
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
File: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft (raw, json)
Hash identifier: YUezWrH5jKz/3nlmSIZpruNkyKjOVhfw6Yqoiz3j620=
Subject key identifier: 77:43:C0:4D:8D:F8:70:4F:2C:7F:A8:44:F9:E5:0A:56:5D:08:1D:4E
Authority key identifier: B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76
Certificate issuer: /CN=A9154FFD/serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
Manifest number: 8E
Signing time: Mon 27 Jul 2026 09:41:11 +0000
Manifest this update: Mon 27 Jul 2026 09:41:10 +0000
Manifest next update: Mon 03 Aug 2026 09:41:10 +0000
Files and hashes: 1: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl (hash: PUi5OL6Cv49NmuT9iSLQzT4GOf3nftjkt4dd0lSRMA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl
rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154FFD, serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
Validity
Not Before: Jul 27 09:41:10 2026 GMT
Not After : Aug 3 09:41:10 2026 GMT
Subject: CN=6a6727b7-f749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bb:1a:fb:be:9e:77:61:1c:d4:4c:b1:07:97:
01:0e:ae:6f:73:bd:4a:7b:1c:10:7d:b1:3a:c5:9e:
1e:f0:e7:dc:87:4f:ac:35:37:c6:ca:4b:84:b4:85:
91:06:67:36:91:9e:a5:d4:3b:d9:ad:69:bb:0e:78:
46:d6:3c:46:98:fd:c9:1d:e6:a4:d4:97:a5:e8:ed:
15:2a:fe:e0:d8:e8:2f:cb:8c:62:7d:55:54:b2:52:
79:89:26:21:2e:bf:e1:8c:92:b4:63:42:a4:bd:8c:
5b:c0:07:d6:23:a4:79:e4:bd:e1:94:55:62:ab:a3:
e3:00:b7:46:45:31:34:ba:ba:68:72:5f:af:38:ae:
e8:d9:91:00:3f:ac:62:95:d3:ca:ad:f2:bd:91:df:
29:33:21:76:87:96:1b:3f:1c:5d:6d:66:1f:3e:37:
d5:ef:24:e3:79:53:eb:f9:9b:1d:a4:34:66:8c:f1:
b8:59:ca:e7:6a:de:85:4d:43:04:9a:d4:ab:74:d3:
2a:b7:52:72:29:e3:cb:bf:ef:3b:66:3d:b9:e9:8c:
f4:66:d0:2d:1a:8d:9f:a5:5f:75:3e:dc:70:7a:35:
f8:1e:b0:36:26:bc:b9:a4:56:a3:e0:a7:c6:ec:a0:
2a:a7:89:83:91:64:88:07:f1:67:4a:33:c8:1b:48:
c5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:43:C0:4D:8D:F8:70:4F:2C:7F:A8:44:F9:E5:0A:56:5D:08:1D:4E
X509v3 Authority Key Identifier:
keyid:B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:32:7c:cc:72:cb:83:03:0b:8a:c9:dd:66:8c:ef:9b:7a:9b:
2b:5c:b8:9e:e6:fa:55:7c:24:4e:4d:49:ba:00:73:fa:0d:6a:
c4:fb:80:d6:9c:33:72:54:6c:18:2d:75:cf:6c:ea:cd:23:bb:
c6:bf:50:32:c8:ec:75:65:4b:10:f2:73:cb:bc:76:cd:92:93:
dc:82:38:9d:45:aa:97:a4:cb:02:77:e6:ba:5a:4b:4a:d0:f0:
fa:34:d4:cb:eb:a5:46:f0:d3:09:f1:03:48:2f:a2:77:22:d6:
06:61:c5:4b:f3:f4:ab:79:bf:77:51:bd:96:16:fe:78:4b:d7:
00:ee:e7:ab:9a:9d:d2:fc:03:a6:0a:db:1b:83:e2:49:39:8a:
dd:72:98:f0:bb:f2:2d:d8:2e:4e:17:52:d8:61:7f:8c:07:d0:
e5:48:2f:ad:49:30:d1:6f:ab:ba:f8:4f:ea:b1:72:33:a0:0d:
0d:c8:a6:41:55:9e:2f:e7:90:97:24:05:7f:61:78:c5:c0:56:
8c:93:95:d4:8d:15:1d:aa:ae:b3:9d:69:aa:75:c0:55:e3:76:
ef:21:cb:de:21:54:0d:ca:19:0e:ed:8e:30:68:85:74:82:0d:
54:ba:2a:22:e8:d1:97:4a:19:e5:8a:e2:03:2a:ac:07:7a:b2:
84:39:b7:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTRGRkQxMTAvBgNVBAUTKEI2N0NENEYzMEFEQzE5NTBCOTJEQzM0OThGOUI1MzUy
NjYwNUJGNzYwHhcNMjYwNzI3MDk0MTEwWhcNMjYwODAzMDk0MTEwWjAYMRYwFAYD
VQQDEw02YTY3MjdiNy1mNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvLsa+76ed2Ec1EyxB5cBDq5vc71KexwQfbE6xZ4e8Ofch0+sNTfGykuEtIWR
Bmc2kZ6l1DvZrWm7DnhG1jxGmP3JHeak1Jel6O0VKv7g2Ogvy4xifVVUslJ5iSYh
Lr/hjJK0Y0KkvYxbwAfWI6R55L3hlFViq6PjALdGRTE0urpocl+vOK7o2ZEAP6xi
ldPKrfK9kd8pMyF2h5YbPxxdbWYfPjfV7yTjeVPr+ZsdpDRmjPG4Wcrnat6FTUME
mtSrdNMqt1JyKePLv+87Zj256Yz0ZtAtGo2fpV91PtxwejX4HrA2Jry5pFaj4KfG
7KAqp4mDkWSIB/FnSjPIG0jFfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHdDwE2N
+HBPLH+oRPnlClZdCB1OMB8GA1UdIwQYMBaAFLZ81PMK3BlQuS3DSY+bU1JmBb92
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEZGRC9FRUU2OEM2NEI0
ODgxMUYwQTc0MkY1N0VDNEY5QUUwMi90bnpVOHdyY0dWQzVMY05KajV0VFVtWUZ2
M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RuelU4d3JjR1ZDNUxjTkpqNXRUVW1ZRnYzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NEZGRC9FRUU2OEM2NEI0ODgxMUYwQTc0MkY1N0VDNEY5QUUwMi90bnpVOHdyY0dW
QzVMY05KajV0VFVtWUZ2M1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYTJ8zHLLgwMLisndZozvm3qbK1y4nub6VXwkTk1JugBz+g1qxPuA1pwzclRs
GC11z2zqzSO7xr9QMsjsdWVLEPJzy7x2zZKT3II4nUWql6TLAnfmulpLStDw+jTU
y+ulRvDTCfEDSC+idyLWBmHFS/P0q3m/d1G9lhb+eEvXAO7nq5qd0vwDpgrbG4Pi
STmK3XKY8LvyLdguThdS2GF/jAfQ5UgvrUkw0W+ruvhP6rFyM6ANDcimQVWeL+eQ
lyQFf2F4xcBWjJOV1I0VHaqus51pqnXAVeN27yHL3iFUDcoZDu2OMGiFdIINVLoq
IujRl0oZ5YriAyqsB3qyhDm3Qw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:17:22 2026 by rpki-client