
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
File: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft (raw, json)
Hash identifier: 4b+GDDrYjxXRhEgcwzOf244oErSCwGtCY2W9/Ai1EqM=
Subject key identifier: C4:15:98:19:5A:2B:73:C8:50:4C:30:74:75:8E:38:79:51:B7:FA:C4
Authority key identifier: 4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B
Certificate issuer: /CN=A916C4BC/serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B
Certificate serial: 053B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
Manifest number: 0534
Signing time: Mon 27 Jul 2026 00:28:42 +0000
Manifest this update: Mon 27 Jul 2026 00:28:42 +0000
Manifest next update: Mon 03 Aug 2026 00:28:42 +0000
Files and hashes: 1: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl (hash: T4R/w74cl3lGc3P5eOA/Mu+SXkFwd+v613/ctb0UYVQ=)
2: F593443851B011ECB5188E24C4F9AE02.roa (hash: 0WVnAY5EHkV8sUZiTU2edZq8VGQc3j9oVtptJkhHgCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl
rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1339 (0x53b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C4BC, serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B
Validity
Not Before: Jul 27 00:28:42 2026 GMT
Not After : Aug 3 00:28:42 2026 GMT
Subject: CN=6a66a63a-3bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:52:11:b6:6a:ca:af:57:37:3e:20:8f:eb:b5:
dd:92:d8:87:20:2a:53:e2:cd:b1:f8:f6:c0:c1:09:
ab:88:f0:86:a6:3e:88:f4:e8:c4:37:bd:79:b4:60:
95:af:f9:88:6a:93:d5:d9:86:9a:b5:ca:8d:d9:a9:
cc:19:1f:1b:7d:54:c7:4f:17:48:d3:ea:fc:bf:f6:
68:91:0f:d3:44:6c:58:bf:76:45:0b:c7:8a:7e:c2:
60:40:3f:91:0a:8c:0f:b0:0f:5d:22:2d:84:72:af:
fe:40:1e:b2:78:2f:7f:fd:f4:d0:0d:4e:82:42:9e:
f0:ee:e7:4f:50:68:b8:04:19:98:e6:dc:94:c4:fd:
d1:be:8a:55:8d:0c:5e:67:56:25:6b:3b:bc:51:3d:
30:38:5a:32:c6:3e:57:0c:7f:5e:1c:a7:c8:ad:ab:
e0:52:1d:92:e6:9c:2d:83:49:a1:dd:79:6e:62:4e:
93:1a:3e:9b:c2:eb:0c:59:a4:18:03:dd:fc:27:bb:
ef:94:1a:de:9a:bd:cf:c7:8d:4a:f5:b3:c0:fc:03:
73:a9:17:93:42:c8:ec:f7:03:4e:a1:46:8a:65:44:
f7:08:63:68:7d:07:e1:d6:74:1c:99:cb:89:d6:70:
5e:d6:4a:60:e7:e2:77:b0:e7:22:41:fe:cf:0f:b9:
8d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:15:98:19:5A:2B:73:C8:50:4C:30:74:75:8E:38:79:51:B7:FA:C4
X509v3 Authority Key Identifier:
keyid:4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:f5:5e:a0:64:03:b2:a6:f9:b9:84:56:67:df:e5:33:e2:90:
f9:e4:86:3a:34:a7:64:14:cd:46:2d:97:02:a4:88:8b:9a:7c:
35:0e:84:ed:c9:ee:b7:44:27:91:37:3d:fd:df:9c:f1:80:2d:
59:28:19:27:ac:14:6d:3e:52:96:eb:50:2f:ad:a2:b5:30:23:
d5:59:b0:6e:21:86:8d:1b:d3:72:9f:a9:66:96:f5:a1:ae:09:
1d:5a:09:d8:e5:0a:91:ed:76:90:7b:fa:f2:c4:1e:46:b1:01:
60:94:be:3e:3b:13:2b:95:79:a1:4a:40:5b:c1:d5:58:23:5a:
30:8d:8f:c6:6e:20:13:49:ba:00:1e:b8:67:6e:b0:d0:46:a6:
8d:6b:20:55:0a:d5:b6:d5:b2:5f:c7:38:67:88:be:08:c3:e6:
1a:86:b8:bc:c4:79:53:3b:e9:05:98:ce:d5:12:50:09:ab:14:
b8:21:0a:54:a7:66:df:1a:bf:c1:a8:f7:3c:d7:95:7f:e6:61:
02:ae:b3:ab:63:23:dc:c8:a6:92:92:4f:56:f7:96:28:03:88:
ee:72:a1:1d:31:d2:30:bf:5e:2e:e0:99:bd:91:39:7f:63:d0:
71:6e:b0:5e:a7:df:78:1f:81:e2:90:28:0b:bf:a7:fe:6f:8c:
57:08:94:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM0QkMxMTAvBgNVBAUTKDRERkVDMzQzN0M5MEJGNDE0RDA1MTg4QjQ4MkM3ODQ4
RTZGMzE2MUIwHhcNMjYwNzI3MDAyODQyWhcNMjYwODAzMDAyODQyWjAYMRYwFAYD
VQQDEw02YTY2YTYzYS0zYmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj1IRtmrKr1c3PiCP67XdktiHICpT4s2x+PbAwQmriPCGpj6I9OjEN715tGCV
r/mIapPV2YaatcqN2anMGR8bfVTHTxdI0+r8v/ZokQ/TRGxYv3ZFC8eKfsJgQD+R
CowPsA9dIi2Ecq/+QB6yeC9//fTQDU6CQp7w7udPUGi4BBmY5tyUxP3RvopVjQxe
Z1Ylazu8UT0wOFoyxj5XDH9eHKfIravgUh2S5pwtg0mh3XluYk6TGj6bwusMWaQY
A938J7vvlBremr3Px41K9bPA/ANzqReTQsjs9wNOoUaKZUT3CGNofQfh1nQcmcuJ
1nBe1kpg5+J3sOciQf7PD7mN4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMQVmBla
K3PIUEwwdHWOOHlRt/rEMB8GA1UdIwQYMBaAFE3+w0N8kL9BTQUYi0gseEjm8xYb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRCQy9BOTcwQjJFQzUx
QUMxMUVDOUVEOTA0MUJDNEY5QUUwMi9UZjdEUTN5UXYwRk5CUmlMU0N4NFNPYnpG
aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RmN0RRM3lRdjBGTkJSaUxTQ3g0U09iekZocy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QzRCQy9BOTcwQjJFQzUxQUMxMUVDOUVEOTA0MUJDNEY5QUUwMi9UZjdEUTN5UXYw
Rk5CUmlMU0N4NFNPYnpGaHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWfVeoGQDsqb5uYRWZ9/lM+KQ+eSGOjSnZBTNRi2XAqSIi5p8NQ6E7cnut0Qn
kTc9/d+c8YAtWSgZJ6wUbT5SlutQL62itTAj1VmwbiGGjRvTcp+pZpb1oa4JHVoJ
2OUKke12kHv68sQeRrEBYJS+PjsTK5V5oUpAW8HVWCNaMI2Pxm4gE0m6AB64Z26w
0EamjWsgVQrVttWyX8c4Z4i+CMPmGoa4vMR5UzvpBZjO1RJQCasUuCEKVKdm3xq/
waj3PNeVf+ZhAq6zq2Mj3MimkpJPVveWKAOI7nKhHTHSML9eLuCZvZE5f2PQcW6w
XqffeB+B4pAoC7+n/m+MVwiU/Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:06 2026 by rpki-client