
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
File: TCISGt-uP1dSgBZRUcP9MOOq_QE.mft (raw, json)
Hash identifier: zCYWTmro0qizgmiotAmDY1GBR3Wioyp7hkXwuMNBY9g=
Subject key identifier: 0D:37:2E:3F:23:52:89:CC:68:64:D3:1E:05:5D:74:3B:58:35:17:8C
Authority key identifier: 4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01
Certificate issuer: /CN=A91466E8/serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01
Certificate serial: 013A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
Manifest number: 0130
Signing time: Sat 03 Oct 2026 06:20:49 +0000
Manifest this update: Sat 03 Oct 2026 06:20:48 +0000
Manifest next update: Sat 10 Oct 2026 06:20:48 +0000
Files and hashes: 1: TCISGt-uP1dSgBZRUcP9MOOq_QE.crl (hash: oqpLRvJKEpTTOsJnVO2pgDhtQ7HIt02K5WHy0t6dd9Y=)
2: 02640B0CF97911EF99F9BE80C4F9AE02.roa (hash: oPlo5L+dmThc3DN/JkQ4cII8zNo3tnU0NaUYsNNVm+w=)
3: 67CB5FC0629411F0B7FA070FC4F9AE02.roa (hash: usxAkrOb+QXDTKez4UPIToUchB5RRueKaBewMioZa2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl
rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 06:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91466E8, serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01
Validity
Not Before: Oct 3 06:20:48 2026 GMT
Not After : Oct 10 06:20:48 2026 GMT
Subject: CN=6ac09ec1-c244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:e7:3b:14:93:a2:fe:d5:7b:f9:f7:52:1a:
0a:ad:c6:a5:8c:13:d4:10:29:a9:de:3b:8e:0a:23:
5b:9a:e9:bb:d7:f9:84:e6:f7:7c:9d:ca:5a:e7:10:
50:d1:2e:99:19:32:a1:b5:5e:7c:e6:c6:1e:b5:3e:
40:b5:42:98:1b:3e:a1:25:a2:10:9c:99:9c:c5:d0:
b8:36:c5:09:ff:42:5f:7a:a4:71:98:7e:d5:63:89:
42:40:ee:18:fd:03:3c:86:85:44:fc:1d:6a:66:d2:
19:17:42:0c:e9:44:a8:84:17:07:8c:9d:1f:c4:af:
a9:41:3f:e3:94:12:92:74:71:07:63:b8:85:cf:e6:
ca:d4:92:82:a2:27:3f:73:b3:dc:3f:9d:11:c8:75:
17:e9:f1:79:39:be:bb:ae:2e:3a:55:58:71:c5:07:
74:95:a1:11:a4:29:99:6d:bc:81:19:8e:0a:98:ad:
45:30:43:6f:ce:83:27:92:a6:66:9f:cd:b5:0b:0e:
dd:a0:c0:22:bf:2e:57:66:d4:45:c4:1c:7e:8c:3a:
81:6a:c0:67:d8:1c:d3:b8:c2:5b:d3:ab:fc:16:61:
c8:28:3e:2d:2d:94:91:ae:c3:bd:1f:03:9e:55:5d:
09:59:23:c1:26:84:77:ea:6e:c7:ce:05:75:ab:20:
b6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:37:2E:3F:23:52:89:CC:68:64:D3:1E:05:5D:74:3B:58:35:17:8C
X509v3 Authority Key Identifier:
keyid:4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:dc:87:48:4d:df:26:a6:57:c2:70:d5:8f:86:b4:02:2a:99:
d5:ff:f3:f4:d3:d2:33:42:d1:63:f0:79:ce:fe:f8:25:8d:36:
cd:e3:23:6c:a3:65:e5:8c:ae:08:10:97:31:83:6f:13:7b:bc:
0a:cc:fc:a8:12:a7:a3:6e:84:f7:8a:66:1b:9e:90:38:5c:61:
07:08:a2:ab:7b:16:c2:0e:63:e8:12:3e:3f:18:87:eb:d3:78:
e5:7b:80:9c:78:16:b3:4a:f4:b0:37:9b:5e:7a:0d:b4:3a:3e:
ce:24:5e:a4:3a:3f:56:ed:c9:72:90:6f:ab:e1:c5:95:5b:08:
80:bc:1f:cf:0b:ea:94:24:68:08:1d:b5:7f:94:44:b3:0d:1c:
72:ae:e6:e2:04:10:ed:b7:de:6e:a9:70:f6:77:29:96:02:8e:
95:84:b3:50:38:43:2e:f9:28:91:05:0d:ed:db:a9:22:79:73:
24:6d:fb:70:bb:da:ad:ce:f8:0d:0a:d2:73:91:26:29:e3:3a:
69:c6:12:97:f2:61:2d:a2:f3:d1:84:b1:e7:5b:5d:fe:4b:5b:
b6:6d:0f:88:95:c2:86:bc:bb:de:79:80:2f:bf:72:85:d5:34:
01:a6:5f:a3:d4:7e:ed:b7:08:96:4c:33:d9:d9:dc:2b:ad:c9:
3d:80:2e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:20:38 2026 by rpki-client