
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139FBB/C5198020E40411F0A6619C60616F56BC/tazSZrqWgpXIzcB1c3QT3XcbGf8.mft
File: tazSZrqWgpXIzcB1c3QT3XcbGf8.mft (raw, json)
Hash identifier: W7stIUiFsyP/66+bWurDKCqC0VRGwfCrcnn67PtTer8=
Subject key identifier: CE:D2:6B:5F:42:C5:07:98:C5:DD:F5:2E:1A:CA:8D:4F:81:CD:E3:A5
Authority key identifier: B5:AC:D2:66:BA:96:82:95:C8:CD:C0:75:73:74:13:DD:77:1B:19:FF
Certificate issuer: /CN=A9139FBB/serialNumber=B5ACD266BA968295C8CDC075737413DD771B19FF
Certificate serial: 9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tazSZrqWgpXIzcB1c3QT3XcbGf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139FBB/C5198020E40411F0A6619C60616F56BC/tazSZrqWgpXIzcB1c3QT3XcbGf8.mft
Manifest number: 98
Signing time: Thu 15 Oct 2026 08:27:48 +0000
Manifest this update: Thu 15 Oct 2026 08:27:47 +0000
Manifest next update: Thu 22 Oct 2026 08:27:47 +0000
Files and hashes: 1: tazSZrqWgpXIzcB1c3QT3XcbGf8.crl (hash: XebLCpKkT8Fb0L6601fG8uPkNpJeW7vWCR3Z/cdF/C8=)
2: 068272B8EB1411F088D77099366F56BC.roa (hash: BzioGtQex10DUW3Ewz2viC/+ENRqNsiDR9OZl6xdYg8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139FBB/C5198020E40411F0A6619C60616F56BC/tazSZrqWgpXIzcB1c3QT3XcbGf8.crl
rsync://rpki.apnic.net/member_repository/A9139FBB/C5198020E40411F0A6619C60616F56BC/tazSZrqWgpXIzcB1c3QT3XcbGf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tazSZrqWgpXIzcB1c3QT3XcbGf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 08:27:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139FBB, serialNumber=B5ACD266BA968295C8CDC075737413DD771B19FF
Validity
Not Before: Oct 15 08:27:47 2026 GMT
Not After : Oct 22 08:27:47 2026 GMT
Subject: CN=6ad08e84-1b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:28:62:79:6e:89:5b:80:73:0d:ee:37:24:
4e:4b:0f:d0:f7:67:9b:08:57:d4:c9:46:4c:31:e0:
68:55:db:a2:83:a2:d5:6e:fa:4c:25:fa:61:5e:aa:
31:4f:63:13:c1:f2:fe:11:a0:f9:f4:19:0e:3b:e4:
df:57:6d:38:64:86:9a:9f:78:5f:df:d8:cc:57:6d:
aa:43:3f:2b:90:57:21:43:9d:d1:dd:16:72:ff:96:
66:e6:51:6b:9a:eb:1e:d1:82:f1:64:dc:63:5a:c3:
e1:3e:a7:44:42:31:f0:2d:67:7f:cb:26:df:a8:bf:
a3:0e:21:9d:d4:16:c1:3c:99:0f:47:35:39:8f:1c:
2c:f5:04:a7:48:ca:61:8b:29:24:25:03:ae:55:86:
92:02:80:d7:e4:fc:0f:01:8f:e9:8e:de:f1:65:eb:
4c:f9:30:a1:29:3c:20:bb:94:41:69:48:52:19:49:
8a:ce:d8:ce:18:95:e1:47:47:01:f8:dd:19:4f:4f:
c2:fa:63:ff:5b:3f:3b:32:39:1e:6a:70:3a:3c:1d:
4e:24:dd:d1:ed:56:fd:dd:3c:71:87:6c:40:71:0f:
d6:08:21:42:34:a7:25:e7:17:24:79:4e:6c:ee:c4:
4e:82:e8:79:22:01:a1:66:5e:66:17:1a:b3:50:0f:
ec:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D2:6B:5F:42:C5:07:98:C5:DD:F5:2E:1A:CA:8D:4F:81:CD:E3:A5
X509v3 Authority Key Identifier:
keyid:B5:AC:D2:66:BA:96:82:95:C8:CD:C0:75:73:74:13:DD:77:1B:19:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139FBB/C5198020E40411F0A6619C60616F56BC/tazSZrqWgpXIzcB1c3QT3XcbGf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tazSZrqWgpXIzcB1c3QT3XcbGf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139FBB/C5198020E40411F0A6619C60616F56BC/tazSZrqWgpXIzcB1c3QT3XcbGf8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:c2:4f:be:6a:8f:92:2a:b3:e2:90:24:77:92:5e:75:b3:51:
f2:46:db:e4:97:9b:c6:28:3e:56:e1:f8:68:25:69:aa:7b:de:
1c:94:79:52:4a:b0:34:90:c0:7d:23:4b:28:fc:0e:66:87:0a:
06:1d:58:f9:46:00:65:20:89:40:dd:c4:9a:2b:53:ce:aa:d5:
da:6b:0e:65:8f:bf:4c:4c:e8:c1:ac:1c:7a:41:c7:6c:b8:f0:
2e:ba:a0:8f:be:99:8f:b0:0f:3b:e2:fb:98:c9:0e:08:83:3a:
bc:f2:52:a6:3c:af:e1:80:23:e4:62:2b:c2:40:0a:04:3f:ab:
3a:d1:cd:71:28:f6:59:7a:65:0a:89:c5:85:f4:77:70:b0:c5:
4d:75:19:d6:18:86:fc:6a:53:d6:c6:42:5a:0a:ad:a1:a7:33:
aa:b9:53:8f:ba:ba:37:47:93:3d:43:36:45:11:fd:68:bd:4e:
cd:34:8c:01:24:88:25:90:81:96:97:b3:4c:4f:f1:2c:cf:2d:
17:ce:90:e2:34:6f:fe:d5:7d:a1:9c:c3:2b:4b:37:ec:cd:fb:
20:46:7e:d9:26:a2:5c:23:4d:f7:12:88:34:4a:c4:47:81:61:
55:df:cb:a1:f8:2d:ce:c9:94:12:0b:ce:97:69:d5:98:62:c9:
e0:c8:ac:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:08:55 2026 by rpki-client