
$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
File: TzLs_4zUbD7AP6deEAj0qpoM-JM.mft (raw, json)
Hash identifier: CU3Hqn9ZVQL6jnGi2nlDdTfEkzDzsP2OVl5s+8aZIsM=
Subject key identifier: 6A:FB:E7:44:80:3C:20:72:2A:D0:7B:EC:B3:18:55:08:BD:B4:34:9C
Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
Certificate serial: 0BC0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
Manifest number: 0BA9
Signing time: Thu 16 Apr 2026 19:00:05 +0000
Manifest this update: Thu 16 Apr 2026 19:00:04 +0000
Manifest next update: Thu 23 Apr 2026 19:00:04 +0000
Files and hashes: 1: TzLs_4zUbD7AP6deEAj0qpoM-JM.crl (hash: 0t/FGdYoqjoz+5XDCX7hnByLCvp8X9+zUjM0fRw/1qc=)
2: B34C91C4B14311EF8479AA21C4F9AE02.roa (hash: 1Rl4AWS27tXktsB4oZ9/cQrbDdYUzTGKNR1jiXI3rWI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl
rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3008 (0xbc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
Validity
Not Before: Apr 16 19:00:04 2026 GMT
Not After : Apr 23 19:00:04 2026 GMT
Subject: CN=69e131b5-5325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:00:11:4b:57:7e:e5:fb:56:e7:c1:9e:94:96:
30:7b:b4:b2:b4:dc:73:48:ba:1f:fe:2e:b7:6f:01:
0b:ad:4e:75:51:6b:de:04:c4:bf:d8:39:30:84:f1:
c9:b5:aa:bb:ed:27:30:84:82:51:00:70:02:77:52:
ab:24:c6:9e:1b:c6:f0:22:54:31:90:ea:d7:5b:f4:
fb:bb:9f:3a:06:65:75:4c:4f:43:b6:48:89:45:32:
7b:86:57:84:0b:41:39:61:08:86:bc:33:49:4d:df:
6c:0b:cd:ec:da:22:f0:5d:b4:b4:34:3f:ab:17:e4:
6d:5d:be:4a:09:af:06:60:95:45:59:33:b4:d9:0e:
58:62:15:5f:4e:91:2c:90:60:7f:d2:7b:30:cb:ba:
cd:01:7a:72:d4:82:f0:46:2d:d3:30:4f:c3:fe:63:
3c:20:e8:9b:76:c2:f6:b5:6f:19:81:2f:e2:84:91:
30:f5:32:74:18:6c:e1:0a:f9:07:90:c0:11:7a:94:
95:ba:ab:20:e1:a4:c0:e7:25:d7:07:0f:61:9e:dd:
f1:04:30:b6:f2:a5:f1:68:96:d9:01:b8:2d:5c:da:
08:00:cf:91:be:fd:9c:19:65:ef:16:d6:f7:fd:96:
42:94:f0:d9:75:67:29:f4:52:6e:3f:bb:0e:05:0b:
fd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FB:E7:44:80:3C:20:72:2A:D0:7B:EC:B3:18:55:08:BD:B4:34:9C
X509v3 Authority Key Identifier:
keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b9:06:e5:94:3e:ba:11:8e:a2:98:c6:e2:66:0a:2d:d4:0c:
9f:4c:16:c4:a1:c4:0a:9c:eb:84:d6:5d:04:e7:d4:63:4c:fc:
a1:bb:1f:7c:b3:f5:ae:38:24:71:57:71:1a:1a:20:d7:98:c7:
66:87:cd:e2:55:0c:61:b4:c7:27:8c:d3:d0:5e:15:8e:82:e8:
de:0f:72:f6:d1:09:ba:49:ef:ad:7a:e7:6c:f2:0e:02:03:a1:
fd:4b:53:1c:a8:8f:9f:32:26:a3:30:80:47:09:b0:b2:39:65:
9a:43:03:48:83:85:d1:6f:6f:a4:06:5a:90:c6:fb:87:cf:8b:
11:12:6b:9c:fe:67:48:81:0a:9c:1e:fd:ad:d3:08:0b:a1:24:
e0:2c:61:10:e2:ad:6d:6f:56:31:94:77:c4:5b:16:ec:43:66:
82:a0:2d:6d:83:b6:b3:ee:17:00:14:d9:6b:ef:5f:2b:75:f3:
ef:22:ac:3a:b4:ac:11:da:ee:ca:5c:6b:9a:82:0c:e6:d7:13:
a0:93:97:34:56:70:28:cd:1f:e8:c3:13:c3:42:1e:36:89:95:
4a:69:24:fc:85:c6:32:25:10:93:45:3c:e9:0c:a3:ca:37:98:
6d:8c:ba:87:6e:0b:20:c7:c1:e9:90:a0:00:bd:8c:ac:ff:15:
6a:01:2b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:04:28 2026 by rpki-client