
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
File: tNIXk5onUZOOB2WaeUiFqciEGRk.mft (raw, json)
Hash identifier: Dqb1WzR2B2wzmyK9oSArf/RAu9n4TJ4Qi6wM4am71s4=
Subject key identifier: CA:E1:26:85:29:66:7E:1E:0A:1C:3F:FB:60:35:19:CE:CE:8F:0C:CB
Authority key identifier: B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19
Certificate issuer: /CN=A9145B13/serialNumber=B4D217939A2751938E07659A794885A9C8841919
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
Manifest number: 015E
Signing time: Tue 13 Oct 2026 05:43:41 +0000
Manifest this update: Tue 13 Oct 2026 05:43:40 +0000
Manifest next update: Tue 20 Oct 2026 05:43:40 +0000
Files and hashes: 1: tNIXk5onUZOOB2WaeUiFqciEGRk.crl (hash: Is/PfjQulSVDiYNYjxdU0OJjKciKb2O1bW1IoU6t69A=)
2: 793486E0C11A11EF99C19012C4F9AE02.roa (hash: v6BylN14fOxA4ftijT2xm8ugkwjC+LIOM8D065x7bmM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl
rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 05:43:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145B13, serialNumber=B4D217939A2751938E07659A794885A9C8841919
Validity
Not Before: Oct 13 05:43:40 2026 GMT
Not After : Oct 20 05:43:40 2026 GMT
Subject: CN=6acdc50d-1802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ac:74:a4:5e:e2:a7:e7:2a:84:c5:74:92:a7:
8a:c4:7a:ce:be:52:cd:77:26:0e:e5:67:09:d0:84:
9e:e0:db:d3:cc:ff:09:49:2a:de:a9:6e:4b:dd:20:
2c:9d:e1:0d:e3:80:ab:8c:2f:fb:68:52:76:20:11:
61:e4:ee:4b:64:aa:df:df:df:1b:c2:1e:9b:6e:ca:
66:78:e5:e3:fd:7f:77:39:f3:86:ec:b8:aa:9e:48:
fe:b3:15:3a:20:c4:11:bd:ba:bd:41:1e:74:d1:f4:
f5:48:6b:a8:f0:fd:cc:4f:6d:8a:76:98:e8:d9:48:
bf:7f:78:60:51:fc:6c:11:0a:2c:bf:61:e3:fb:1e:
dc:4b:b5:a9:99:87:ad:ab:78:ce:bb:34:87:31:b3:
62:8a:42:fd:68:eb:2e:0f:98:d0:e8:42:18:c6:8b:
8c:ff:76:d0:52:4f:d7:0d:06:52:42:70:fe:42:63:
05:e7:45:25:f6:00:31:50:13:1f:72:f1:29:db:cc:
23:de:40:0f:1f:37:87:0d:31:ba:30:c1:9b:b1:6f:
ba:3e:9a:b6:cb:bf:d8:86:24:de:1c:03:1f:8c:0c:
8c:b1:55:00:ad:a4:f2:9c:96:64:c2:c8:03:d7:11:
32:07:b8:ec:73:b5:ba:76:99:6e:ab:91:4a:d8:ce:
e6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E1:26:85:29:66:7E:1E:0A:1C:3F:FB:60:35:19:CE:CE:8F:0C:CB
X509v3 Authority Key Identifier:
keyid:B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:4a:8a:5d:8b:18:8c:43:a2:54:94:a0:81:3b:1f:cc:f9:18:
