
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
File: tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft (raw, json)
Hash identifier: NbYzBhNEmZJ+lTU5ivTbbhBxaMdyBekw2G8WNa8hJL0=
Subject key identifier: 17:E9:D1:7B:B1:DA:BF:6E:C4:0F:CF:8C:F9:61:A6:52:57:FF:0F:1F
Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A
Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
Certificate serial: 05E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
Manifest number: 05D8
Signing time: Fri 12 Jun 2026 23:05:36 +0000
Manifest this update: Fri 12 Jun 2026 23:05:36 +0000
Manifest next update: Fri 19 Jun 2026 23:05:36 +0000
Files and hashes: 1: tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl (hash: iAspxbBFOJpAhRMa5u3oLnBi2udLCVJq6qr0NEes/lc=)
2: 90AEB6B26C0411EF903ED20BC4F9AE02.roa (hash: 39dWXtJ3zNJllsdeoKvUITiTmTYBuJqx9UsYIBiECf8=)
3: FC48A6E45FA711EF81D7F60DC4F9AE02.roa (hash: ZwaaaCTB5MJnKC+ti5oXMWpTHrYQMXviyJGrRl6G7v4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl
rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1512 (0x5e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED3C, serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
Validity
Not Before: Jun 12 23:05:36 2026 GMT
Not After : Jun 19 23:05:36 2026 GMT
Subject: CN=6a2c90c0-59e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a0:32:8d:a9:04:bf:4d:5c:1b:e1:65:67:30:
c6:18:fa:7f:43:af:aa:e5:2f:02:87:8b:81:cb:01:
86:0c:a3:36:21:4b:48:09:97:9c:b1:63:26:30:b4:
a1:5b:f5:17:75:f1:1f:5a:85:75:50:c5:f7:ef:e0:
e4:45:96:0f:4e:78:0d:b7:bf:59:77:ac:06:2d:63:
ae:14:a6:f6:99:a5:e3:a6:f6:4d:8a:21:9b:63:fa:
c7:78:ad:e2:4e:9f:34:6d:48:1e:ef:64:59:bc:c8:
74:34:47:c2:09:70:71:8b:79:e2:06:2b:2c:a4:be:
4e:bb:6d:b1:f0:4a:ab:f0:7c:f6:b5:c1:bd:0f:79:
06:11:02:64:e6:8f:26:78:29:08:4c:86:fb:28:15:
9f:65:6c:9a:16:0b:2d:5e:d4:9b:91:80:6d:cf:cd:
d7:05:3f:0d:60:94:89:8c:ef:cd:cf:1d:bf:56:70:
43:5c:1c:1b:dc:79:0a:5f:c2:7e:4c:f8:67:a9:7e:
e6:b5:bd:f3:86:e7:5e:91:17:e8:4d:7b:b3:8d:25:
e1:9b:96:f7:87:b7:8a:00:b9:74:aa:2c:97:7c:2a:
63:8b:a5:2c:8b:2c:9c:ae:e7:00:13:d7:e7:c6:c0:
51:1e:d7:9c:e5:02:e9:6f:90:3e:ec:f6:06:74:0d:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E9:D1:7B:B1:DA:BF:6E:C4:0F:CF:8C:F9:61:A6:52:57:FF:0F:1F
X509v3 Authority Key Identifier:
keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fd:db:4e:f1:05:8a:87:d0:e0:48:c7:02:d9:3b:94:f6:7f:
2e:e4:f6:52:04:bb:ba:c2:b6:f8:b5:5e:ae:b1:f5:2e:48:9f:
35:90:fd:d1:06:97:b1:35:d5:8d:32:7e:d5:ce:8c:79:41:50:
c6:6e:13:f8:5e:cc:2a:94:92:62:08:9d:71:c2:90:28:ee:3b:
96:37:91:04:3c:c9:73:25:4d:25:7d:f1:d5:4e:32:08:cf:90:
cb:e4:ee:f6:9a:db:1a:d3:2b:21:a8:ee:97:42:53:6e:72:d4:
82:db:1d:28:ec:b8:bf:8d:fa:de:c0:dc:69:8a:d2:b8:da:6d:
45:5b:76:54:c1:26:22:15:d5:61:16:e9:a9:4c:ac:5e:52:2f:
fd:f4:c7:0a:ee:10:12:80:66:6d:5f:10:96:de:2f:6c:41:d7:
33:5d:fb:c4:14:b8:a1:89:bf:f1:f7:06:92:d8:04:33:98:86:
4f:10:80:1f:6b:5c:44:9a:03:28:a3:24:60:13:bc:d6:65:bb:
a2:ba:f9:71:c1:b9:55:fa:4a:c6:f5:dc:3e:3d:77:e7:0b:ea:
2e:dc:0a:dc:3d:ec:61:65:82:fd:88:31:f7:ef:19:70:4d:cc:
1b:05:a8:62:8c:19:06:fc:bb:07:c9:43:88:62:8a:c5:e6:66:
fe:c8:95:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVEM0MxMTAvBgNVBAUTKEI1Rjg3QUM4OTJDNUU3RTkyNEVBMTg1MEFEQ0U0RkYw
MUQwREJBMkEwHhcNMjYwNjEyMjMwNTM2WhcNMjYwNjE5MjMwNTM2WjAYMRYwFAYD
VQQDEw02YTJjOTBjMC01OWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkaAyjakEv01cG+FlZzDGGPp/Q6+q5S8Ch4uBywGGDKM2IUtICZecsWMmMLSh
W/UXdfEfWoV1UMX37+DkRZYPTngNt79Zd6wGLWOuFKb2maXjpvZNiiGbY/rHeK3i
Tp80bUge72RZvMh0NEfCCXBxi3niBisspL5Ou22x8Eqr8Hz2tcG9D3kGEQJk5o8m
eCkITIb7KBWfZWyaFgstXtSbkYBtz83XBT8NYJSJjO/Nzx2/VnBDXBwb3HkKX8J+
TPhnqX7mtb3zhudekRfoTXuzjSXhm5b3h7eKALl0qiyXfCpji6UsiyycrucAE9fn
xsBRHtec5QLpb5A+7PYGdA1UXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBfp0Xux
2r9uxA/PjPlhplJX/w8fMB8GA1UdIwQYMBaAFLX4esiSxefpJOoYUK3OT/AdDboq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQzQy8zMDZFRTI2MDBB
NzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUta2s2aGhRcmM1UDhCME51
aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RmaDZ5SkxGNS1razZoaFFyYzVQOEIwTnVpby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RUQzQy8zMDZFRTI2MDBBNzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUt
a2s2aGhRcmM1UDhCME51aW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALP3bTvEFiofQ4EjHAtk7lPZ/LuT2UgS7usK2+LVerrH1LkifNZD90QaXsTXV
jTJ+1c6MeUFQxm4T+F7MKpSSYgidccKQKO47ljeRBDzJcyVNJX3x1U4yCM+Qy+Tu
9prbGtMrIajul0JTbnLUgtsdKOy4v4363sDcaYrSuNptRVt2VMEmIhXVYRbpqUys
XlIv/fTHCu4QEoBmbV8Qlt4vbEHXM137xBS4oYm/8fcGktgEM5iGTxCAH2tcRJoD
KKMkYBO81mW7orr5ccG5VfpKxvXcPj135wvqLtwK3D3sYWWC/Ygx9+8ZcE3MGwWo
YowZBvy7B8lDiGKKxeZm/siV6A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:58:27 2026 by rpki-client