
$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
File: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft (raw, json)
Hash identifier: v3XvTyZbVOu+KL9txypF1jDQcmaiHuf7WKBUupylFD8=
Subject key identifier: 49:54:B0:FD:F8:8F:6F:3C:32:0D:4D:A6:25:EB:DA:72:A2:C3:73:2C
Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Certificate issuer: /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Certificate serial: 032B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
Manifest number: 0311
Signing time: Thu 11 Jun 2026 03:22:18 +0000
Manifest this update: Thu 11 Jun 2026 03:22:17 +0000
Manifest next update: Thu 18 Jun 2026 03:22:17 +0000
Files and hashes: 1: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl (hash: N6dTdqm9hWAHNlpnYnNKUgsp/z6vVHoxQ1CoJvK67Gs=)
2: 6A7B1D3AA66111F0BF55D666C4F9AE02.roa (hash: 5kfmdI+J8ZLTBbwi+uPE2fjs8Eif0tU5cmSDRBoW2qA=)
3: 951A6E226D2E11F09539AE2BC4F9AE02.roa (hash: s7tXiYi5ptQxn0vdm+4nmLlWJa9YOADDTGYzCkSoTLc=)
4: 8696B3CA729111F0B120CD72C4F9AE02.roa (hash: bRhHwOGR+nC6Z6a3Gtjjm9JejuDK/Fy85sqNn6DJQCM=)
5: 69DD27F6A66111F0BF55D666C4F9AE02.roa (hash: YcKOcplSd86LXVVjUokqFyaziv3wglCFpEtfgHfLdYY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 811 (0x32b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Validity
Not Before: Jun 11 03:22:17 2026 GMT
Not After : Jun 18 03:22:17 2026 GMT
Subject: CN=6a2a29ea-8630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:e2:0a:7e:13:81:fc:28:03:c8:c1:9f:63:
5c:a6:c2:10:b4:a3:41:4a:17:66:4c:f5:b5:d8:e9:
bc:88:bb:22:a0:02:09:f0:6e:bd:dd:f3:45:44:9c:
48:12:e7:bc:d5:bd:8e:45:66:7a:fb:17:be:9e:9e:
44:33:2a:31:a2:2d:00:58:6d:3f:42:77:8c:67:bf:
dc:fe:4d:16:ca:be:8d:b7:d7:6c:af:36:d7:59:48:
86:8a:64:66:83:15:86:4c:04:21:d8:6e:24:91:86:
ee:f8:5c:7a:6e:4d:1b:a2:47:3a:3e:35:ed:26:e8:
cd:5c:10:82:59:11:f4:25:d4:85:6b:dc:24:41:d3:
18:7c:5f:01:fc:16:4b:d7:bc:c8:e1:88:7b:57:e0:
e6:62:ba:dd:55:2c:a7:cc:e3:84:f6:bf:ac:c0:19:
d2:d3:46:7f:d0:31:25:4d:cb:d5:be:e2:e9:1f:2b:
36:d6:10:33:09:0f:76:79:78:b2:4f:26:c6:32:0b:
55:bd:28:21:2e:be:f7:18:2f:c5:ba:73:6e:1a:b6:
cf:0b:36:9b:54:d7:e0:8f:f0:f3:90:8c:39:63:9d:
ea:ed:b0:11:f0:b8:3c:43:22:0b:00:ef:b8:78:57:
dd:a9:9d:5f:dc:c3:59:0b:bd:df:ed:41:d7:20:24:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:54:B0:FD:F8:8F:6F:3C:32:0D:4D:A6:25:EB:DA:72:A2:C3:73:2C
X509v3 Authority Key Identifier:
keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:df:23:a8:ed:4f:d7:c4:b0:f9:6e:55:59:0d:e5:1f:22:0d:
33:79:c4:7a:34:05:8b:24:8b:e2:f0:f6:0d:d6:83:9e:6e:93:
22:88:76:83:ea:e2:07:b8:18:b3:6e:f4:90:53:20:cc:14:c9:
10:3a:64:85:33:34:e7:a2:1f:ba:35:9d:41:0c:d8:26:48:ef:
5a:d2:eb:3c:25:71:40:c9:e9:54:72:f9:11:fe:97:ef:92:bb:
8c:c3:e2:b6:d1:9e:8d:3f:fa:b7:50:03:5d:3c:f9:98:32:14:
41:c3:1b:37:ec:e5:e1:b2:b6:e6:74:2f:79:77:5c:82:41:c5:
73:17:dd:4f:46:06:10:ba:48:05:b6:5a:5d:d5:a8:2a:9f:47:
e7:36:73:1a:0a:54:1a:8c:40:63:cc:c3:a6:52:d1:3f:40:3e:
1c:34:6c:11:0a:be:f7:c5:c4:96:13:fc:29:46:71:53:81:cd:
05:44:a2:b3:34:85:af:64:e6:e2:28:4e:80:ba:f2:e6:20:a4:
8e:4e:f8:61:25:de:ff:d5:94:a2:21:59:84:94:79:7d:70:ca:
ce:ab:69:6b:e4:f5:3d:7c:ae:6c:5a:5d:a1:08:a6:e1:3f:79:
e3:de:c1:86:f2:19:13:f8:e3:df:20:f5:2d:0f:c4:eb:17:ea:
7e:dc:71:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:20 2026 by rpki-client