11:43:1e:05:e0:6d:a6:20:a6:9a:d3:e4:70:77:a9:d5:f4:67:
9f:ef:62:44:85:5c:4a:f2:e8:f5:f3:93:36:64:46:f5:55:c1:
8b:41:d1:0d:63:8e:49:8a:71:ac:0c:5e:fa:a5:c5:1f:a8:97:
aa:bd:eb:26:7a:74:4a:57:96:20:f8:b2:fa:19:e9:1a:c7:d4:
2a:34:93:08:ad:61:41:9c:93:10:47:75:80:46:be:80:b7:1a:
dd:9d:7e:ad:67:85:7f:58:e4:cb:07:30:6b:40:09:36:62:05:
05:93:b7:37:c3:40:0c:10:04:6a:0f:6c:f1:b9:c1:af:30:6b:
e9:62:6a:cc:3a:16:59:c9:83:18:de:5a:3d:77:28:da:ae:cb:
9e:ab:ef:4a:91:ee:2d:9c:c7:20:32:63:d5:8d:1a:d4:5f:df:
b1:fd:1b:3d:b6:eb:8e:39:75:82:82:50:b0:ab:f1:8f:90:01:
09:c4:cb:46:cc:1f:e9:31:5a:6d:3c:14:99:e2:01:11:5a:e1:
54:66:b4:0c:d2:ba:75:e7:56:d8:e7:31:75:b2:96:77:3a:db:
e8:39:e4:83:d6:3f:a1:33:4d:ea:10:07:4a:2d:3b:2e:90:d5:
3a:7e:f1:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVCMTMxMTAvBgNVBAUTKEI0RDIxNzkzOUEyNzUxOTM4RTA3NjU5QTc5NDg4NUE5
Qzg4NDE5MTkwHhcNMjYxMDEzMDU0MzQwWhcNMjYxMDIwMDU0MzQwWjAYMRYwFAYD
VQQDEw02YWNkYzUwZC0xODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx6x0pF7ip+cqhMV0kqeKxHrOvlLNdyYO5WcJ0ISe4NvTzP8JSSreqW5L3SAs
neEN44CrjC/7aFJ2IBFh5O5LZKrf398bwh6bbspmeOXj/X93OfOG7Liqnkj+sxU6
IMQRvbq9QR500fT1SGuo8P3MT22Kdpjo2Ui/f3hgUfxsEQosv2Hj+x7cS7WpmYet
q3jOuzSHMbNiikL9aOsuD5jQ6EIYxouM/3bQUk/XDQZSQnD+QmMF50Ul9gAxUBMf
cvEp28wj3kAPHzeHDTG6MMGbsW+6Ppq2y7/YhiTeHAMfjAyMsVUAraTynJZkwsgD
1xEyB7jsc7W6dpluq5FK2M7mTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMrhJoUp
Zn4eChw/+2A1Gc7OjwzLMB8GA1UdIwQYMBaAFLTSF5OaJ1GTjgdlmnlIhanIhBkZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUIxMy81MEJEMjMwRUIx
MjgxMUVGQjc1MEE1MkJDNEY5QUUwMi90TklYazVvblVaT09CMldhZVVpRnFjaUVH
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ROSVhrNW9uVVpPT0IyV2FlVWlGcWNpRUdSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUIxMy81MEJEMjMwRUIxMjgxMUVGQjc1MEE1MkJDNEY5QUUwMi90TklYazVvblVa
T09CMldhZVVpRnFjaUVHUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdEqKXYsYjEOiVJSggTsfzPkYEUMeBeBtpiCmmtPkcHep1fRnn+9iRIVcSvLo
9fOTNmRG9VXBi0HRDWOOSYpxrAxe+qXFH6iXqr3rJnp0SleWIPiy+hnpGsfUKjST
CK1hQZyTEEd1gEa+gLca3Z1+rWeFf1jkywcwa0AJNmIFBZO3N8NADBAEag9s8bnB
rzBr6WJqzDoWWcmDGN5aPXco2q7LnqvvSpHuLZzHIDJj1Y0a1F/fsf0bPbbrjjl1
goJQsKvxj5ABCcTLRswf6TFabTwUmeIBEVrhVGa0DNK6dedW2OcxdbKWdzrb6Dnk
g9Y/oTNN6hAHSi07LpDVOn7xQw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 23:25:56 2026 by rpki-client