
$ rpki-client -vvf rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
File: TCISGt-uP1dSgBZRUcP9MOOq_QE.mft (raw, json)
Hash identifier: azFqtyx1b/LsI9KtYj1gr/MZ6McKo8Ye/e6prkHlYBE=
Subject key identifier: FC:15:5D:92:31:26:54:CD:25:56:6C:04:8C:BA:A2:FC:EE:F9:16:96
Authority key identifier: 4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01
Certificate issuer: /CN=A91466E8/serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
Manifest number: EA
Signing time: Thu 21 May 2026 06:32:36 +0000
Manifest this update: Thu 21 May 2026 06:32:35 +0000
Manifest next update: Thu 28 May 2026 06:32:35 +0000
Files and hashes: 1: TCISGt-uP1dSgBZRUcP9MOOq_QE.crl (hash: aj24hNmVzJ+X/tjUUh5xHbw26/0AxyPgdZfeKyFy230=)
2: 02640B0CF97911EF99F9BE80C4F9AE02.roa (hash: IDMG36g3IA5yaHGoEfdRe+YwDHRm0VJaleLLtHv9jQI=)
3: 67CB5FC0629411F0B7FA070FC4F9AE02.roa (hash: OTM0h3x/rG6DzgQGl54EMsBYVfOYhG4EfKaVuusqLjw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl
rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91466E8, serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01
Validity
Not Before: May 21 06:32:35 2026 GMT
Not After : May 28 06:32:35 2026 GMT
Subject: CN=6a0ea703-f499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a7:f3:9f:51:88:47:db:b8:08:72:99:ff:66:
c5:89:9e:2f:eb:a1:37:94:b6:ef:43:0d:35:1c:91:
8d:b7:d1:aa:24:8b:e1:aa:4b:d4:d4:87:ed:23:c7:
ea:96:7d:e4:f9:aa:2a:7e:3f:cc:b1:21:54:ed:45:
27:6d:1d:96:ee:8f:3f:97:d7:f5:ed:52:14:08:4c:
b7:7d:02:fe:fe:cd:4c:57:21:9e:11:98:88:7f:dd:
df:cb:d9:73:79:23:6e:42:34:d1:30:f4:1a:eb:ef:
2c:2d:e6:90:83:0d:e7:ea:94:27:7e:a0:51:a0:40:
99:c5:b3:ab:7d:cd:53:2e:3b:2c:57:ec:78:8c:5c:
26:68:ca:eb:54:ad:25:31:03:cb:85:88:f6:41:8d:
1b:21:dd:f5:d4:eb:4d:9a:f9:a7:c6:f3:5e:77:3a:
d4:8d:eb:42:0b:4d:29:82:27:66:d5:a7:a9:64:dc:
13:50:4f:4f:db:7e:ef:db:af:20:59:34:ef:9f:ad:
15:09:4f:3d:20:4f:f8:ff:0d:a2:e3:15:09:a0:34:
e7:a5:37:2e:dc:96:51:27:8f:0d:08:15:92:f1:8a:
05:22:2f:95:30:62:94:c6:f3:aa:2c:3b:00:22:b3:
9c:d5:33:cd:76:2e:03:42:6d:94:88:ea:e0:ae:c6:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:15:5D:92:31:26:54:CD:25:56:6C:04:8C:BA:A2:FC:EE:F9:16:96
X509v3 Authority Key Identifier:
keyid:4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:a6:47:44:c9:70:97:96:5a:a4:95:f3:ca:a5:bd:7d:91:cf:
8e:80:49:8d:82:6e:b6:74:bd:1f:80:43:d9:0b:33:dd:1d:9d:
21:6e:66:cd:f5:cd:78:dc:91:74:21:f6:cd:7e:e6:e3:4f:cc:
0c:dd:2d:68:aa:7d:ae:c5:df:2a:f6:e7:ba:a5:aa:c6:2e:b2:
36:d7:75:1d:97:17:b8:49:8a:f6:0d:0b:43:9d:e2:a1:b0:8d:
6d:4a:bd:a3:f7:6c:8c:50:b9:d1:e1:24:9b:1e:40:a6:de:5d:
3e:13:a5:1b:20:c4:e0:ea:f2:57:9a:0b:05:34:a8:a2:34:91:
4f:c6:22:56:73:17:5c:c5:bd:66:2f:df:25:de:2f:88:1a:9a:
bc:81:69:91:77:1d:e4:ae:62:f7:48:b7:26:92:f3:28:10:fc:
20:1f:be:e8:7d:fc:d1:51:50:e5:e9:5b:3f:d6:9a:0c:4f:a3:
26:1c:fe:c5:21:2b:b8:6d:6a:bc:69:21:58:a1:15:0e:6a:21:
c9:79:56:5c:1b:3e:6f:4e:b3:39:11:bc:82:dc:60:f0:fd:65:
4e:26:a3:ae:d5:94:b6:d4:04:c9:88:62:cf:79:ed:d4:64:89:
29:fe:65:0f:69:e7:99:f0:d3:19:2b:b3:af:8e:99:f2:98:e5:
c8:b2:2e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 13:23:14 2026 by rpki-client