
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
File: TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft (raw, json)
Hash identifier: kL/aPHtj1xslZEsIV8FQ2oYSn6PzkN6nu0AoooT2bIU=
Subject key identifier: 00:42:87:5E:4F:39:94:18:CD:87:21:DC:84:C7:88:E8:32:9C:89:D2
Authority key identifier: 4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D
Certificate issuer: /CN=A91847A4/serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
Manifest number: EA
Signing time: Sat 13 Jun 2026 06:35:29 +0000
Manifest this update: Sat 13 Jun 2026 06:35:28 +0000
Manifest next update: Sat 20 Jun 2026 06:35:28 +0000
Files and hashes: 1: TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl (hash: msnmziTCEDJvB7jOiykemagOunXgM1P16dwyyuuNETI=)
2: 1201EAF6083911F0B43D9172C4F9AE02.roa (hash: rbHttiCNfct4rPH7XHoUz+IWP4BlD4I/02xhzj8Jyag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl
rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A4, serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D
Validity
Not Before: Jun 13 06:35:28 2026 GMT
Not After : Jun 20 06:35:28 2026 GMT
Subject: CN=6a2cfa31-22d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:30:47:38:e0:c2:e1:e1:7b:0d:dd:e4:67:
c3:c8:d3:05:c3:97:1c:ec:71:3c:fe:b2:15:cf:b7:
dc:e1:01:3c:8b:e9:bf:15:58:0c:70:9c:b8:b6:3b:
e7:da:df:cf:ac:f2:3b:45:6b:d0:08:69:08:82:cb:
20:ef:a7:12:e5:50:de:6a:a6:0b:30:54:c3:5c:38:
84:1c:30:98:5d:3e:ae:43:d0:45:d8:21:13:dd:35:
4a:08:f7:4e:75:b0:17:49:ae:7b:db:4d:c9:56:08:
2f:d8:e0:be:33:d4:f1:d9:3c:19:d0:09:91:75:76:
16:a2:c2:eb:c5:30:55:9a:c9:ec:03:d9:23:aa:d1:
1a:a8:8f:dc:10:43:09:ed:4e:2c:4b:8c:cd:33:bc:
15:29:86:d1:dc:0d:b1:72:84:35:05:eb:18:dd:02:
55:c5:c5:f7:ad:3a:1c:99:ad:74:24:dc:23:76:7c:
50:e8:0c:61:14:f2:88:31:48:51:ff:b9:70:a5:fb:
5b:38:fb:b5:b5:de:54:c2:79:82:69:9b:0b:4b:4c:
a9:72:53:40:da:a8:a9:88:2e:a8:97:ac:6c:43:24:
12:c3:da:1c:1a:e7:26:af:f3:b0:f7:0f:aa:5a:db:
de:ae:0c:e4:81:62:5e:fb:65:0b:18:70:d3:7c:d2:
6e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:42:87:5E:4F:39:94:18:CD:87:21:DC:84:C7:88:E8:32:9C:89:D2
X509v3 Authority Key Identifier:
keyid:4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:4f:0c:cf:29:01:e5:5d:25:48:a5:08:4c:72:ca:2a:77:90:
aa:f3:29:6f:9e:cf:48:7f:5f:ce:10:bd:97:64:ba:b0:7d:d7:
8e:6b:28:9e:38:35:39:38:c5:a2:25:bc:84:11:d8:04:1f:50:
18:80:f9:3d:c4:51:39:81:52:2b:78:ec:14:60:7d:ea:75:61:
9d:8d:a3:c7:11:2b:cd:a7:4b:93:9d:80:d2:ef:ac:bb:29:9d:
6f:41:69:7c:76:46:08:ed:c4:9f:a6:2a:3d:ed:8b:f5:cd:37:
07:19:c3:0f:33:07:36:01:a1:05:c7:25:98:03:83:8b:66:d6:
e2:d2:53:4c:1c:b2:9d:fd:68:54:0c:49:13:ca:43:32:01:bd:
b7:03:2f:46:e5:10:d9:bb:06:6b:f5:90:c8:b5:6e:64:2f:b6:
38:5f:2f:ef:1a:f2:48:47:ef:20:a7:d1:eb:0b:af:c5:b1:26:
45:b9:04:70:04:43:c7:91:04:85:5e:d6:88:06:26:4d:14:fb:
2a:2b:0a:02:58:21:80:93:8d:75:bb:98:ad:14:ce:48:5a:54:
27:de:4a:f9:56:05:8d:83:7d:86:4e:94:b6:1c:cd:8a:82:71:
65:4f:76:ee:d4:67:05:a6:a1:2c:3a:38:5b:a8:85:8a:3c:a0:
9a:47:ea:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:35:55 2026 by rpki-client