
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
File: tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json)
Hash identifier: eBCOyhP7Xv3uXuRqYEYc8PIxLzRBXG94QLzex9ca68s=
Subject key identifier: F0:48:81:DB:42:60:97:60:B4:9C:BB:FA:3E:BD:53:56:07:29:A4:B1
Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Certificate serial: 0858
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
Manifest number: 07CC
Signing time: Fri 16 Oct 2026 22:13:08 +0000
Manifest this update: Fri 16 Oct 2026 22:13:08 +0000
Manifest next update: Fri 23 Oct 2026 22:13:08 +0000
Files and hashes: 1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: Rt8kbrSi9c/8O2rzCdk4QdTVfX2GqStO+8pBqWRuyhw=)
2: BE76C8186C6811F0B3FF7E69C4F9AE02.roa (hash: R8I4phETOiBeAPEYJEZeN+zM3emu7i6ZII3wUWn+zBQ=)
3: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: vlg26itogzimWhrZ0i1+Tb3EqjG8TstW5T7rv6utFcs=)
4: 42F4260E86F211F1B8F66003A7EE528E.roa (hash: vfUZixrUj69f8oGm3SJCT4P/nwbYiHNMmZYHs7EynG4=)
5: 61D8F6CCDC8D11F0969601B93D6F56BC.roa (hash: ddJZo//lHq9Ctx7y0h5Z1hWR5denN2+4dnjr/28CZNY=)
6: A716CA94954611EC9B320352C4F9AE02.roa (hash: ckSaIaBp0C2tnzfJNrPjglmyLfVPcguaEhWoRdz8O68=)
7: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: UqCULZpr33i9wM28d9/ADAw4Z3FTaU1dvqC0cM5wfCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Oct 2026 22:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2136 (0x858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Validity
Not Before: Oct 16 22:13:08 2026 GMT
Not After : Oct 23 22:13:08 2026 GMT
Subject: CN=6ad2a174-6c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:47:e2:e7:4b:aa:7e:c4:43:ea:a5:a3:b6:
2c:bb:b2:53:30:69:23:26:b5:2c:ea:6d:fe:e7:0b:
dc:10:98:c0:40:93:d4:fc:f2:8f:7b:2f:6d:50:95:
e7:ed:d9:e0:13:6b:8a:01:b1:e8:38:2d:eb:35:85:
ce:7a:e6:0f:44:3a:76:62:b1:c9:91:0f:f6:b7:df:
1d:6d:f4:1c:ab:ab:ff:9b:2f:1d:9b:d6:9f:e2:a1:
08:1f:5a:24:11:7e:d6:0d:8a:94:e9:06:11:f6:aa:
47:82:82:e8:fd:85:c3:3e:a6:c9:5c:c2:f4:41:46:
60:6a:eb:51:1c:81:03:f1:99:9b:bb:b0:29:f5:42:
1e:20:70:7c:49:91:ea:29:ef:fd:f6:3c:11:96:ee:
48:8e:74:55:39:0d:74:98:57:8c:d3:cc:20:ca:41:
4d:d0:59:6a:3a:90:a6:25:85:a5:e5:47:c7:aa:5c:
2e:9c:98:5d:70:c1:6f:bd:e8:79:c5:6a:46:52:bd:
e3:a8:62:7a:35:99:51:de:1c:c4:36:dc:ff:b8:de:
97:24:8e:15:d0:a1:35:92:d1:df:a1:1a:2d:6f:9a:
75:e8:8d:c2:0e:f7:11:91:7f:f5:cf:01:b3:fa:09:
a2:13:5c:49:01:e2:c7:c4:1a:5d:be:ea:90:62:58:
82:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:48:81:DB:42:60:97:60:B4:9C:BB:FA:3E:BD:53:56:07:29:A4:B1
X509v3 Authority Key Identifier:
keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7c:4b:18:05:64:6c:e1:ff:bc:ee:1f:e6:46:49:10:04:38:
44:c5:26:1e:89:49:64:c4:86:b3:af:57:a1:39:fb:79:f8:c5:
d0:9d:20:21:99:de:e5:2b:27:d4:5e:e3:88:34:1a:eb:33:be:
0c:b6:61:27:ae:80:23:8c:2f:b6:d8:d7:a9:4e:da:74:47:2b:
45:3d:a3:a0:8f:d3:44:3c:67:6d:5f:a3:32:29:60:82:cd:d7:
cb:6f:6b:ac:ce:f1:fc:5f:4c:b8:36:43:89:a3:ad:27:11:52:
bd:6e:fb:99:c2:71:71:36:03:6b:f2:ed:06:e2:55:e7:b9:a8:
16:8a:95:df:0b:28:3b:38:49:a1:3e:b1:63:ec:fb:66:1d:ac:
cf:62:b9:b0:cf:fb:ee:d2:96:38:26:85:be:aa:15:4f:0b:c3:
0d:04:71:03:33:ef:c8:fc:5f:e0:bf:37:af:8a:fb:48:d0:fc:
3e:33:fa:bb:70:ad:f8:9e:a5:ea:ee:36:e2:a9:17:f7:f8:a6:
70:14:f1:1e:82:29:d6:22:6c:8b:fb:6d:96:60:a9:29:05:7d:
67:e3:ae:50:8e:ae:14:ff:c9:97:5b:64:7f:31:34:0b:05:88:
50:24:8b:31:5f:98:9d:33:c8:e1:67:6b:0e:b3:aa:9f:74:13:
3b:c2:5d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:42:48 2026 by rpki-client