
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json)
Hash identifier: YBm4wV7wV657hbnDhfFweWNeS9DmIB+VVaNyEzuVPDQ=
Subject key identifier: D3:E9:1F:B3:4B:C2:56:CC:57:6A:D2:40:12:59:E3:F6:14:FF:3E:76
Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Certificate serial: 0F0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
Manifest number: 0EF0
Signing time: Tue 22 Sep 2026 17:35:15 +0000
Manifest this update: Tue 22 Sep 2026 17:35:14 +0000
Manifest next update: Tue 29 Sep 2026 17:35:14 +0000
Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: bA7K4KUWZKoe8k/gzfri+23NrkDnq1NDZhUJbwsLCtg=)
2: AC549BBCD64C11F086D19BCFA9248E41.roa (hash: vvgoFlOLUvNpwk59Pxo0XUWthaxoz+rQXYsEb/78o8o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl
rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3852 (0xf0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Validity
Not Before: Sep 22 17:35:14 2026 GMT
Not After : Sep 29 17:35:14 2026 GMT
Subject: CN=6ab2bc52-e3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:66:a5:76:8d:52:e4:6a:cb:ba:14:03:02:
65:d3:2e:ff:a4:7b:4f:8e:03:e9:be:26:cd:1a:b2:
2c:9f:59:ca:3c:3a:67:1e:1d:50:43:28:44:89:fb:
cd:14:33:20:63:f6:46:5f:59:c8:2d:d6:6d:29:4f:
c5:3a:04:76:a0:f8:6e:a7:22:43:72:9a:3d:66:92:
94:5a:f3:b5:75:2b:69:b9:b7:ba:2f:68:c6:26:8c:
6b:5e:90:f7:93:b6:db:8a:d8:9a:f1:66:91:8b:01:
e6:da:1b:13:8e:a6:a4:af:c6:97:13:c6:92:5f:7f:
c7:d6:2f:25:5a:1d:42:db:28:f1:ab:f8:79:2e:f6:
8b:57:9f:2d:6b:ea:9a:cf:29:a2:6c:9b:fd:e3:6b:
d6:27:13:b0:11:f5:9d:c1:77:f0:3c:a1:43:a7:77:
f8:c5:e7:9d:8e:8f:31:d9:ec:2e:2f:2d:5d:22:19:
e7:32:ae:cb:5a:d2:7f:0c:8f:f4:eb:e2:ff:f5:82:
4d:be:96:58:c0:45:f4:65:26:3e:b3:24:dc:f9:12:
e2:95:57:ed:76:1c:85:4f:ec:31:4a:b8:a5:d9:76:
b3:41:c3:7f:17:13:99:5a:e0:bf:8d:fe:42:75:86:
d9:4d:cb:f8:f3:8d:ed:4a:a7:77:27:07:b0:ed:70:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E9:1F:B3:4B:C2:56:CC:57:6A:D2:40:12:59:E3:F6:14:FF:3E:76
X509v3 Authority Key Identifier:
keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:03:f5:f9:3c:e9:4e:b0:a1:51:25:01:79:d7:6b:26:f9:c4:
1e:49:51:86:09:ef:9e:26:60:69:3b:65:84:f7:1e:12:f3:c9:
60:02:29:59:04:b1:db:41:98:4a:bc:65:a4:44:51:9a:61:a4:
5d:e8:54:df:f7:36:c6:58:08:83:a4:dc:2e:06:21:9e:26:ad:
57:1c:7b:8a:55:2d:fb:a7:63:9a:40:20:06:7b:0c:0e:ae:91:
9b:4d:0a:bd:fd:17:52:c2:0c:ee:dc:85:a2:48:7d:13:3d:13:
84:74:e5:99:f9:2e:de:70:b0:e0:52:f8:fb:bf:09:b9:c0:01:
83:d9:ed:77:2c:34:31:c1:6c:f2:3e:3f:ee:28:3b:93:04:f1:
0b:14:13:17:c0:9d:1c:7d:7e:b3:e9:05:57:6d:27:9d:51:3b:
d8:a8:11:ad:bd:2e:96:36:99:c0:66:83:a2:7d:67:1c:fe:72:
af:8a:cd:80:db:ff:1f:76:6f:48:18:6a:4f:fd:f4:4f:7f:3d:
9d:45:2a:54:f9:55:80:2e:3c:72:85:ab:24:24:67:96:07:0e:
f5:0e:33:27:35:b6:4b:c6:6a:7a:e2:87:65:d5:47:bc:23:80:
a9:6e:ff:3e:e3:17:bb:cb:f2:52:9b:f9:af:9a:c7:45:8f:94:
c9:2e:59:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:26:52 2026 by rpki-client