD7Tk6ozN8leYCC7EJ
JM/l9ZRkeNuHbgL1m2I7N2ofuxUoqhGo4D7cbT46QjNWBuEhyGBha+6IpKfiTeuR
uUryGLxHwSwNEI97Vt9vcSOwcA==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:26 2026 by rpki-client