
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
File: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft (raw, json)
Hash identifier: viYIKLbtPGhObYsyoJ+i6upUuMuKlj5S4hTmmxvzBXY=
Subject key identifier: FB:97:CC:DE:1F:8A:91:C5:D8:41:37:60:44:AE:8D:D2:5F:C7:B3:C5
Authority key identifier: B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76
Certificate issuer: /CN=A9154FFD/serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
Certificate serial: 77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
Manifest number: 77
Signing time: Thu 11 Jun 2026 10:05:07 +0000
Manifest this update: Thu 11 Jun 2026 10:05:07 +0000
Manifest next update: Thu 18 Jun 2026 10:05:07 +0000
Files and hashes: 1: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl (hash: A/74hN7IkaOC5eIRyF9zevujiZFEaIlD7cXqey2hfyw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl
rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 10:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154FFD, serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
Validity
Not Before: Jun 11 10:05:07 2026 GMT
Not After : Jun 18 10:05:07 2026 GMT
Subject: CN=6a2a8853-6884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:13:5f:7a:5e:26:6e:72:5b:7d:23:f2:49:
7e:db:9a:9b:e4:90:68:45:e5:04:cc:b5:85:b9:0e:
73:4d:d6:73:51:05:33:07:25:16:02:5c:4c:ae:7e:
3c:a6:65:6e:f8:45:0b:3b:09:72:8d:fd:c7:bc:74:
05:8d:eb:97:6d:f6:ea:af:63:3b:3d:75:66:95:98:
e7:04:b2:d0:47:50:5f:6b:c3:c3:79:2b:70:86:34:
fb:0e:e3:83:b2:4d:74:32:15:95:e7:4f:57:5e:f8:
51:9e:4c:9b:6e:fc:7a:82:fb:b0:7d:28:ce:5c:51:
66:68:3f:29:17:ba:ba:fb:21:11:23:9d:f8:a7:6c:
49:e8:c9:62:3e:17:06:2c:f8:12:23:c1:c0:5e:51:
47:14:96:e5:de:d1:93:c9:3c:bc:82:41:f0:9c:6c:
5c:54:a1:ee:15:e9:a7:4a:a3:38:68:50:47:04:60:
fe:1f:cc:0c:60:c2:75:cf:15:0a:f9:f4:f7:e6:f6:
0c:e9:60:ce:ab:97:b9:a5:87:e1:a4:5c:19:4d:5a:
d1:d1:f9:84:fe:ed:a9:cb:97:29:e8:91:22:ce:8b:
f0:23:16:31:8c:b0:b7:51:28:10:ba:ea:20:a7:ad:
83:74:c4:34:73:88:4d:63:d8:b2:51:ad:cd:60:06:
6c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:97:CC:DE:1F:8A:91:C5:D8:41:37:60:44:AE:8D:D2:5F:C7:B3:C5
X509v3 Authority Key Identifier:
keyid:B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:1e:da:8b:40:a2:1a:2b:57:c0:aa:d7:58:88:f1:7c:00:26:
c5:04:d6:99:d7:b2:33:a7:52:17:99:3a:d5:3b:29:28:ca:f9:
64:41:64:7a:53:f3:b6:9b:d2:ca:09:13:e8:96:c3:e9:e5:57:
7f:0d:4c:93:21:a3:f9:c2:50:da:7b:b4:f2:2e:26:d6:3e:b9:
36:b0:23:d4:5f:b2:1b:6b:0e:06:56:fc:25:54:b4:4a:e4:61:
28:e1:0f:2e:1f:f8:e7:02:81:7b:44:51:10:56:9c:c4:8f:fe:
55:10:ea:9c:f7:39:87:2c:c7:f3:8d:7f:d9:bd:a6:69:5d:99:
f7:5f:71:6b:b0:3b:ad:44:8a:25:ec:e2:e6:d7:a3:d5:33:16:
09:dd:69:ed:17:3b:5d:54:44:f3:b0:5d:d5:2e:c4:ac:b8:eb:
3b:b2:c4:4b:03:d9:cf:11:e2:d9:19:38:86:f5:59:51:be:37:
af:c8:e6:58:4d:0c:c0:9e:dd:fd:36:a8:4c:af:3c:08:59:42:
f2:57:2f:62:d4:96:89:da:2f:ab:99:9d:de:c6:fa:12:53:67:
94:d8:76:b4:17:d6:89:63:f6:92:25:e7:0d:dc:8a:25:c8:f3:
d5:3a:1a:e1:eb:28:da:0d:37:c1:f8:af:ab:46:b3:c7:89:59:
84:66:ba:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:11:42 2026 by rpki-client