
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
File: TSeJUeK9itKFuUCo6p5X43lxHms.mft (raw, json)
Hash identifier: AquV3xxyj8o7qJIG8fjUgYrk2TG7opDjKBS9zqB/jDA=
Subject key identifier: B2:54:D9:4B:27:7D:25:A9:66:E4:D4:7D:54:3F:DE:8E:05:77:33:4F
Authority key identifier: 4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
Certificate issuer: /CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Certificate serial: 0499
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
Manifest number: 0490
Signing time: Wed 21 Oct 2026 00:09:13 +0000
Manifest this update: Wed 21 Oct 2026 00:09:13 +0000
Manifest next update: Wed 28 Oct 2026 00:09:13 +0000
Files and hashes: 1: TSeJUeK9itKFuUCo6p5X43lxHms.crl (hash: uZOy1NWiMkAadTNQGDLxhcypi0g2VSzvlucxWLLA0Zk=)
2: E8E194B8A5CC11EC85A86A1FC4F9AE02.roa (hash: bD2C5/DgW70VY50hOjBpLKvWt5B7bnvlv0UfjlxEnfk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 00:09:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1177 (0x499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91342C5, serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Validity
Not Before: Oct 21 00:09:13 2026 GMT
Not After : Oct 28 00:09:13 2026 GMT
Subject: CN=6ad802a9-fa6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:38:15:cb:ed:66:54:57:3c:3c:49:5f:2b:
66:82:9a:c8:35:b9:53:ac:55:fd:8c:74:e9:ef:32:
5e:6f:8b:8a:d7:0c:da:8e:01:6d:c2:a3:0c:6a:a1:
18:57:cf:70:e2:10:3d:33:bf:22:bf:f0:50:82:51:
0b:69:ab:71:1a:48:1e:4b:e6:f6:6a:90:c9:77:5b:
c2:85:be:e6:d0:44:25:3a:3c:16:7c:ba:b1:5c:62:
8d:a6:d7:5d:fa:a1:35:ba:93:9a:d8:7c:3a:75:2b:
59:1a:fa:20:f5:1f:63:5c:93:0f:10:c2:86:22:9f:
41:90:67:3c:dc:47:a4:50:10:a7:b1:5d:0a:b5:b8:
21:5e:31:f3:0c:f6:9d:a4:e9:2c:a8:20:89:ec:75:
50:c1:87:1c:51:12:29:1f:dc:fd:57:cb:67:d2:d9:
df:f8:1c:51:de:f3:ac:3e:2e:99:18:24:b2:32:9b:
e6:d7:17:6f:39:4b:ee:9e:0c:76:59:e4:a1:80:98:
d9:f2:87:f5:b4:76:d5:66:ce:14:69:86:98:b6:5f:
2d:7d:29:41:6d:ec:1e:64:88:8a:fe:a6:e3:80:c9:
da:77:1d:67:ee:2e:68:cc:e3:53:29:3f:fc:72:93:
02:94:54:3c:84:1f:b5:a5:6c:ba:74:82:db:7d:e9:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:54:D9:4B:27:7D:25:A9:66:E4:D4:7D:54:3F:DE:8E:05:77:33:4F
X509v3 Authority Key Identifier:
keyid:4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:64:4f:79:9a:59:47:b1:06:ea:51:a0:a8:da:71:c1:3c:be:
3c:4e:93:37:c8:38:d8:91:53:90:d8:6d:2c:50:4e:49:7a:87:
c1:14:13:15:29:d8:b6:a2:74:35:d3:fd:12:64:77:ee:f6:18:
ec:5b:5c:03:16:8f:93:31:50:b6:ef:e6:61:6e:6b:8a:07:49:
9c:56:b2:43:d8:63:d8:f5:9a:f3:df:9c:3d:24:ac:b4:3b:a8:
fd:b8:4b:e7:79:e0:d6:b6:19:3a:10:ab:e0:0e:e8:48:a0:21:
bb:ff:da:22:64:6c:61:0d:ab:b1:e5:72:47:2d:68:28:94:dd:
ad:b5:b8:3f:c3:ac:60:aa:b7:8a:0b:7b:3e:80:a9:3d:8e:3b:
88:18:6e:ee:35:20:e7:20:61:7d:9f:47:17:f3:a5:ae:cb:70:
90:87:98:c1:0e:5e:de:75:1d:c2:b2:3c:b1:30:ec:12:64:a8:
f1:8b:60:07:91:d6:14:5c:da:ab:0c:ad:bc:e4:a4:1f:93:c4:
09:4a:ae:32:4d:74:fc:99:b1:f6:ee:9c:ff:53:46:a0:06:ac:
9b:20:57:05:1d:46:7e:bb:98:43:e4:b7:04:62:73:da:e2:f5:
00:50:55:63:8d:5b:72:1b:c3:4f:9a:25:1e:99:c3:96:cd:62:
9c:a6:39:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 14:50:34 2026 by rpki-client