
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
File: _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json)
Hash identifier: kLfapXffR9J7iX+h95nGGMNFQwuuuIeeu2oCjTFxF2I=
Subject key identifier: 06:9C:A0:5E:D0:F1:55:BA:6D:DD:FE:55:22:78:AF:E9:18:96:3D:0E
Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80
Certificate issuer: /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880
Certificate serial: 1230
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
Manifest number: 0FB4
Signing time: Fri 04 Sep 2026 18:38:45 +0000
Manifest this update: Fri 04 Sep 2026 18:38:45 +0000
Manifest next update: Fri 11 Sep 2026 18:38:45 +0000
Files and hashes: 1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: QxBCfz38sfxF63XCGfSiAvV7gMbHhbVKKivPVF2+v2E=)
2: A547705AF34A11EFA7A4C071C4F9AE02.roa (hash: BkPr25yKFO4OSu24mLv1IXHgIlBp7q8A5b/1fep419U=)
3: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: 3wvmSVm24Be4PT+QoB6fmiVi8khIAb17IJdvXSMd/Sk=)
4: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: FjzFovZu6aXM8z/dlqSuAPqXLgKsrC/1lTjiwdyZmIg=)
5: F6F6AB786FDB11F1B43A108286A30FBC.roa (hash: aET+cNgZKS0GKaXJlqoV2vv5I9MGflNRhrUA33fWNrU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl
rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 18:38:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4656 (0x1230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91620E0, serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880
Validity
Not Before: Sep 4 18:38:45 2026 GMT
Not After : Sep 11 18:38:45 2026 GMT
Subject: CN=6a9b1035-9428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:80:f5:91:4a:f3:19:53:f8:f7:b2:bc:00:
96:4e:0d:58:e6:34:55:1f:32:b3:84:f1:48:43:e0:
de:e4:a1:73:30:8d:16:8f:b9:f8:21:c0:73:af:6c:
63:e4:6b:cb:e0:b8:88:fa:70:44:9d:85:63:dd:56:
c5:99:ff:24:93:17:8a:5c:88:35:cf:18:07:df:0b:
36:16:4a:f2:1e:a1:33:44:10:1c:fc:eb:c0:ff:f8:
36:b0:7c:0d:6c:bd:5e:93:95:2b:00:3a:14:e9:25:
04:00:86:9f:61:d9:17:74:e4:cc:f3:19:4f:7c:57:
bd:39:41:18:81:d7:39:2a:4d:0b:bd:18:63:c0:47:
58:ba:9e:36:2a:29:54:b6:32:3f:e4:c6:77:35:97:
25:11:b5:69:b8:d6:20:fb:97:3e:cb:16:c6:57:97:
20:7f:7b:20:e1:78:e0:bb:51:9b:56:33:cf:9c:68:
cb:25:ee:f2:5a:66:a3:12:8a:ff:f7:50:72:3b:54:
2f:80:13:29:fb:c8:72:9d:8d:6f:2e:cf:fc:3a:6c:
99:d9:de:ec:cd:0a:1f:fe:3d:f8:20:cd:a9:82:da:
82:8d:db:91:4d:bb:90:97:a2:55:b6:50:2c:f8:70:
76:2b:28:f8:7e:60:98:81:77:b1:b1:3a:ac:fb:df:
cc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9C:A0:5E:D0:F1:55:BA:6D:DD:FE:55:22:78:AF:E9:18:96:3D:0E
X509v3 Authority Key Identifier:
keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ac:c4:3b:2f:88:51:d3:1a:1f:cd:21:09:95:15:8b:50:fc:
8c:85:48:c2:79:0e:08:ef:bf:da:67:da:a1:45:39:90:59:a4:
1a:8d:3e:9a:aa:e4:f0:bf:14:b3:5e:43:49:32:86:5d:86:66:
5c:ed:b2:5a:57:28:bd:bc:c6:39:9c:b3:31:3d:ff:b8:34:88:
ea:e1:51:43:2d:78:84:5e:fc:e1:22:6a:5f:be:f1:a6:1e:c2:
c3:f4:61:d5:e1:12:82:39:0c:6b:91:e4:1f:23:4e:e7:94:bd:
cb:fd:8b:75:62:5b:6f:e3:a5:ce:78:ae:ab:d5:3f:96:0b:92:
43:40:b1:04:9f:93:67:e9:55:c2:46:d8:29:2d:83:fe:33:6d:
6e:d2:3c:52:17:27:65:c6:11:61:82:ae:da:b1:2c:35:0b:f2:
85:b2:d7:ff:9e:7c:3b:ea:a9:bf:b5:64:09:aa:6b:d3:78:59:
24:ef:3f:c4:91:18:77:2a:b7:ff:4b:ca:e7:d3:92:cc:04:f0:
82:68:54:c0:97:3d:4d:99:5a:01:35:f1:33:e1:b0:cd:c9:a6:
a0:53:b0:46:24:d4:bf:27:db:d1:21:4b:34:48:6c:93:ee:a9:
93:bf:41:54:6f:d3:03:2d:6c:54:ec:0f:98:b1:fe:00:62:fc:
a0:c0:9c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:29:51 2026 by rpki-client