
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
File: TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft (raw, json)
Hash identifier: Vros3a1MpjnM2yqDCMK0rcCmO41NeCdI3FgpFd/zAfw=
Subject key identifier: D8:38:D1:87:F6:0A:7D:C2:90:44:E8:D8:99:E9:8D:5D:7B:71:78:5C
Authority key identifier: 4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D
Certificate issuer: /CN=A91847A4/serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
Manifest number: 0126
Signing time: Fri 09 Oct 2026 06:27:50 +0000
Manifest this update: Fri 09 Oct 2026 06:27:50 +0000
Manifest next update: Fri 16 Oct 2026 06:27:50 +0000
Files and hashes: 1: TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl (hash: eQORbg4A9p7PW+j46a0aVla3Al6+6RZxU03zgSY2NQw=)
2: 1201EAF6083911F0B43D9172C4F9AE02.roa (hash: rbHttiCNfct4rPH7XHoUz+IWP4BlD4I/02xhzj8Jyag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl
rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 06:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A4, serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D
Validity
Not Before: Oct 9 06:27:50 2026 GMT
Not After : Oct 16 06:27:50 2026 GMT
Subject: CN=6ac88966-99dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:b9:29:d8:0c:e4:ed:88:11:de:bb:fc:e6:
8d:63:d1:4f:e7:99:b0:85:c2:fd:9c:4e:50:d1:d5:
45:2c:1c:d1:ea:3a:27:c3:d0:1e:c6:ad:04:3c:cd:
3f:06:05:d7:7b:8e:a1:19:77:67:27:13:e1:e9:a6:
70:e5:49:b0:a1:60:c8:83:aa:b2:d4:cf:b0:34:03:
c1:95:8d:41:77:88:39:ed:52:27:f0:49:d2:db:49:
fe:2d:91:13:44:51:c7:de:5a:e6:09:9d:65:b0:31:
d0:7b:f2:e4:32:d3:f0:3a:b7:cb:f9:5b:d1:ae:62:
a4:0b:a1:d3:34:f6:7f:ff:e0:1e:d6:b1:2b:02:fd:
16:0c:85:a2:47:35:00:b5:c4:ac:d6:20:da:36:32:
a4:f8:4d:33:09:85:d3:d1:8c:bd:1f:f5:0d:ee:0a:
37:4e:45:22:05:17:4e:a8:a6:9f:d6:5f:87:00:98:
18:21:a2:3f:a9:1e:25:4b:8b:38:30:cd:50:2d:12:
81:d9:c7:c2:9b:ba:03:0f:e2:5b:92:1e:35:19:a9:
c7:5d:a6:c5:e6:f9:5d:4f:96:7c:06:c5:ae:bf:a7:
60:e2:26:31:91:ec:a3:d8:6c:27:cf:ae:54:71:f5:
ea:21:6c:45:10:d7:20:5a:69:62:2a:7e:47:96:6a:
51:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:38:D1:87:F6:0A:7D:C2:90:44:E8:D8:99:E9:8D:5D:7B:71:78:5C
X509v3 Authority Key Identifier:
keyid:4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:a3:76:b4:d8:ff:61:cb:07:31:b4:d4:9c:f5:47:d7:a8:34:
a0:23:15:65:c7:16:82:40:05:32:24:7f:21:d2:40:7c:3d:18:
c8:25:a0:35:91:59:1e:55:f7:00:80:0d:b5:13:8f:66:47:85:
77:16:bb:c0:1c:42:d7:cf:0c:07:3e:d8:72:85:d4:de:b0:d0:
61:47:59:30:f1:04:0f:9b:52:90:1b:e1:b5:c0:f4:3b:51:12:
ec:85:25:54:91:2e:ea:3e:b2:79:41:99:b2:30:4a:2c:c7:b3:
ab:98:a4:37:52:1b:fc:ee:59:04:5b:29:aa:60:f9:70:06:26:
81:2f:a7:13:0a:ca:1e:7c:b4:1f:02:0c:52:66:6c:c6:d9:60:
42:b3:2d:6f:6e:05:3b:98:3c:a4:5b:ef:7c:23:f5:2a:79:80:
65:ec:cd:67:89:7f:1a:ed:ca:7f:3b:0f:10:fa:dd:73:af:14:
c4:5a:2f:43:62:d9:b5:82:3b:35:cd:d6:fe:1e:39:33:48:cb:
60:cf:f7:d0:ce:e3:a4:61:00:d2:ed:ab:fe:d4:0c:ed:05:3a:
b5:4f:89:1c:33:ba:06:bf:a3:91:0f:38:0d:b9:a5:06:8e:20:
36:50:67:64:e3:1f:62:ad:d2:b7:68:cd:59:62:16:c0:ea:10:
50:bf:5c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:07:04 2026 by rpki-client