
$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
File: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft (raw, json)
Hash identifier: eZdIJ5joKglMZr78LrPdAjpoDXnhE0995+DdqUqksw8=
Subject key identifier: 64:49:11:B5:F1:CB:CB:99:06:FB:1B:B9:F9:81:D8:A2:D5:DF:5B:66
Authority key identifier: 4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2
Certificate issuer: /CN=A91733A8/serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2
Certificate serial: 0220
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
Manifest number: 0220
Signing time: Fri 20 Mar 2026 19:38:32 +0000
Manifest this update: Fri 20 Mar 2026 19:38:32 +0000
Manifest next update: Fri 27 Mar 2026 19:38:32 +0000
Files and hashes: 1: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl (hash: MAQ1yPlcYYJzNKdw8XzepE3onerHL42/tEs+6G3Sh0s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl
rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 19:38:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91733A8, serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2
Validity
Not Before: Mar 20 19:38:32 2026 GMT
Not After : Mar 27 19:38:32 2026 GMT
Subject: CN=69bda238-c915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:b5:a0:7d:bf:9a:32:9f:47:9f:4b:0b:4a:
7f:79:40:07:e1:21:4b:6d:6d:9c:09:83:93:a6:f1:
d3:2d:77:73:15:06:31:3d:52:4a:5a:77:99:d4:e3:
e0:f1:58:b3:50:21:cd:b6:32:3b:42:ab:ca:7b:d4:
6a:dd:ff:78:e3:ed:f0:b1:2e:be:71:43:87:63:b4:
68:5d:61:db:14:f0:52:c3:4e:76:ad:a3:47:d9:44:
e5:b9:89:bf:4f:2c:4e:b9:22:46:c8:c8:e3:7f:ef:
be:3d:94:f2:8d:76:b7:c3:7b:00:a4:f1:f0:1f:35:
eb:91:77:31:2e:3b:78:2c:84:de:61:4e:37:9e:fd:
e9:11:11:80:91:80:62:ae:08:5b:03:09:3d:6f:43:
93:8d:b4:b9:2a:ed:8a:71:73:6b:6e:82:d3:4a:e0:
df:ec:62:31:59:66:e4:24:3c:34:43:d2:c2:08:cb:
0e:23:96:28:a1:0a:75:48:6e:4e:8e:16:be:4c:8c:
fb:ac:13:50:45:15:2b:1c:82:42:4c:d9:68:8b:33:
aa:65:13:40:21:67:69:d5:90:52:29:41:60:99:02:
37:c7:60:a3:17:d2:87:74:da:a6:0e:ba:4b:2a:10:
a8:35:f9:84:af:15:ea:15:ee:6b:e8:9c:8d:8a:59:
07:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:49:11:B5:F1:CB:CB:99:06:FB:1B:B9:F9:81:D8:A2:D5:DF:5B:66
X509v3 Authority Key Identifier:
keyid:4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:11:f1:18:1c:97:16:b6:a0:09:16:4b:ce:f5:55:41:4d:c8:
83:3f:08:05:ff:e5:99:05:ee:b8:cf:74:e1:7f:34:57:0b:2d:
f0:56:8e:ee:67:3f:06:03:03:60:65:9c:67:9a:19:d4:77:de:
a6:3e:ca:35:17:64:33:02:ee:a2:d1:26:26:73:96:e1:e5:48:
27:08:e5:27:10:17:5f:ef:8f:1a:b9:82:e8:98:27:b2:ba:ff:
d2:14:4d:7b:e9:c3:4b:34:ec:ba:be:9c:d6:de:19:a3:b4:2d:
fa:d4:25:d5:74:4f:a1:fb:c2:99:9c:ae:99:7a:ac:5b:97:17:
24:e6:6a:fa:85:52:b5:3f:9e:9a:dd:54:df:09:17:56:fd:9c:
5e:8a:6e:2e:de:f2:0d:e8:08:0c:ac:94:64:4c:7f:f6:d7:b3:
37:30:33:7c:f5:8f:a8:df:49:4b:4c:f0:37:72:ec:ea:a2:eb:
b7:18:d0:5f:14:cb:ac:cf:80:e5:f4:09:d9:ef:e6:42:f7:7d:
20:33:b2:f8:67:6f:14:1d:d3:0c:b9:83:d4:d6:f8:25:1c:87:
57:44:3a:58:48:da:5e:ca:72:2e:3b:09:38:d5:28:1e:ab:3c:
70:2d:b4:82:8e:5c:41:18:4e:43:39:a3:b9:c1:8f:46:d6:f6:
74:6f:6a:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMzQTgxMTAvBgNVBAUTKDRFMjc2RkU5NDgxM0E1RDcwOEFGODY2RDYxRDYyMTM0
MEZDMDUxQjIwHhcNMjYwMzIwMTkzODMyWhcNMjYwMzI3MTkzODMyWjAYMRYwFAYD
VQQDEw02OWJkYTIzOC1jOTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvV21oH2/mjKfR59LC0p/eUAH4SFLbW2cCYOTpvHTLXdzFQYxPVJKWneZ1OPg
8VizUCHNtjI7QqvKe9Rq3f944+3wsS6+cUOHY7RoXWHbFPBSw052raNH2UTluYm/
TyxOuSJGyMjjf+++PZTyjXa3w3sApPHwHzXrkXcxLjt4LITeYU43nv3pERGAkYBi
rghbAwk9b0OTjbS5Ku2KcXNrboLTSuDf7GIxWWbkJDw0Q9LCCMsOI5YooQp1SG5O
jha+TIz7rBNQRRUrHIJCTNloizOqZRNAIWdp1ZBSKUFgmQI3x2CjF9KHdNqmDrpL
KhCoNfmErxXqFe5r6JyNilkHTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGRJEbXx
y8uZBvsbufmB2KLV31tmMB8GA1UdIwQYMBaAFE4nb+lIE6XXCK+GbWHWITQPwFGy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC9FODY0NDBEOEVG
QzQxMUVEQTBGMTYzNDhDNEY5QUUwMi9UaWR2NlVnVHBkY0lyNFp0WWRZaE5BX0FV
YkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy
RkQxRkYyL1RpZHY2VWdUcGRjSXI0WnRZZFloTkFfQVViSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzNBOC9FODY0NDBEOEVGQzQxMUVEQTBGMTYzNDhDNEY5QUUwMi9UaWR2NlVnVHBk
Y0lyNFp0WWRZaE5BX0FVYkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeBHxGByXFragCRZLzvVVQU3Igz8IBf/lmQXuuM904X80Vwst8FaO7mc/BgMD
YGWcZ5oZ1Hfepj7KNRdkMwLuotEmJnOW4eVIJwjlJxAXX++PGrmC6Jgnsrr/0hRN
e+nDSzTsur6c1t4Zo7Qt+tQl1XRPofvCmZyumXqsW5cXJOZq+oVStT+emt1U3wkX
Vv2cXopuLt7yDegIDKyUZEx/9tezNzAzfPWPqN9JS0zwN3Ls6qLrtxjQXxTLrM+A
5fQJ2e/mQvd9IDOy+GdvFB3TDLmD1Nb4JRyHV0Q6WEjaXspyLjsJONUoHqs8cC20
go5cQRhOQzmjucGPRtb2dG9qOg==
-----END CERTIFICATE-----
Generated at Sat Mar 21 16:33:55 2026 by rpki-client