
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
File: tsp04BddZ-Guvoa_44xciY8mK4w.mft (raw, json)
Hash identifier: c/C+D/V8gQpByjM7aBCQM7ZHKqaxMrkKCxZRR48sPfs=
Subject key identifier: 4E:84:7D:C4:C4:AA:C9:D7:21:54:38:6A:B3:FC:79:EB:0D:90:C3:95
Authority key identifier: B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
Certificate issuer: /CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
Certificate serial: 02B6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
Manifest number: 02A2
Signing time: Mon 27 Jul 2026 02:56:15 +0000
Manifest this update: Mon 27 Jul 2026 02:56:15 +0000
Manifest next update: Mon 03 Aug 2026 02:56:15 +0000
Files and hashes: 1: tsp04BddZ-Guvoa_44xciY8mK4w.crl (hash: OJ8VLB8zReEBV1oXFzJhLp1rgSEzgjjxOlEP7RjJi9o=)
2: 1627927480FB11ED9B35954DC4F9AE02.roa (hash: JGThLscl6gYWty7onPVj55tcNOzgZj9wzjYyxf+XyoM=)
3: 158B72F480FB11ED9B35954DC4F9AE02.roa (hash: vCFJH0y2zLT6RtNl1fKrvOFGF6otZx/dSySN5y76muE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl
rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:56:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694 (0x2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EA40, serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
Validity
Not Before: Jul 27 02:56:15 2026 GMT
Not After : Aug 3 02:56:15 2026 GMT
Subject: CN=6a66c8cf-d8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:e4:e8:d7:c5:5d:47:4d:07:e3:e8:4a:ed:
6c:83:f9:7b:a4:07:2e:24:fd:71:ec:96:69:ec:16:
69:71:ee:70:0d:72:45:04:17:2d:59:dd:b3:b3:73:
40:48:7d:0d:2b:5a:1d:4a:ea:99:1e:1b:30:ea:9d:
04:e4:1b:3e:28:a1:b0:0f:8a:01:70:48:e8:77:70:
ba:61:db:2f:43:df:09:14:83:28:d9:fe:24:fa:e2:
92:97:60:10:22:c7:7a:f0:42:d9:51:ba:02:67:74:
96:6f:0d:33:95:36:2b:8b:5a:1f:83:31:1a:14:06:
dd:1c:61:86:04:be:16:c3:4c:f6:90:b7:42:30:ae:
79:9a:18:71:ee:b6:c9:83:58:54:f6:8a:b1:c0:26:
36:8f:59:68:f4:f1:c1:af:19:fb:42:15:d5:ec:69:
b8:7d:2f:eb:88:cb:a1:c3:70:e7:39:3c:99:b2:e6:
6e:d0:f9:51:37:13:94:83:a0:1b:59:65:16:a9:01:
a6:f7:ac:45:e3:ad:9e:3a:c8:30:45:2e:d8:d2:85:
12:5d:df:1b:99:44:fb:d0:3f:f2:73:f8:13:e3:6b:
53:01:b0:8b:3e:b6:04:8a:bc:7d:84:ba:ce:8c:81:
29:6b:de:49:d5:f3:6d:46:d4:d9:51:c2:af:63:06:
5f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:84:7D:C4:C4:AA:C9:D7:21:54:38:6A:B3:FC:79:EB:0D:90:C3:95
X509v3 Authority Key Identifier:
keyid:B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:ab:98:b2:67:4e:e0:3a:8d:88:38:f8:da:bd:3f:d5:06:3b:
62:df:a2:82:36:57:d0:68:bf:1f:85:7b:61:f9:3f:45:e8:33:
34:74:2d:20:bc:99:2c:e1:37:ed:df:bf:24:b1:6a:75:a7:80:
d6:ac:e8:4c:74:a3:c4:d5:a7:29:b8:cb:53:f8:80:97:b9:de:
ed:f3:9a:a8:1c:ef:53:e0:54:0f:05:9e:91:0f:6e:fb:51:7f:
37:10:db:9b:c6:a2:e4:15:f9:ef:6e:a9:73:6a:5b:a1:c6:be:
3a:8c:d4:f1:12:9e:1d:42:45:53:c2:f1:85:10:25:b1:b0:6e:
04:7a:16:2d:d3:a7:ab:a6:ea:84:8e:ac:70:c8:a6:ce:35:fd:
5a:4f:3c:a3:0c:42:5e:06:60:7f:6c:16:9a:ce:dd:47:11:a8:
e1:7d:b1:c3:e2:f0:fd:53:0d:5d:2c:8f:80:10:36:b2:f1:c0:
1e:90:d6:34:8a:b4:00:f2:b4:c4:6d:82:af:8a:dc:66:72:92:
18:12:e9:26:91:b7:4e:2d:a0:98:9f:80:66:93:3b:0d:25:8e:
35:91:0d:61:f2:f0:50:13:b5:e4:f7:b3:d6:d7:41:2b:cb:d2:
d7:ae:89:b2:6c:75:d2:cd:4c:8e:96:de:2e:ca:bd:60:0e:39:
45:88:91:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:33:01 2026 by rpki-client