
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
File: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft (raw, json)
Hash identifier: S6BD2ZSHdwuTIvKVPB2/iHXzP1jeCv3EWI66aZWNwzw=
Subject key identifier: 9B:07:A8:13:C1:1D:27:B3:10:14:B8:66:B7:DC:B5:12:97:14:A3:7C
Authority key identifier: B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6
Certificate issuer: /CN=A911A4F7/serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6
Certificate serial: 0159
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
Manifest number: 0151
Signing time: Mon 27 Jul 2026 07:02:46 +0000
Manifest this update: Mon 27 Jul 2026 07:02:46 +0000
Manifest next update: Mon 03 Aug 2026 07:02:46 +0000
Files and hashes: 1: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl (hash: UPrQSQjFxhcB2KrFFy0dQEvIkJOFDX0NTdrUbx8bMwE=)
2: F17DA0FE85FC11EFBD7A485FC4F9AE02.roa (hash: NPEHXK4kvB3m3Mt2iQopHp4B8bUEbfWS8NtHZ6Qe9rU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl
rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A4F7, serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6
Validity
Not Before: Jul 27 07:02:46 2026 GMT
Not After : Aug 3 07:02:46 2026 GMT
Subject: CN=6a670296-f2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:7f:a7:fb:29:fe:c9:e8:ec:83:52:a5:93:
dd:06:00:b9:02:17:4a:a3:8a:d1:f7:f2:45:00:56:
62:b4:04:8f:2e:40:6c:43:c2:e7:c7:9c:a9:89:9b:
fd:cd:c5:b2:7a:21:8f:25:22:22:5f:17:4e:f0:d3:
27:46:26:8f:f8:70:ed:23:e0:13:6b:b8:79:7c:67:
03:25:78:3b:c8:47:f1:0d:6a:64:1c:4c:49:f4:26:
1d:bd:2e:dd:74:c0:a2:e3:b3:d6:37:a9:de:60:59:
07:77:f9:08:12:5c:1d:d6:be:7a:9d:4b:99:3f:a7:
72:64:d8:6e:67:93:b3:1e:e0:79:f8:d8:15:8b:49:
44:08:c3:7f:0c:bb:cb:6f:99:e2:93:83:9f:2f:b1:
78:0a:14:4a:20:43:78:0e:68:a4:75:2a:89:d8:b0:
47:2c:e1:db:6b:2d:e9:58:5c:7b:d8:81:18:47:81:
26:9b:5e:c6:c7:b4:68:12:e3:cb:c6:e3:5e:36:fe:
40:78:c1:c7:d5:25:b0:6b:c0:d4:65:ad:91:6d:62:
c2:2e:64:29:51:68:0e:69:6e:d7:72:15:ee:28:d7:
dc:ab:8a:70:02:22:2d:bb:45:1b:56:eb:81:c6:f5:
12:76:58:f9:a4:ad:7e:42:a5:6b:9f:1c:66:56:03:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:07:A8:13:C1:1D:27:B3:10:14:B8:66:B7:DC:B5:12:97:14:A3:7C
X509v3 Authority Key Identifier:
keyid:B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8d:f9:82:4d:3e:9c:f8:e6:5a:e0:6f:1c:62:2f:c2:8f:60:
9c:bf:d8:1d:00:62:d6:5b:63:58:d4:e3:3a:25:5b:16:f7:48:
42:6e:9c:1e:3e:f7:f5:79:a3:8d:31:a4:e9:97:ce:28:2f:35:
24:c0:9a:10:d0:dd:78:e7:1f:fd:cc:ed:d6:f1:29:34:5d:53:
81:bf:8b:cb:73:38:96:64:e2:17:64:d7:ff:26:79:25:b2:65:
07:24:d4:fb:c8:a4:15:fa:4b:4d:cc:9a:0b:e1:0e:55:56:57:
62:38:06:0c:4f:8a:56:6c:13:a2:d9:ea:70:db:45:55:1d:cf:
b1:ea:08:31:e0:0d:0a:7f:00:43:4d:19:07:dc:e9:22:61:14:
99:0e:27:80:61:cf:47:58:cb:3c:e6:37:68:a9:44:87:af:e0:
a2:a3:ec:ed:5e:98:c2:7f:88:b7:49:51:8a:0d:34:23:d1:73:
55:88:52:28:ca:7e:11:1d:e1:46:45:20:2f:04:ea:42:04:25:
7f:71:89:16:d8:b7:b4:fe:2b:f5:e6:35:03:1d:93:25:d6:82:
1c:58:ae:6f:20:8c:2e:02:df:c2:f2:17:80:72:99:64:23:5b:
a1:9a:eb:f0:3a:c6:3b:aa:11:30:14:ef:86:c4:7a:c7:ea:b0:
bc:18:65:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:59 2026 by rpki-client