
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
File: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json)
Hash identifier: FayVFgHmtp5XDbg/hRxwJuMRExY0MPzOy1kE7htSp7k=
Subject key identifier: 40:76:97:B3:F6:3F:00:92:8B:34:C0:BC:05:0D:29:03:BA:9B:3E:06
Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Certificate serial: 08D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
Manifest number: 08CB
Signing time: Thu 24 Sep 2026 20:21:47 +0000
Manifest this update: Thu 24 Sep 2026 20:21:47 +0000
Manifest next update: Thu 01 Oct 2026 20:21:47 +0000
Files and hashes: 1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: t275j1rThqwDt1akSUFPRJVi5+fvSDzAq3MHXapeXeQ=)
2: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: Oq5n7YTpwRwxE6QPyxWPtqKwDnI0oieXsSLQCrD8sXk=)
3: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: FHMJGrrxUvRBeY9Ihx5SI/go/dc2sMa74hHT1NwYti8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:21:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2261 (0x8d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Validity
Not Before: Sep 24 20:21:47 2026 GMT
Not After : Oct 1 20:21:47 2026 GMT
Subject: CN=6ab5865b-95df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:2b:f5:02:ce:28:4e:6a:0d:fc:97:9b:4e:
a5:65:64:c1:10:71:c0:65:f9:f3:1a:06:0d:ef:2b:
30:b9:06:df:5b:14:b1:82:b8:bc:55:e4:a3:e6:6a:
58:b8:b1:16:9f:e3:e2:36:da:53:94:d7:62:52:5f:
e2:75:de:70:92:06:97:4e:18:7e:d0:5e:4a:2e:06:
7d:f8:bd:9e:3b:be:3a:2d:b9:94:6b:98:03:b4:98:
6f:ea:2b:15:ac:08:fc:13:15:f4:1e:99:7f:fe:54:
3d:ca:27:5b:37:f0:aa:98:3a:c5:7a:2d:5e:ce:6d:
cf:0c:fe:83:bb:bb:f4:6e:28:5d:18:57:41:86:90:
3f:40:6c:43:ca:3e:bb:81:54:a6:9a:c3:76:3f:f9:
eb:2b:58:ac:8b:c0:5d:49:bd:40:33:c3:7d:04:0a:
25:9d:d2:f3:84:c5:e1:e6:8b:a7:68:40:13:57:90:
ce:d5:a1:a7:21:4b:e4:8d:8c:d0:b5:54:67:f4:f0:
6c:fa:4e:f4:f3:ab:c7:ab:f7:c7:4a:ec:a6:02:dd:
00:3c:0f:2a:53:4c:71:15:ae:55:c4:94:9e:5e:92:
7b:07:2e:59:ff:e4:56:56:21:2f:8e:35:58:99:3c:
85:cf:59:c0:19:6e:de:d5:6b:37:b4:a1:8b:2a:a7:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:76:97:B3:F6:3F:00:92:8B:34:C0:BC:05:0D:29:03:BA:9B:3E:06
X509v3 Authority Key Identifier:
keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:64:31:dc:20:dc:a6:ec:42:73:15:55:d8:43:0a:bc:31:b2:
fc:67:9a:30:b9:35:8f:6f:01:f6:52:92:ca:1c:17:94:a8:68:
1e:6f:56:65:bf:ff:49:86:58:ab:49:7b:ba:46:84:6d:ba:ca:
77:f3:b5:a9:b5:97:54:04:45:b0:d7:cc:aa:f4:fc:e4:f3:b7:
ec:e1:3c:96:42:ef:00:f8:61:2b:34:ec:bf:70:43:bb:c3:1e:
18:c4:9b:23:ec:bb:cb:65:11:cc:a0:77:53:0b:be:7f:e4:a7:
e4:e2:17:73:df:66:66:be:0d:57:4d:ff:9e:cb:a2:a2:1b:2d:
95:0c:05:cd:86:95:f7:fc:e8:1c:20:df:1a:c7:0e:17:b6:be:
21:c6:a4:f6:b0:70:c4:3d:20:51:c6:a1:74:a2:c4:c1:f1:4c:
04:22:1d:54:e3:9c:f9:b0:ea:8f:c2:b1:a2:00:ff:1d:32:36:
46:70:c9:29:9b:a6:ef:08:72:8f:16:fe:89:41:ef:fc:c9:e2:
5a:b4:72:3f:43:0d:93:f3:7d:7f:c3:3b:4e:92:a8:90:d9:a7:
09:dc:ca:e9:a3:d8:e0:b8:e8:43:6c:10:9a:a1:f5:10:4f:05:
0c:b2:55:b1:ce:d7:28:f4:63:53:0d:8a:52:01:80:48:86:e3:
8e:10:33:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:03:31 2026 by rpki-client