
$ rpki-client -vvf rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
File: tnwkXksr7q0jwfBd0w_5B32HuOY.mft (raw, json)
Hash identifier: 3XTwvzaLHriY36Kx9JoHpLYQ7CLA2F4lGNoLSYGI7Lc=
Subject key identifier: 97:12:04:28:6A:90:B5:4F:5D:8B:6F:FC:45:4C:4E:03:E6:C1:B3:5E
Authority key identifier: B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6
Certificate issuer: /CN=A91116C7/serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6
Certificate serial: 1379
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
Manifest number: 136F
Signing time: Tue 28 Jul 2026 17:04:03 +0000
Manifest this update: Tue 28 Jul 2026 17:04:03 +0000
Manifest next update: Tue 04 Aug 2026 17:04:03 +0000
Files and hashes: 1: tnwkXksr7q0jwfBd0w_5B32HuOY.crl (hash: wUqOAFRx6wmQTZZMJ+jpG4hrmyw02nTlwS++Kb6HV+k=)
2: 0CAF01A6C6C811E8AECD6165C4F9AE02.roa (hash: p96Pk01HnxFF2EIL/xWnzPT9gE4H/ULfnQINm3EmY2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl
rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4985 (0x1379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91116C7, serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6
Validity
Not Before: Jul 28 17:04:03 2026 GMT
Not After : Aug 4 17:04:03 2026 GMT
Subject: CN=6a68e103-b071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:48:04:ef:bb:dc:b1:4d:a3:d1:0f:3e:53:56:
21:1e:90:de:1d:14:7e:1b:38:82:db:cb:35:75:b8:
7b:89:29:36:ff:c7:98:6a:0b:59:5d:ad:16:c9:90:
73:3a:73:b9:4a:c3:9b:ae:07:17:a3:ce:22:12:20:
4d:61:1f:dc:b1:d7:38:05:e8:9b:da:c3:ee:00:11:
f1:ba:46:a1:b6:47:a7:13:a2:d7:d8:ec:34:f8:43:
42:fa:ab:af:48:fa:07:d1:a0:ea:c9:d7:02:d9:0e:
2d:8f:12:fa:42:ac:92:b0:a4:68:b0:0c:77:25:93:
5b:d1:f8:bd:c6:50:52:df:19:23:a8:1f:91:38:24:
96:0d:c4:10:c5:b1:e9:18:6d:01:03:ed:c3:33:76:
ab:f9:cd:f6:b2:5d:b8:ae:2a:b4:e5:c4:60:6d:ac:
e4:1c:ed:08:f9:3b:31:06:91:d2:c3:98:34:7f:fd:
05:89:09:23:b3:d1:1e:7c:18:32:1e:f7:d2:6a:ee:
e4:0e:0b:5b:51:98:46:43:ed:fd:ec:7c:a4:5e:9a:
ab:b0:e4:e1:cd:48:a9:d7:8c:72:cd:d3:00:9c:ac:
4b:de:73:57:96:90:7e:6e:d0:24:9a:11:40:53:d0:
74:a8:e7:e4:0e:f4:9a:80:85:61:e4:70:5e:5b:8c:
ee:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:12:04:28:6A:90:B5:4F:5D:8B:6F:FC:45:4C:4E:03:E6:C1:B3:5E
X509v3 Authority Key Identifier:
keyid:B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7e:16:05:5a:a1:a4:1b:94:9a:d5:4f:32:ec:60:a0:dd:a2:
70:d6:a8:1c:e3:cd:8c:f9:41:09:f5:4e:ac:a6:65:50:a6:db:
42:2b:24:b9:e6:00:fb:a4:60:c9:e6:84:7d:fa:43:0e:d9:d3:
d7:37:99:34:a1:2a:2f:b9:bf:7c:da:6e:12:6d:de:90:6d:84:
c1:e7:1b:54:50:8a:32:44:f2:cf:75:9f:6a:b6:71:aa:8c:d2:
dc:36:73:94:e8:ef:62:68:37:4e:b0:0c:e1:fd:87:57:9d:8c:
b4:f2:63:f6:1a:e2:9a:5d:7d:d3:65:ca:1e:3a:46:71:ec:e4:
21:d5:d8:f4:38:d9:28:3e:71:74:45:0e:dd:b2:bf:66:44:30:
7d:c2:fd:59:b2:40:38:7b:c0:22:3a:80:90:fe:c6:a8:0a:8e:
fe:05:17:f8:e5:70:13:23:08:1a:a5:4e:2c:81:7a:62:b2:21:
0c:6a:2e:90:4e:d2:fc:4e:fd:00:20:27:a8:35:93:e1:82:79:
8d:5d:be:fe:c1:12:0d:32:6a:1e:a7:20:ad:2c:82:37:00:a5:
b3:3d:da:e8:d1:47:f2:a8:a8:15:15:ab:0d:02:43:be:d4:ba:
52:fb:eb:ac:11:03:cc:e4:46:e5:8b:7b:cb:b8:3f:8a:2f:c8:
ec:7b:72:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:41:01 2026 by rpki-client