
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft
File: tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft (raw, json)
Hash identifier: R7RrZ1O12QfMu4p3lD8ibuatBRrpDAJjgU2djy3V9/Y=
Subject key identifier: 61:04:68:6F:69:20:42:68:D6:42:4B:CB:3B:55:55:2E:3E:4F:74:E6
Authority key identifier: B6:74:70:83:A4:B5:36:69:36:0F:88:B0:99:D4:97:4F:8F:28:95:0E
Certificate issuer: /CN=A91CF477/serialNumber=B6747083A4B53669360F88B099D4974F8F28950E
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnRwg6S1Nmk2D4iwmdSXT48olQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft
Manifest number: 1D
Signing time: Wed 19 Aug 2026 09:39:52 +0000
Manifest this update: Wed 19 Aug 2026 09:39:51 +0000
Manifest next update: Wed 26 Aug 2026 09:39:51 +0000
Files and hashes: 1: tnRwg6S1Nmk2D4iwmdSXT48olQ4.crl (hash: qJUrpyGvgXr22rifX/NcCxOjLV0qb2GImbu/TvGt3DQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.crl
rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnRwg6S1Nmk2D4iwmdSXT48olQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF477, serialNumber=B6747083A4B53669360F88B099D4974F8F28950E
Validity
Not Before: Aug 19 09:39:51 2026 GMT
Not After : Aug 26 09:39:51 2026 GMT
Subject: CN=6a8579e8-3755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:c9:ee:d7:f1:e1:ac:2d:f0:48:47:40:9b:
3f:54:8d:3e:2b:40:b4:df:e0:a1:e3:36:f1:cb:60:
2e:b7:3a:e5:77:6e:16:3c:b1:b9:4e:79:04:00:6b:
13:e1:58:46:a0:15:c5:8b:af:c8:84:1c:73:38:41:
21:9e:b7:9a:dc:01:c9:91:88:0d:52:b9:4d:ee:20:
e3:e7:47:50:3f:39:4a:d4:bd:dc:ee:9a:e9:57:9e:
aa:cc:a0:7c:af:c8:43:af:d4:de:ec:69:bf:54:53:
5d:d5:36:7e:06:e3:78:9b:62:75:9b:ce:4f:2d:fe:
2f:bd:a0:91:bf:26:f6:89:ed:5b:00:fa:86:d8:da:
97:0e:84:7e:f6:08:68:da:71:e4:7e:3b:77:cd:78:
1b:46:6a:d4:fe:4d:86:64:d8:e0:3f:bd:4d:c9:84:
db:3a:f0:90:c5:29:0c:aa:c0:2c:9a:5a:08:45:88:
74:6c:74:98:52:52:81:15:9f:de:4b:c4:cc:af:23:
e6:e6:67:31:8d:e4:a6:92:e3:20:06:71:31:4f:61:
49:63:fd:d8:f9:3d:a3:76:3c:7b:ec:d8:27:8e:c1:
f4:d9:98:40:ae:7e:0a:f1:f1:d4:c3:29:44:f8:44:
02:ce:00:d3:b1:8a:b8:19:d2:24:89:9c:b7:89:f0:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:04:68:6F:69:20:42:68:D6:42:4B:CB:3B:55:55:2E:3E:4F:74:E6
X509v3 Authority Key Identifier:
keyid:B6:74:70:83:A4:B5:36:69:36:0F:88:B0:99:D4:97:4F:8F:28:95:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnRwg6S1Nmk2D4iwmdSXT48olQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:18:c3:27:ea:40:4d:07:ec:48:2f:4f:65:b0:ea:dd:86:9a:
cb:8c:7d:8b:95:0a:6d:3c:10:c9:c9:b9:26:70:7c:63:a2:c1:
37:5e:10:32:c6:1e:1c:b2:f1:ed:8c:4f:5f:31:e1:ae:f4:88:
bb:0a:51:ed:2b:90:d3:b2:ed:07:b7:1c:c9:e7:26:f2:27:f4:
cb:24:e2:08:ac:77:a5:92:d9:89:89:4e:54:c2:23:8c:b7:67:
07:79:19:25:02:29:ce:71:76:ba:d2:29:fe:a9:07:7d:6e:ea:
8a:04:34:47:27:b0:67:21:36:b0:69:4e:8b:d7:3b:bd:10:47:
c6:2a:99:09:d1:89:46:c4:2a:28:52:b8:f2:fa:08:3f:ec:56:
fb:4f:4b:2d:11:44:d2:c2:19:e1:87:ec:d1:a0:70:00:5f:42:
66:d0:d9:c3:f2:37:b1:e3:1d:86:a5:50:48:3f:72:dc:ca:f6:
c8:b2:3a:b9:09:59:87:02:3c:93:a5:62:92:05:aa:c6:d5:65:
46:bc:0d:51:ab:4b:57:af:d4:a7:50:bb:a2:a5:ef:7b:39:cc:
b5:fe:3d:16:0c:fd:31:53:c9:7f:fe:49:4f:f8:5a:46:59:ad:
49:bc:6a:66:b8:80:93:f8:4a:79:92:61:a5:6b:62:14:ea:07:
c3:36:ac:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:50 2026 by rpki-client