
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File: tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier: KaomkuwSj/YVN3fWAyIVyQQAAtVgW+e2Neya3palLu0=
Subject key identifier: 85:91:7D:61:5F:E4:E2:16:C5:23:F1:FC:3E:60:09:65:90:E1:BC:9B
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0D9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number: 0CC5
Signing time: Mon 20 Jul 2026 19:11:26 +0000
Manifest this update: Mon 20 Jul 2026 19:11:25 +0000
Manifest next update: Mon 27 Jul 2026 19:11:25 +0000
Files and hashes: 1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: 0NpaPS0MyJgVrA7WGoyuaZinDe7v7oUyCIJiKasSIa0=)
2: 43DCAEE0BBE811F092C97714C4F9AE02.roa (hash: s+8+Ay/MDWEzNmYQjEi8P9yXENJTqx4r4dR7RY92skY=)
3: 5164F13EDBD811F0A0A88CE756641951.roa (hash: S+wwMGadgYhMS5OREKeaPh6PDBaoFk4/7hdgf2PBnsw=)
4: 1D231FDEBDD511F0BAEEED5AC4F9AE02.roa (hash: bq9TzRhG0YcuxnkwLOhAfWs5GL/Qvk3+Q63cN6+9Ro4=)
5: F894F5B0E09411F0B3B2B389426F56BC.roa (hash: g2GkrwqDM8g4EPcoRU14VtmMWrRkEc3nm/o6l5+kRws=)
6: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: gHvNsWly8Kw30Typ48MzQXoDCYERYi0RW34Z6gmffVg=)
7: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: rfIVMs6AUfnF9P9/mHach4AIencfTT3AboN2vIjJlGQ=)
8: 50C74740608511F1B54688666E47A888.roa (hash: IQGnQ5zQbYNcFjoaC/X8FlYzSh99L1UkIksPVrl/4Lc=)
9: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: A4zYqw73DHHyadBQLcyhIlD6IDAEqxDy3foGsjv4EZ8=)
10: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: X5kHDpuuQNfIGRpaueB+R7zUfzuivixJGb6q6/nzsAU=)
11: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: aEhA9+ssD2dfx+1WtFOaw2FrI9zywwb1i6+vFoIN8fo=)
12: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tLlrYfQgXxnaToikebv9ZSOJv+09BIPvjOuMTXnI+m0=)
13: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 6JLMteJnja7+tiZnKdI5bf0UkqKb/Uh5AX2ANHa//84=)
14: 6ACD5ACC227711F1A91DCF18A4833773.roa (hash: TJMnHoqNrDu0s7s8nY8tdFhEqoWxtnw6hx5yIb/HoEo=)
15: E3903588DA3311F082FD85DA8AD3641D.roa (hash: MfOj3lbGuO/G5TuCaMkDAViR5jscnY+4WI5jIiqpGsA=)
16: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: rx1Mf7ylLJlz5TrZQMaxu72qnNGJnnaZIoeFSJobN+E=)
17: 622E19EEDA1811F0A393A6F584D3641D.roa (hash: RcYolDaRAN1Hi//EmOTv5sFW3I9hLGGajXq2gFlI3o8=)
18: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: lZKpR1VVIPheOf685hGoxyJuXh0TJ+bcZ5UNcYowwXY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 19:11:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3487 (0xd9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Jul 20 19:11:25 2026 GMT
Not After : Jul 27 19:11:25 2026 GMT
Subject: CN=6a5e72de-f24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:dc:ad:c8:fe:26:49:0f:a2:71:ef:a6:ba:
8d:0c:14:a6:0c:59:67:ca:da:0b:d9:ff:5a:3e:c3:
7e:81:b8:e3:eb:fb:09:41:b9:da:dd:6d:a5:bc:a3:
da:f1:ba:1e:73:cc:71:87:78:57:19:d7:7f:24:24:
b2:f0:08:ad:cc:33:6d:5f:2e:d8:f2:9f:c3:0b:36:
2c:52:e5:e7:1d:9a:8c:ea:98:ca:bb:f6:c6:e7:e7:
f5:40:97:d8:f5:9d:1e:37:2f:12:93:4d:c3:70:78:
e6:71:ca:fc:95:0b:f2:a5:85:41:21:51:28:c4:5a:
26:a1:fb:2e:63:83:35:e7:95:98:8c:48:50:00:78:
ee:22:d6:1b:ed:ea:3f:c5:38:67:9f:22:9b:33:cd:
2c:89:ea:f9:a7:b6:85:fa:73:7e:0f:0d:41:71:83:
f2:8c:96:ce:cf:31:f4:89:2b:4c:26:15:28:90:e4:
1f:fd:96:30:b5:64:2c:8e:a6:62:80:66:6a:56:22:
96:06:11:ab:4f:bb:45:17:1c:76:d6:50:86:6d:04:
63:64:82:f8:60:12:52:d8:dc:a4:d8:3c:4c:cc:f6:
ec:b5:0b:06:60:38:28:c3:67:bc:b5:2f:80:39:79:
d3:cb:f7:7f:86:ec:8c:a4:78:df:20:59:35:30:f8:
ab:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:91:7D:61:5F:E4:E2:16:C5:23:F1:FC:3E:60:09:65:90:E1:BC:9B
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e0:0e:9c:38:1f:3c:ee:f3:13:b0:ec:34:4d:6c:44:c4:5b:15:
06:aa:84:22:3a:27:6c:a8:2b:b1:87:01:c2:18:45:f3:8b:a4:
17:f4:15:47:e8:88:b3:9f:b8:ba:e7:f4:2c:2f:c7:0f:eb:85:
86:fe:a9:b6:28:ae:80:9f:b3:7d:b8:03:9d:08:e6:6f:1c:1e:
c4:f7:3b:d4:1c:ff:1e:b0:91:df:23:cb:25:f5:96:e4:2f:bf:
74:e6:a1:28:17:9b:48:83:ed:db:51:32:67:7a:22:38:8b:e3:
71:cd:79:12:26:94:12:7d:75:ed:27:44:db:ac:3b:e3:55:79:
ae:3e:0e:22:38:5c:f6:e6:af:a4:10:78:21:45:b3:c4:c7:f2:
f8:49:bb:f7:9d:67:a1:bc:c1:d3:13:5b:8e:85:06:a1:02:98:
54:d4:16:27:08:5f:c6:82:76:9a:d6:94:74:1e:c4:ed:13:ce:
53:57:ff:16:18:a9:a0:6c:40:c5:85:ab:8c:b1:38:8d:cc:4d:
92:82:31:5c:21:e3:e2:d9:2f:9e:74:da:25:74:4f:84:89:7d:
e3:46:aa:9a:7c:32:0b:60:17:ef:6e:e9:1f:48:2a:47:c7:f8:
29:02:f0:17:f2:d1:9c:19:a6:0b:ad:d1:78:6e:93:0b:d9:3c:
c4:f0:3f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:34:06 2026 by rpki-client