
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft
File: tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft (raw, json)
Hash identifier: 0O673nTrPCLFCwX2t72DxarWaWP8mGl6vlwxFY6duDw=
Subject key identifier: E6:23:D1:B3:2B:17:2D:9A:5B:46:FD:FC:6A:68:41:BA:91:E7:E5:9E
Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98
Certificate issuer: /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft
Manifest number: F0
Signing time: Sat 03 Oct 2026 07:17:54 +0000
Manifest this update: Sat 03 Oct 2026 07:17:54 +0000
Manifest next update: Sat 10 Oct 2026 07:17:54 +0000
Files and hashes: 1: tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl (hash: ILP+rFisydeSh3xAJI0UgTPB2sm6c2gK7lNTQkQEfYY=)
2: DC8456B8B5B911F1B8B6BEBE3E11F970.roa (hash: BCImpyKSjQUJbhaMwVoqKVNp3GpPs3DeNfjpc6WNC14=)
3: 7B8A52D4B5BB11F18D5162F53E11F970.roa (hash: T6c4+2+fIJ46LdhEoUSSX1Kw6hw1AA5PzFi6KFbGnms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl
rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398
Validity
Not Before: Oct 3 07:17:54 2026 GMT
Not After : Oct 10 07:17:54 2026 GMT
Subject: CN=6ac0ac22-5526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:fc:a8:84:3f:da:60:9b:ad:a7:31:ea:de:
83:5b:7a:4a:54:66:93:8b:1c:76:5f:18:d5:64:14:
6a:a4:53:d5:50:d5:cf:5d:57:9f:c2:ea:ca:c4:e9:
8a:f0:01:02:a0:21:34:dc:cb:f1:aa:05:44:71:90:
1c:87:88:76:89:92:4b:d6:1d:db:24:b7:fb:3a:56:
e7:b3:b1:f6:0c:ee:d8:d9:e7:8f:d6:2d:ec:f1:d5:
b4:d2:b0:f1:5a:2e:c6:18:f1:79:e3:23:88:05:7d:
d0:b4:97:75:82:99:da:48:4a:40:f2:fb:31:7d:99:
c3:f5:33:ab:95:ec:05:21:8f:73:1d:32:b6:9c:eb:
43:0a:ac:e4:5f:d3:37:aa:18:7f:f4:5e:75:c4:8f:
09:ca:2f:e8:81:3a:83:62:c8:33:38:bb:1c:2d:dc:
51:2b:ef:ac:af:ff:6e:81:11:51:8f:54:7d:c7:a8:
1d:09:b3:e3:06:65:bf:ea:5f:1b:e7:05:ad:6d:a5:
94:b1:5e:92:27:1c:71:7b:57:5c:03:13:96:77:48:
43:8b:4e:de:04:e6:5b:2a:b0:a0:48:83:d3:b9:0d:
b5:37:4c:b3:2c:ba:69:57:39:cc:fc:e5:d9:a3:b9:
66:74:b2:af:73:7c:81:1d:f7:1e:63:3e:4f:aa:f9:
2b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:23:D1:B3:2B:17:2D:9A:5B:46:FD:FC:6A:68:41:BA:91:E7:E5:9E
X509v3 Authority Key Identifier:
keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:04:1f:ed:7f:63:56:db:41:bd:78:69:82:26:a3:72:b0:64:
3b:a8:3d:06:8c:f3:c3:67:b2:31:10:02:83:86:ee:4f:c8:27:
90:e4:76:92:ca:6c:7d:da:4f:4b:fc:b3:b6:bc:b5:b7:b0:63:
c1:f0:80:4a:31:41:50:df:97:13:5b:e2:73:f7:8e:d6:9a:66:
db:cb:e9:bb:68:d7:77:f9:7d:01:67:03:7e:8d:58:c6:e4:ca:
bc:88:84:db:76:98:27:ff:c4:e3:88:bd:cb:b6:f7:4f:c4:47:
59:90:5b:db:51:68:9a:ef:9a:1a:31:f9:e6:66:86:a8:30:70:
a3:a5:01:d5:8c:68:a7:d0:e4:f9:ba:61:ed:b6:5d:80:de:3d:
ec:85:53:38:46:65:95:51:20:76:22:6d:31:58:1b:d9:2c:72:
a9:bc:47:3f:f5:e9:50:11:39:2a:5c:88:10:48:aa:30:f0:17:
fb:c2:1e:1f:86:c2:6b:bb:50:fd:8b:52:90:c7:0c:1a:6b:7b:
2b:37:0a:e1:f2:2e:ef:d4:d4:df:39:79:a7:83:96:05:fb:c0:
e7:ca:3f:da:24:25:63:95:e1:30:84:35:51:95:cd:98:ea:cb:
23:1b:8a:71:06:d2:4b:96:8a:43:7a:ca:f7:4f:57:c5:a9:ba:
d1:4a:e7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:57:29 2026 by rpki-client