
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft
File: Tcfii1RvKgtTjozfgy2aofN8yOQ.mft (raw, json)
Hash identifier: gBMCddbb9qH0AaiPfewxTQcL/MWQIojFQ5wrqPAJhis=
Subject key identifier: F3:59:BC:07:C4:F6:3D:7E:91:B4:85:A4:DD:35:FA:14:E6:2C:9B:B0
Authority key identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4
Certificate issuer: /CN=A91423C1/serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft
Manifest number: 0183
Signing time: Tue 27 Oct 2026 03:01:05 +0000
Manifest this update: Tue 27 Oct 2026 03:01:05 +0000
Manifest next update: Tue 03 Nov 2026 03:01:05 +0000
Files and hashes: 1: Tcfii1RvKgtTjozfgy2aofN8yOQ.crl (hash: hGP3r55SJhKkU0Ra7pSgeoRpnVABpAMHxqo8cskINDE=)
2: 1C6D5ED2C51F11F08993E41BC4F9AE02.roa (hash: h9DoWAti9FtevIgArDst4H6dPePV+rhbEHLYlKOnyqw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl
rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91423C1, serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4
Validity
Not Before: Oct 27 03:01:05 2026 GMT
Not After : Nov 3 03:01:05 2026 GMT
Subject: CN=6ae013f1-1df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:fc:d8:be:b6:b4:8c:52:42:70:16:32:03:
b0:24:98:8e:80:6a:91:9a:9a:99:1c:23:4c:14:02:
81:7b:a0:30:de:7a:48:57:79:cd:0e:13:c0:aa:01:
13:09:15:a2:81:a1:3d:f1:4c:5a:30:a4:f0:6b:7e:
4f:f6:8c:8c:b3:88:4f:ee:16:71:4d:80:ee:25:5f:
37:bd:0e:92:20:80:6f:cb:77:5b:0e:1e:40:15:c2:
43:97:38:e6:94:28:03:a5:68:4f:6d:e7:42:e4:db:
27:ca:1d:c9:fc:fa:56:c3:56:2c:a8:61:64:c4:77:
86:f1:fd:b0:cf:ab:9b:1e:16:cb:0c:55:50:51:72:
85:ee:64:1a:55:7f:cb:1c:c5:23:7c:6a:07:08:f0:
27:ab:4e:ef:c9:09:3a:02:a1:55:72:05:c4:16:86:
6f:b5:d2:4e:fb:16:02:82:19:58:ff:75:3c:76:c7:
07:e6:4f:b7:4d:da:86:aa:41:a6:a1:0f:3b:29:26:
cf:f3:cb:2c:46:7e:aa:d1:85:d5:90:b1:b4:48:7e:
ae:26:45:28:75:6f:1a:8e:24:7d:12:52:f8:be:f7:
85:51:be:91:84:28:fa:64:a1:89:58:c0:c6:3f:a3:
e2:d4:ea:6f:ec:ef:37:99:1d:c2:da:7b:21:8b:46:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:59:BC:07:C4:F6:3D:7E:91:B4:85:A4:DD:35:FA:14:E6:2C:9B:B0
X509v3 Authority Key Identifier:
keyid:4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:49:dd:ca:d9:21:62:61:7e:b7:eb:d3:54:ee:60:e8:e4:3f:
b1:fc:db:b1:9c:16:4d:89:56:33:4f:4d:42:14:25:3b:f0:9b:
9e:24:cb:01:eb:79:6c:17:81:da:b9:4d:f9:d8:87:01:d3:61:
7d:cc:fa:c5:2f:e9:de:a8:5d:b0:ce:6b:99:ad:b1:a0:46:31:
46:ea:39:55:e6:e2:d2:9c:f0:62:dd:14:03:f8:ef:2b:32:09:
bf:a7:ba:91:ed:6a:c1:56:1c:36:af:0d:8c:dc:c6:b1:1d:93:
29:0c:56:48:28:9a:ab:5f:8f:c0:9b:b4:15:a7:d4:9c:49:d7:
47:ca:37:19:5e:ac:5f:e6:ba:d6:e7:f8:e8:fa:28:c0:7f:79:
a7:fc:85:10:8a:09:cb:f4:bd:33:35:82:b4:d5:6a:b8:52:9f:
cf:22:70:1b:bb:49:7f:e4:9a:fd:30:53:a2:a7:12:19:0a:f3:
67:75:ce:9e:a7:a4:5a:30:49:44:0d:76:a2:f2:c1:95:7b:4f:
1e:40:09:95:fb:4b:27:3c:72:65:0c:0c:2c:e7:b1:2d:79:16:
d6:58:db:c3:16:ca:33:ac:8c:a0:5d:9c:1e:76:af:4a:9d:fd:
4c:77:7e:18:8d:1d:1c:a0:72:92:c3:4e:2f:f6:87:64:b8:7b:
9d:89:04:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:38:31 2026 by rpki-client