
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
File: tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft (raw, json)
Hash identifier: L7sFsgayeX/pNzcbnDKYCT9duOY6GphdjPtpXss4qjE=
Subject key identifier: 5C:8C:C4:EB:D2:07:E1:A2:B0:0B:F7:CE:19:14:9E:71:32:2F:19:35
Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A
Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
Certificate serial: 05CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
Manifest number: 05BB
Signing time: Thu 16 Apr 2026 23:03:02 +0000
Manifest this update: Thu 16 Apr 2026 23:03:02 +0000
Manifest next update: Thu 23 Apr 2026 23:03:02 +0000
Files and hashes: 1: tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl (hash: xYNCVrry/wIPzH5rnx8vvdJu4xgItSTf48lGkUZRoBk=)
2: FC48A6E45FA711EF81D7F60DC4F9AE02.roa (hash: ZwaaaCTB5MJnKC+ti5oXMWpTHrYQMXviyJGrRl6G7v4=)
3: 90AEB6B26C0411EF903ED20BC4F9AE02.roa (hash: 39dWXtJ3zNJllsdeoKvUITiTmTYBuJqx9UsYIBiECf8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl
rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1483 (0x5cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED3C, serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
Validity
Not Before: Apr 16 23:03:02 2026 GMT
Not After : Apr 23 23:03:02 2026 GMT
Subject: CN=69e16aa6-47d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ed:fb:c4:b3:e8:50:b9:d5:c9:fb:d0:ae:37:
bb:30:ea:ae:65:b2:22:a5:74:19:31:a3:0a:77:57:
7d:fa:96:b6:3a:3f:4d:bb:5d:2d:17:a8:e3:c5:47:
1a:45:74:a3:c2:30:a4:01:4a:09:cc:ff:72:62:cc:
de:b1:7a:68:24:0d:bf:43:67:0c:15:87:55:54:48:
e4:3b:a7:86:fc:87:41:33:b7:c0:c8:a5:06:07:cd:
8e:49:a4:53:1f:d7:94:8b:ff:c3:23:21:d6:c6:b9:
26:cb:df:17:e7:4b:e1:5e:7b:c8:73:aa:19:f0:53:
c2:7c:af:66:69:be:05:47:37:a9:6e:ab:90:a6:a2:
54:15:a0:10:54:c2:e2:d3:f3:82:7f:a6:12:bf:e9:
ae:c5:1a:5d:0d:df:ae:45:15:55:94:3e:bf:6b:2e:
e8:90:3d:c6:69:11:b0:84:c6:fa:10:15:5b:ac:87:
8a:a8:33:fb:a3:88:73:95:ff:1a:c5:0f:57:2a:6b:
c6:5b:bc:65:15:8a:7a:16:c1:ed:49:e0:43:f4:c7:
cf:18:16:c4:b6:bc:2d:d1:3f:a1:e9:55:f1:fe:aa:
37:cb:69:37:86:9b:e7:c4:37:ed:90:1d:7c:1d:6e:
b6:c1:3f:ab:fb:9f:68:02:2a:c6:5f:5d:fc:11:ce:
2b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8C:C4:EB:D2:07:E1:A2:B0:0B:F7:CE:19:14:9E:71:32:2F:19:35
X509v3 Authority Key Identifier:
keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:93:58:2a:5b:cd:a4:89:06:a2:b0:0e:1d:f8:01:69:25:57:
22:35:91:6b:84:f4:02:8d:d8:b5:a7:14:c0:ed:67:99:c9:99:
d3:2b:b9:34:75:21:8c:ec:dd:6c:c6:61:f2:0e:6e:d0:e7:85:
67:37:d9:14:c6:24:76:41:17:48:ad:39:2a:46:d3:71:4e:62:
cf:16:54:44:d0:6d:aa:db:4f:22:ed:bd:5e:a5:7d:33:77:9e:
de:2b:9b:9d:f2:d9:46:10:00:4a:56:dc:ed:26:c2:40:ee:c4:
d3:f4:54:cc:eb:af:43:b4:bf:a8:49:be:c8:35:58:7b:f2:75:
ab:a2:06:8d:e8:a5:96:93:c0:3e:80:71:2e:13:2c:d0:8c:51:
18:0b:56:04:c1:cf:1e:5c:cd:86:1c:df:fc:92:96:c2:70:13:
5d:b5:d5:7c:b9:b1:42:ef:ce:a3:1d:96:4f:47:e7:a7:c3:49:
3c:79:5b:9a:3c:15:58:99:cb:27:da:42:e8:56:98:ff:4c:44:
76:d5:40:22:a1:34:9a:08:63:71:92:81:ab:1a:cc:5b:da:75:
8f:a5:05:f2:73:1f:ce:0a:b7:ff:c5:d0:c0:fe:c1:fe:f2:5a:
5e:d0:1f:69:8d:de:de:e5:37:c4:92:b5:11:c7:94:14:e7:1c:
21:58:a3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:08:37 2026 by rpki-client