
$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
File: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft (raw, json)
Hash identifier: sTqcmsvkEJyeioLyVmKh8LwmTZvM6sfWJjyUIHAEC1o=
Subject key identifier: CF:1C:DB:1B:14:A3:C5:96:4E:4E:C2:A3:B0:04:11:C8:8D:F0:51:91
Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Certificate issuer: /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Certificate serial: 02A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
Manifest number: 0296
Signing time: Thu 23 Oct 2025 03:01:57 +0000
Manifest this update: Thu 23 Oct 2025 03:01:57 +0000
Manifest next update: Thu 30 Oct 2025 03:01:57 +0000
Files and hashes: 1: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl (hash: gTtmaQQqys9GGDdmMHNES43/Lt2nDKSDCHpSiZ9WxfA=)
2: 6A7B1D3AA66111F0BF55D666C4F9AE02.roa (hash: Pai3Nu3+CpU9xUHwjv55hhEZi3jdFTx+UDy7SG0bPko=)
3: 951A6E226D2E11F09539AE2BC4F9AE02.roa (hash: /9WwScNnwKtuTN07Iz2vc8yMRAg5E8y5OFcRZD0NbCM=)
4: 8696B3CA729111F0B120CD72C4F9AE02.roa (hash: ut+bDFNYD/cDGx/IefSywFEYVi8u+Nng1jjgZBD3c3k=)
5: 69DD27F6A66111F0BF55D666C4F9AE02.roa (hash: GX+AW8ueL4QUC5f9XTmLIBQG0hxveckbMLPTPWw+Kk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 03:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676 (0x2a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Validity
Not Before: Oct 23 03:01:57 2025 GMT
Not After : Oct 30 03:01:57 2025 GMT
Subject: CN=68f99aa5-cce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:0e:28:d2:0e:b1:99:74:2c:55:4d:1b:20:
47:eb:b1:02:08:a1:67:9b:45:59:0b:33:40:3f:68:
92:a1:0b:41:1b:25:9c:a3:f6:5a:a2:c9:31:88:96:
0c:4f:bc:5b:26:20:cd:af:8f:8e:77:a8:3a:4c:27:
7f:b9:e2:95:44:89:84:88:cb:95:7e:a9:ec:9f:c8:
dc:45:5a:34:1f:23:f4:d4:86:60:71:dc:25:e4:e9:
3c:cc:b7:12:25:e2:18:3b:01:f2:86:bd:d6:bf:75:
51:d6:0c:1c:19:c1:c3:ba:cd:52:75:43:a9:5a:1b:
ac:ea:7b:53:a8:c1:14:89:d9:b7:6f:96:3c:47:a9:
3a:bc:1f:ca:18:c9:9c:86:44:12:4c:78:00:cd:18:
f1:41:e4:55:23:aa:a0:db:e7:da:85:ab:72:e3:00:
71:bb:06:9c:ed:5a:77:ad:59:f1:3b:51:7d:2c:2b:
17:30:92:4b:80:c9:a6:dd:e0:0b:22:0e:ab:bc:67:
7f:b7:b3:ea:db:4e:14:ec:7c:91:0a:9f:d7:90:3f:
91:66:ac:4f:ae:76:8d:2a:fa:6b:3e:d4:85:10:ce:
67:eb:05:d6:7a:2a:9e:38:ca:64:6b:78:2d:77:ca:
03:ff:ab:48:b6:84:58:d6:51:f2:8b:21:44:fb:b0:
f4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1C:DB:1B:14:A3:C5:96:4E:4E:C2:A3:B0:04:11:C8:8D:F0:51:91
X509v3 Authority Key Identifier:
keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:09:50:75:d6:f0:6d:03:a4:4f:13:17:64:a9:74:31:07:18:
12:00:8a:ba:5f:8b:8b:c7:21:0d:df:64:1f:1a:78:4a:0f:af:
2c:9b:af:5d:4b:0d:9e:14:bf:70:72:25:76:cb:8d:b9:be:48:
61:eb:b3:99:13:f0:80:c6:42:b2:e2:d2:69:44:ee:54:53:8a:
67:ed:34:40:83:52:46:80:c4:60:25:59:b8:c6:2e:3d:0b:25:
da:31:4b:b3:e5:24:05:3c:ab:24:f2:d5:18:ae:4b:b8:2a:a1:
e6:67:1a:65:0c:81:04:0b:ee:aa:79:9c:1a:af:2a:83:e0:7f:
82:0b:12:39:1b:c6:91:63:a9:01:44:7d:59:2e:ac:8e:8b:95:
d1:b1:33:c5:75:0a:7d:33:32:40:ab:7d:d2:75:c9:1d:5a:da:
bb:b4:80:32:aa:4b:35:83:98:a0:6c:06:37:e9:29:66:7b:94:
cf:ed:8c:b6:46:0a:10:a2:4f:12:98:dd:b0:09:e5:05:36:4f:
fa:0b:8b:b1:8f:f2:15:5f:e0:cf:f9:21:d4:20:6c:98:81:69:
a3:57:62:87:3a:f4:b5:a7:28:f6:96:6a:bb:bf:d7:2f:fa:e1:
7c:8b:e5:34:02:78:7f:82:7f:0d:93:3a:0e:e9:25:ea:ee:99:
f5:2f:04:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjMyRDcxMTAvBgNVBAUTKDRFMDczNzg2NjdFQzc5RDUzRDY1MEU1MjREMUU4Rjk4
QjA4QzI4RTEwHhcNMjUxMDIzMDMwMTU3WhcNMjUxMDMwMDMwMTU3WjAYMRYwFAYD
VQQDEw02OGY5OWFhNS1jY2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApCYOKNIOsZl0LFVNGyBH67ECCKFnm0VZCzNAP2iSoQtBGyWco/ZaoskxiJYM
T7xbJiDNr4+Od6g6TCd/ueKVRImEiMuVfqnsn8jcRVo0HyP01IZgcdwl5Ok8zLcS
JeIYOwHyhr3Wv3VR1gwcGcHDus1SdUOpWhus6ntTqMEUidm3b5Y8R6k6vB/KGMmc
hkQSTHgAzRjxQeRVI6qg2+fahaty4wBxuwac7Vp3rVnxO1F9LCsXMJJLgMmm3eAL
Ig6rvGd/t7Pq204U7HyRCp/XkD+RZqxPrnaNKvprPtSFEM5n6wXWeiqeOMpka3gt
d8oD/6tItoRY1lHyiyFE+7D0RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8c2xsU
o8WWTk7Co7AEEciN8FGRMB8GA1UdIwQYMBaAFE4HN4Zn7HnVPWUOUk0ej5iwjCjh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzJENy9GOTc5NTlDMjI0
MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2VkVTlaUTVTVFI2UG1MQ01L
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RnYzNobWZzZWRVOVpRNVNUUjZQbUxDTUtPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzJENy9GOTc5NTlDMjI0MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2Vk
VTlaUTVTVFI2UG1MQ01LT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZCVB11vBtA6RPExdkqXQxBxgSAIq6X4uLxyEN32QfGnhKD68sm69d
Sw2eFL9wciV2y425vkhh67OZE/CAxkKy4tJpRO5UU4pn7TRAg1JGgMRgJVm4xi49
CyXaMUuz5SQFPKsk8tUYrku4KqHmZxplDIEEC+6qeZwaryqD4H+CCxI5G8aRY6kB
RH1ZLqyOi5XRsTPFdQp9MzJAq33SdckdWtq7tIAyqks1g5igbAY36Slme5TP7Yy2
RgoQok8SmN2wCeUFNk/6C4uxj/IVX+DP+SHUIGyYgWmjV2KHOvS1pyj2lmq7v9cv
+uF8i+U0Anh/gn8NkzoO6SXq7pn1LwRc
-----END CERTIFICATE-----
Generated at Fri Oct 24 07:02:19 2025 by rpki-client