
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
File: TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft (raw, json)
Hash identifier: CXv3ov1lP6QWCpEubsTlCStNn/DTeVTZcdDOJi1AE5k=
Subject key identifier: C8:CF:F0:B4:20:18:3F:6C:0A:7B:0C:AC:17:76:03:AB:56:4F:1F:F2
Authority key identifier: 4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D
Certificate issuer: /CN=A91847A4/serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
Manifest number: B4
Signing time: Sun 01 Mar 2026 08:23:35 +0000
Manifest this update: Sun 01 Mar 2026 08:23:35 +0000
Manifest next update: Sun 08 Mar 2026 08:23:35 +0000
Files and hashes: 1: TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl (hash: mKKXCqTwAfM6uMgsSdbLrkePAuz/7TOo9ObMg8iCSJg=)
2: 1201EAF6083911F0B43D9172C4F9AE02.roa (hash: J+SOazezAnnNxrhHdeWBnb2C7IQYkYVgwLiko+keJWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl
rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A4, serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D
Validity
Not Before: Mar 1 08:23:35 2026 GMT
Not After : Mar 8 08:23:35 2026 GMT
Subject: CN=69a3f787-d230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:79:e9:fe:ff:0d:b3:5b:ea:72:26:7c:16:1e:
f6:3a:0d:a5:28:72:15:31:14:41:67:20:4e:13:5b:
42:40:f8:81:82:bc:15:12:ad:df:ed:06:02:83:43:
b5:05:02:6d:96:f0:ba:48:1e:ea:cc:c9:12:d1:48:
e6:f4:e3:33:d1:52:dc:49:75:45:2c:62:62:0f:bc:
ff:c0:3e:56:60:5e:69:38:ad:24:eb:11:48:0f:a0:
46:ee:a6:ce:31:8a:20:3a:3c:01:91:a1:ef:45:ee:
fc:1c:c1:36:27:13:7d:1b:73:18:bd:98:54:17:27:
f7:71:de:8e:cd:54:31:1b:82:86:a9:6b:73:42:dd:
26:e5:29:24:ec:f3:41:7b:53:bb:ad:e6:b7:f3:1f:
27:3f:95:e7:c9:7d:36:c3:e4:f2:6c:4b:fd:1a:df:
bb:4c:7f:f9:7e:a8:0a:da:70:4c:89:58:00:cd:b3:
55:61:e6:63:81:54:38:eb:7e:eb:34:6c:08:3c:5d:
48:45:80:0c:25:8c:86:80:06:fd:5c:65:c9:0a:93:
9b:81:5f:67:47:e1:1a:7e:86:1b:17:73:b2:13:fd:
5f:22:e3:dd:a8:19:9c:7c:f3:ce:8e:13:c1:67:53:
03:a2:d3:bc:f4:48:c9:9a:28:73:3c:6b:08:60:18:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CF:F0:B4:20:18:3F:6C:0A:7B:0C:AC:17:76:03:AB:56:4F:1F:F2
X509v3 Authority Key Identifier:
keyid:4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:35:11:63:69:d3:e4:07:e3:b0:07:a5:de:75:5b:54:6a:96:
5f:62:ed:ef:38:01:5a:94:2c:1e:2e:db:b4:98:14:fd:ae:14:
cd:6d:9b:33:fd:5b:ae:17:7c:f6:73:c9:30:ef:f9:ad:c4:c4:
13:d6:62:b7:4f:e6:93:70:47:a2:d9:71:87:1c:2d:ff:3c:7b:
ad:71:45:1e:70:51:54:a5:86:be:dd:c1:28:c3:da:bf:de:64:
6d:e0:9b:2c:5e:f1:8e:b8:b2:6e:02:39:a5:34:22:dc:4e:80:
d4:db:38:c2:35:2c:60:31:56:71:2c:33:be:56:8d:88:bf:bb:
b9:0b:59:36:f0:c2:e0:ca:25:69:49:34:65:33:5f:bd:96:8b:
22:72:91:66:be:46:f0:0f:68:c7:66:ba:15:6a:2d:35:1f:26:
15:91:ca:f2:f3:bd:0c:7f:41:26:b9:d6:77:d0:e9:20:ca:f9:
77:23:88:79:f9:6a:6d:ee:7c:02:c3:ef:02:32:c2:1e:a8:ba:
db:ae:64:87:27:45:57:18:14:de:49:31:f5:55:99:98:c3:b7:
5a:c8:9f:3d:bf:25:58:34:f9:91:39:43:54:fa:2e:0f:2b:5a:
1e:43:df:94:2e:c4:83:b4:be:00:09:28:90:55:0b:52:03:85:
71:8e:a9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:52:04 2026 by rpki-client