
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
File: tsp04BddZ-Guvoa_44xciY8mK4w.mft (raw, json)
Hash identifier: cdVp7UTGNscC5VFMeQg0K2/iIe8CKeYd7rEu5Dnuan0=
Subject key identifier: FA:9F:46:8E:81:6D:67:68:97:3E:63:DA:54:28:AA:6B:54:47:67:01
Authority key identifier: B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
Certificate issuer: /CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
Certificate serial: 02D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
Manifest number: 02C0
Signing time: Wed 23 Sep 2026 01:12:16 +0000
Manifest this update: Wed 23 Sep 2026 01:12:16 +0000
Manifest next update: Wed 30 Sep 2026 01:12:16 +0000
Files and hashes: 1: tsp04BddZ-Guvoa_44xciY8mK4w.crl (hash: nFNvRtIDSf3U4W7qFolbVCi5w9XykpkhnhmBu3oJXvQ=)
2: 158B72F480FB11ED9B35954DC4F9AE02.roa (hash: vCFJH0y2zLT6RtNl1fKrvOFGF6otZx/dSySN5y76muE=)
3: 1627927480FB11ED9B35954DC4F9AE02.roa (hash: JGThLscl6gYWty7onPVj55tcNOzgZj9wzjYyxf+XyoM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl
rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724 (0x2d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EA40, serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
Validity
Not Before: Sep 23 01:12:16 2026 GMT
Not After : Sep 30 01:12:16 2026 GMT
Subject: CN=6ab32770-023e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:2d:c1:06:98:9c:b6:99:2d:2d:e2:ae:c0:
94:45:a8:18:06:2d:d9:3a:dc:07:68:19:5b:f4:92:
ee:43:8e:48:51:6a:b1:9b:de:d2:2f:9e:ba:7e:81:
40:bf:6a:e2:54:77:e9:6a:1a:2f:86:08:82:30:1e:
cf:ff:7a:11:6e:b4:11:8b:31:4a:cc:24:81:49:7b:
e9:bd:c1:ef:1b:de:ba:2b:af:a2:2d:57:d3:50:e9:
8b:eb:10:d8:27:d7:e3:c4:72:9b:5e:c1:01:fc:5c:
9f:23:81:fc:58:c5:e4:47:53:65:13:52:bc:47:04:
86:6e:24:f6:a4:ee:2f:77:b5:45:59:26:f6:8d:66:
ec:eb:81:bb:83:3f:91:58:23:ee:9d:3f:20:25:af:
10:ba:22:34:18:67:1b:ac:96:7c:73:6f:0f:e0:ff:
32:1c:57:28:b6:c7:8b:43:4b:e8:7c:5c:e0:53:ee:
d4:d5:2b:34:2e:b1:41:77:e5:36:d2:b2:1b:9c:29:
4a:b7:ba:ef:cf:5f:b8:60:6c:d7:8c:a5:25:a0:67:
fe:e5:34:e2:83:06:d8:5b:c3:7a:3c:d4:15:9b:df:
0e:ea:95:53:46:46:0a:14:2c:40:2f:db:25:d6:09:
41:89:28:dc:e5:b1:3d:0d:d2:b5:f4:fe:48:0e:5a:
b9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9F:46:8E:81:6D:67:68:97:3E:63:DA:54:28:AA:6B:54:47:67:01
X509v3 Authority Key Identifier:
keyid:B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:bf:b4:e4:ac:75:f4:16:16:0f:9d:2d:85:7e:18:0a:b0:91:
f1:39:62:b8:08:ff:fc:3a:d3:95:7b:47:82:db:65:b6:ff:27:
83:c1:1b:48:e8:ff:da:27:ba:98:70:58:7f:d4:78:9c:44:6b:
7c:df:65:ba:2b:a6:bd:ae:b0:45:37:30:b3:6d:c5:c4:6d:ef:
f4:00:ad:df:80:03:1d:aa:3a:b2:39:a5:44:57:8d:1f:c3:84:
ee:65:84:50:4b:fd:b8:53:54:1f:da:b8:90:e8:bb:58:0c:58:
10:50:e8:9c:5e:af:a4:b3:d1:88:a9:ad:98:34:a6:ca:fd:71:
ab:20:82:80:ac:f5:d6:0f:28:4f:28:89:b4:46:47:4b:c8:4f:
39:d4:7a:20:38:f7:b2:e1:18:39:af:be:d0:db:d8:71:ca:4d:
d5:40:91:ab:d7:60:f4:5e:f6:37:b2:bc:ec:23:36:b1:93:9c:
d4:e0:8c:b0:ed:e9:e9:55:80:9c:90:35:d1:74:7a:9e:b0:ee:
d2:6b:b1:34:d7:89:fa:b3:bc:cb:4f:b0:1c:ef:41:00:e1:a3:
ad:03:65:c5:5b:52:c4:bd:c5:c4:30:4f:00:ff:de:4e:1e:a9:
5c:3e:98:51:8f:b3:50:c3:e0:96:0f:30:ca:73:34:de:a3:cb:
8e:aa:25:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVBNDAxMTAvBgNVBAUTKEI2Q0E3NEUwMTc1RDY3RTFBRUJFODZCRkUzOEM1Qzg5
OEYyNjJCOEMwHhcNMjYwOTIzMDExMjE2WhcNMjYwOTMwMDExMjE2WjAYMRYwFAYD
VQQDEw02YWIzMjc3MC0wMjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp18twQaYnLaZLS3irsCURagYBi3ZOtwHaBlb9JLuQ45IUWqxm97SL566foFA
v2riVHfpahovhgiCMB7P/3oRbrQRizFKzCSBSXvpvcHvG966K6+iLVfTUOmL6xDY
J9fjxHKbXsEB/FyfI4H8WMXkR1NlE1K8RwSGbiT2pO4vd7VFWSb2jWbs64G7gz+R
WCPunT8gJa8QuiI0GGcbrJZ8c28P4P8yHFcotseLQ0vofFzgU+7U1Ss0LrFBd+U2
0rIbnClKt7rvz1+4YGzXjKUloGf+5TTigwbYW8N6PNQVm98O6pVTRkYKFCxAL9sl
1glBiSjc5bE9DdK19P5IDlq57QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPqfRo6B
bWdolz5j2lQoqmtUR2cBMB8GA1UdIwQYMBaAFLbKdOAXXWfhrr6Gv+OMXImPJiuM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUE0MC80OTA2RjJBODgw
RjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFotR3V2b2FfNDR4Y2lZOG1L
NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3RzcDA0QmRkWi1HdXZvYV80NHhjaVk4bUs0dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUE0MC80OTA2RjJBODgwRjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFot
R3V2b2FfNDR4Y2lZOG1LNHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApb+05Kx19BYWD50thX4YCrCR8TliuAj//DrTlXtHgttltv8ng8EbSOj/2ie6
mHBYf9R4nERrfN9luiumva6wRTcws23FxG3v9ACt34ADHao6sjmlRFeNH8OE7mWE
UEv9uFNUH9q4kOi7WAxYEFDonF6vpLPRiKmtmDSmyv1xqyCCgKz11g8oTyiJtEZH
S8hPOdR6IDj3suEYOa++0NvYccpN1UCRq9dg9F72N7K87CM2sZOc1OCMsO3p6VWA
nJA10XR6nrDu0muxNNeJ+rO8y0+wHO9BAOGjrQNlxVtSxL3FxDBPAP/eTh6pXD6Y
UY+zUMPglg8wynM03qPLjqol5A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:03:40 2026 by rpki-client