
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
File: TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json)
Hash identifier: SDsILiOfW0z+UCrK8cKP9FvLUaBXvgjHo58RuVP49OU=
Subject key identifier: A6:E9:AB:77:B1:0A:A0:34:E1:65:B8:2F:78:14:FB:F4:1F:F8:C1:71
Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0
Certificate issuer: /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
Certificate serial: 0397
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
Manifest number: 0390
Signing time: Wed 17 Jun 2026 00:50:49 +0000
Manifest this update: Wed 17 Jun 2026 00:50:49 +0000
Manifest next update: Wed 24 Jun 2026 00:50:49 +0000
Files and hashes: 1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: nRQGC/a8w3HCwSBmOLfHYVIi0DVWsSYRbFXNypsRi5k=)
2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: mBL1TBP+Msd9AlCfomB44CtyYjx9JeXY/drpx8eClaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl
rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 919 (0x397)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
Validity
Not Before: Jun 17 00:50:49 2026 GMT
Not After : Jun 24 00:50:49 2026 GMT
Subject: CN=6a31ef69-9f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:64:ac:fa:e4:94:f2:33:64:49:c6:a2:2c:
2d:4b:a5:af:bd:26:2b:6e:f2:55:53:f8:c2:2f:6d:
ba:9d:19:5c:44:1d:81:f9:38:e0:c2:a7:c4:41:6f:
eb:0d:75:8f:cc:da:6d:20:ed:b3:de:ee:04:52:59:
58:61:96:f4:d3:68:62:65:54:30:f6:ad:0b:65:29:
9a:d0:16:04:1f:31:d3:0b:ff:72:5c:c3:37:42:72:
20:6e:3c:b6:68:64:d7:06:04:50:a8:69:92:8b:00:
60:ec:68:5e:df:0e:a3:ab:05:ad:b7:01:7b:b5:c5:
04:27:5c:28:bc:f2:1d:95:f5:52:1a:0c:07:25:92:
62:55:b0:5b:b6:95:93:1a:0f:59:50:eb:c1:58:9f:
5c:d9:65:75:91:c8:0c:61:53:99:f7:93:7b:9f:c4:
8f:65:03:7e:01:72:3c:7c:dc:b6:95:b8:19:ef:96:
cf:46:22:f5:64:0e:9c:a4:a6:6f:d4:96:07:10:3e:
25:c4:15:c1:5f:05:55:18:f4:ef:67:12:24:de:33:
96:d2:d4:a8:a0:97:b5:c6:9a:82:51:e5:30:94:f6:
ac:76:eb:0b:df:48:71:52:e0:c9:98:dd:9f:54:df:
2d:8f:86:bc:38:54:1a:0b:5d:2e:da:31:9a:df:60:
e6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E9:AB:77:B1:0A:A0:34:E1:65:B8:2F:78:14:FB:F4:1F:F8:C1:71
X509v3 Authority Key Identifier:
keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:18:5a:d7:12:b7:3d:ba:5c:67:58:e4:21:20:16:3e:cd:6e:
37:19:6c:46:05:d9:62:cd:51:9f:b7:46:7d:18:78:09:8d:bf:
1d:68:94:1a:4b:37:f9:d8:85:17:05:14:4e:09:e7:19:32:2b:
f5:8d:3c:ef:b4:49:b4:48:78:40:24:47:14:96:29:cb:32:53:
47:5a:2e:6d:43:eb:eb:76:fa:ff:0b:85:de:aa:b9:d2:a7:9b:
65:38:aa:c5:89:b5:04:64:26:5b:fb:ef:91:53:3e:b7:70:48:
93:2e:73:88:06:3f:97:ff:23:3a:9e:e7:57:21:92:61:be:f1:
ce:09:49:09:0e:94:f0:fc:a5:6f:76:c7:0a:ff:c7:3d:59:47:
da:a8:2a:4c:13:c2:19:a2:44:b1:50:15:b3:f0:66:3b:ed:32:
9b:d9:88:d5:41:f0:de:ae:6c:0f:f8:de:d0:c7:70:e2:c7:49:
d3:e7:f1:49:07:02:1b:96:8c:57:5f:51:ac:bb:3e:66:ed:0e:
ab:a7:79:0c:c8:ab:67:94:86:c3:be:c7:c6:03:7e:99:34:a1:
61:d9:4e:ea:35:88:a7:0b:93:7b:f4:1f:fb:84:ae:aa:54:db:
9e:7f:4e:7a:f7:53:57:54:de:02:70:f9:f6:8f:cd:d3:a6:13:
ba:db:f3:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEYzNDkxMTAvBgNVBAUTKDREOTQ0RjMwQjhDNkU2OTE5ODhEMzAyRkJBNkMyRjlD
NTc0QzA0QjAwHhcNMjYwNjE3MDA1MDQ5WhcNMjYwNjI0MDA1MDQ5WjAYMRYwFAYD
VQQDEw02YTMxZWY2OS05Zjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAprBkrPrklPIzZEnGoiwtS6WvvSYrbvJVU/jCL226nRlcRB2B+TjgwqfEQW/r
DXWPzNptIO2z3u4EUllYYZb002hiZVQw9q0LZSma0BYEHzHTC/9yXMM3QnIgbjy2
aGTXBgRQqGmSiwBg7Ghe3w6jqwWttwF7tcUEJ1wovPIdlfVSGgwHJZJiVbBbtpWT
Gg9ZUOvBWJ9c2WV1kcgMYVOZ95N7n8SPZQN+AXI8fNy2lbgZ75bPRiL1ZA6cpKZv
1JYHED4lxBXBXwVVGPTvZxIk3jOW0tSooJe1xpqCUeUwlPasdusL30hxUuDJmN2f
VN8tj4a8OFQaC10u2jGa32DmeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKbpq3ex
CqA04WW4L3gU+/Qf+MFxMB8GA1UdIwQYMBaAFE2UTzC4xuaRmI0wL7psL5xXTASw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjM0OS9DNkY1MDAxQUVE
QjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVwR1lqVEF2dW13dm5GZE1C
TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RaUlBNTGpHNXBHWWpUQXZ1bXd2bkZkTUJMQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjM0OS9DNkY1MDAxQUVEQjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVw
R1lqVEF2dW13dm5GZE1CTEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMxha1xK3PbpcZ1jkISAWPs1uNxlsRgXZYs1Rn7dGfRh4CY2/HWiUGks3+diF
FwUUTgnnGTIr9Y0877RJtEh4QCRHFJYpyzJTR1oubUPr63b6/wuF3qq50qebZTiq
xYm1BGQmW/vvkVM+t3BIky5ziAY/l/8jOp7nVyGSYb7xzglJCQ6U8Pylb3bHCv/H
PVlH2qgqTBPCGaJEsVAVs/BmO+0ym9mI1UHw3q5sD/je0Mdw4sdJ0+fxSQcCG5aM
V19RrLs+Zu0Oq6d5DMirZ5SGw77HxgN+mTShYdlO6jWIpwuTe/Qf+4SuqlTbnn9O
evdTV1TeAnD59o/N06YTutvzEQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:39:20 2026 by rpki-client