
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
File: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft (raw, json)
Hash identifier: WO2NtkyeTa89Km81gUuB3Cus/iXuLSe49Its28TkhIE=
Subject key identifier: BE:C3:73:D0:3A:6B:2B:17:79:76:85:2C:D3:DE:52:B2:43:22:A0:F0
Authority key identifier: 4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27
Certificate issuer: /CN=A91C7991/serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427
Certificate serial: 0920
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
Manifest number: 0915
Signing time: Sat 04 Apr 2026 20:04:26 +0000
Manifest this update: Sat 04 Apr 2026 20:04:26 +0000
Manifest next update: Sat 11 Apr 2026 20:04:26 +0000
Files and hashes: 1: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl (hash: 2+N9tno9snKwCDQ8BP52RQr078U/tOPpiZDgc7z840s=)
2: 456CD12E5F0111ECAE4F0286C4F9AE02.roa (hash: pJ8W3JL1SvT+9bYhgevlA/zqowg96Jc82pj7ld8nZi8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl
rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2336 (0x920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7991, serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427
Validity
Not Before: Apr 4 20:04:26 2026 GMT
Not After : Apr 11 20:04:26 2026 GMT
Subject: CN=69d16eca-a1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:82:66:58:de:5d:49:70:93:ec:44:73:23:
14:e0:34:ed:30:e2:e4:e9:a1:8c:4b:dc:01:7a:56:
57:ce:32:5b:79:1f:2d:54:c0:8f:19:76:da:9e:12:
a4:81:9b:ad:84:88:f4:20:f4:30:d4:79:44:23:03:
a5:f9:87:87:7f:38:0c:de:80:93:81:07:6a:be:52:
a8:5d:be:9b:e1:c4:f0:74:be:d6:7e:f7:c7:e6:f3:
e5:de:65:90:7f:b2:3e:60:38:1d:bd:10:6b:9f:3b:
bb:85:53:81:14:f5:00:6c:c5:93:c9:83:44:86:ac:
97:46:3e:4c:c1:60:c0:b3:ad:76:9e:34:0e:e0:af:
fc:67:08:9f:c7:81:f2:42:5f:e1:c6:95:1e:21:7d:
11:10:d2:e4:cf:5f:e4:d5:9a:0e:97:99:3f:b9:36:
6d:d8:98:17:91:56:2b:99:c2:08:04:5c:22:e7:fe:
a0:41:cb:99:4d:21:74:82:38:e9:ce:9e:74:61:4c:
0d:fc:85:ad:60:23:18:34:12:bf:76:15:02:58:42:
f9:ac:d5:4c:b6:24:9a:06:bb:77:e3:5d:85:bc:fb:
60:fb:ee:f8:6c:6d:ba:bc:9f:18:af:fd:08:d3:5f:
d2:cf:ec:ba:ca:ca:30:5f:75:c8:a6:f2:df:4e:70:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C3:73:D0:3A:6B:2B:17:79:76:85:2C:D3:DE:52:B2:43:22:A0:F0
X509v3 Authority Key Identifier:
keyid:4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:6e:84:e9:a3:5c:d2:fd:83:00:7e:12:47:bd:4e:cd:8d:99:
1f:b7:3d:e2:62:d4:27:9b:0c:88:cd:fe:fc:34:b8:75:91:fc:
17:75:bb:7f:07:79:c8:21:6a:ae:06:69:6f:86:ca:d0:7e:27:
98:ed:de:72:2a:f4:38:17:95:cf:ff:3d:f2:6a:d7:02:5b:17:
60:f2:be:41:90:3e:a4:44:d3:ea:30:c4:e3:ac:9f:d6:d4:c3:
68:e0:fd:44:50:d3:8e:7f:12:a0:4f:42:d9:84:8d:b3:43:d2:
8d:67:16:44:d0:12:24:ab:fb:3c:d4:17:13:ab:67:ea:ca:4c:
12:e5:17:e2:30:da:52:54:18:3d:cd:60:c7:87:bf:76:b4:0a:
88:a6:2c:6b:cc:e4:33:dc:44:32:fe:49:22:d9:88:23:36:c0:
a9:ef:8b:e0:92:3d:8a:1f:fb:4b:46:f3:69:1b:51:06:3f:29:
52:fc:59:13:19:e4:63:be:6e:f8:1c:d9:db:46:b4:e6:03:d8:
c8:3d:36:4e:e9:3f:16:83:46:6a:27:c7:b0:30:c2:df:4c:23:
c1:ae:6e:b6:96:9d:7f:8b:ee:0e:34:94:26:00:68:d8:58:71:
e8:31:4e:86:cc:a4:81:8d:57:c0:71:b0:b3:e0:ea:18:b6:ab:
cf:ea:e2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:50 2026 by rpki-client