
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
File: TDZeNqZHnY6wtQ2Q820dexnvhNM.mft (raw, json)
Hash identifier: UQI4dkPO9Blz4OVTLrQ1FEfkSjd+niXGgvzY2QYMKgc=
Subject key identifier: F3:9F:4C:89:A3:22:B1:94:90:8B:16:DA:0F:21:54:49:C8:A7:C0:B6
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial: 0207
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
Manifest number: 01D2
Signing time: Mon 27 Jul 2026 05:58:31 +0000
Manifest this update: Mon 27 Jul 2026 05:58:30 +0000
Manifest next update: Mon 03 Aug 2026 05:58:30 +0000
Files and hashes: 1: TDZeNqZHnY6wtQ2Q820dexnvhNM.crl (hash: 4Qx7Xgsk7M0thV2YB0zXrkIWgyxKGD8EfEWE07dcU0Q=)
2: ECDF4CE2DB0911F0B89EBE0382D3641D.roa (hash: +cfq+DBj705kE9pcPQ8fHhTnhcZwL0furcECRqclk3Y=)
3: CAF0BBBCDB0811F0A3EA0CD881D3641D.roa (hash: K6rhOjUE5MsA7iPT9OzT+5zbheWWIvW6req+7O+50Rk=)
4: 4699D9EADB0B11F0B7B5790A82D3641D.roa (hash: T2Foy9ASPzGFF0amgq/n/ifzed5ff9yCRwIVozmPQbI=)
5: 26B79D64E9FE11EF8751AE17C4F9AE02.roa (hash: CSwNiNiHBOdBkX8QVfEy5RdNRxWDtIIzMJX3lDPz73I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Validity
Not Before: Jul 27 05:58:30 2026 GMT
Not After : Aug 3 05:58:30 2026 GMT
Subject: CN=6a66f387-91d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:ab:7d:d5:de:eb:10:bb:3d:87:b5:45:30:
25:8e:00:6d:ab:25:16:e5:81:a6:76:16:f9:ca:13:
a9:12:e6:02:fb:23:9b:5c:6c:4a:41:d1:29:c3:dc:
b4:b0:40:69:59:87:cc:c7:ed:f7:ae:d7:cc:56:99:
78:85:79:d1:3c:65:9c:68:62:df:bf:3c:aa:c4:96:
24:3d:29:27:19:1b:34:77:92:dc:63:43:dc:16:2a:
62:d1:15:62:d2:db:eb:1f:4f:b7:5c:22:60:18:a9:
8c:2e:ba:4e:41:cd:3a:bd:f2:36:52:d4:9e:ca:2f:
03:44:47:b8:f8:58:85:67:34:69:ba:0e:45:27:9c:
af:e0:2e:21:91:2c:7a:a8:60:16:65:15:20:30:8c:
e4:19:d0:1f:de:a2:b2:03:34:22:97:51:f0:a7:df:
13:98:db:72:74:9b:9d:a6:5c:13:4e:31:38:58:5a:
5a:83:9b:cf:a4:74:a0:ce:c0:0d:6f:6e:3c:84:06:
42:e4:29:41:97:a4:c3:0d:84:f3:c3:7b:f7:6d:fb:
7c:f1:10:cf:88:f9:04:30:0f:c8:13:71:2c:6b:2f:
0a:5e:4b:8b:0a:ed:00:1d:c3:df:f0:49:bd:56:e3:
08:1d:70:31:21:a1:d4:bf:0f:62:2e:63:0e:ec:8a:
1e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9F:4C:89:A3:22:B1:94:90:8B:16:DA:0F:21:54:49:C8:A7:C0:B6
X509v3 Authority Key Identifier:
keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:cf:d0:98:6c:33:b6:5e:dc:fb:59:5d:79:00:aa:6a:14:46:
6b:af:e9:29:a9:c7:05:95:5d:72:77:f0:2b:97:dd:40:a9:8e:
62:c7:02:cc:90:9f:a1:78:ae:11:a2:43:b5:c5:7f:ff:fe:6a:
63:78:1a:e5:8b:ca:7a:05:f1:de:9d:20:10:01:3c:8a:9b:36:
9b:76:84:67:23:8c:5c:44:e2:95:2c:46:3b:96:a2:4e:7c:ef:
b2:09:68:0d:93:33:97:08:1d:b1:2d:bd:2e:23:4b:36:ce:99:
97:52:56:b8:25:f2:28:cb:7e:d6:00:25:2e:64:49:cb:99:27:
bb:11:59:b8:b0:c6:46:6c:a7:e9:17:82:6e:09:37:ae:8c:78:
d0:f8:a3:85:21:2a:72:be:5f:49:cf:de:98:be:94:bf:24:f6:
c6:67:d2:b6:1e:7c:37:ba:2c:b7:06:6b:56:c9:19:76:57:e1:
b3:71:51:e1:a3:a4:5c:04:96:6b:01:93:15:de:0e:b8:3d:79:
3d:be:83:fd:fc:ee:84:07:80:df:8d:3c:dd:7d:82:80:55:de:
09:36:14:20:c9:21:f2:32:87:9b:2e:fd:0e:65:85:25:e0:0f:
5d:a1:7a:3c:fa:3a:d5:03:e2:15:3c:7c:14:14:8f:a4:71:2d:
92:ee:fe:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:27:11 2026 by rpki-client