
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft
File: tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft (raw, json)
Hash identifier: zJmbulLeGtA8UvhIJQAXfdiVSICptJ8wA8GXePLKce0=
Subject key identifier: 65:C2:D1:E9:0D:2F:9D:1F:38:15:B8:1B:D5:96:BD:F5:AA:32:B9:42
Authority key identifier: B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB
Certificate issuer: /CN=A91994D1/serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft
Manifest number: A4
Signing time: Tue 06 Oct 2026 20:38:14 +0000
Manifest this update: Tue 06 Oct 2026 20:38:13 +0000
Manifest next update: Tue 13 Oct 2026 20:38:13 +0000
Files and hashes: 1: tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl (hash: G+okvwjR6I+6mscrtjtuipNbfIClfaeKAZnh9zOXAZI=)
2: 527245ACD42311F0A8A37057C4F9AE02.roa (hash: 90KcSYGKJ6Yif8EcJa/nVE5hc/e19RIZHwPBzlm+xR8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl
rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:38:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91994D1, serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB
Validity
Not Before: Oct 6 20:38:13 2026 GMT
Not After : Oct 13 20:38:13 2026 GMT
Subject: CN=6ac55c36-5b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1a:8c:3b:f2:4f:9b:7b:94:ee:75:9a:55:51:
2d:29:11:d3:27:cc:e9:9f:c4:ea:d4:7a:6b:71:a4:
00:76:e6:4c:81:9e:61:d8:cd:c1:b5:b5:d0:04:04:
c4:9d:50:1c:18:b7:3e:57:b1:5f:80:ae:f1:64:71:
fc:23:49:de:cc:03:d9:cd:f1:1c:3a:0c:5f:38:97:
60:32:1b:d8:68:ab:c0:76:2e:04:28:66:02:bd:eb:
fe:0a:cb:1e:1a:40:11:65:01:56:dc:db:82:97:76:
3c:7f:43:5f:b9:07:08:5a:68:19:68:d3:7f:f1:a2:
ac:57:b1:f4:9b:cb:8a:c1:4b:f4:c1:af:aa:27:89:
40:7f:7c:70:f3:b9:01:04:5e:0a:09:81:91:f0:3b:
4b:8d:39:55:5c:5c:50:fd:01:32:b6:9c:f1:92:f0:
25:2d:8c:3a:cf:60:08:14:10:8a:bb:56:20:f3:30:
cc:c5:ad:ee:44:d6:bd:7a:8e:b6:58:8b:67:ba:32:
6f:66:e8:3f:9b:f3:22:3c:17:79:10:78:11:36:3c:
0a:1c:a2:66:dd:83:1a:fc:c5:de:7a:49:9c:89:e8:
53:d2:99:4a:60:e6:4a:86:9a:b2:26:be:21:dd:55:
b9:18:13:5b:48:ee:27:25:7a:0f:b6:39:a0:07:15:
c7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C2:D1:E9:0D:2F:9D:1F:38:15:B8:1B:D5:96:BD:F5:AA:32:B9:42
X509v3 Authority Key Identifier:
keyid:B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:38:7d:d3:a5:cd:e2:11:68:b3:d0:4f:8d:21:ff:f2:df:68:
9d:72:6e:43:eb:bb:ed:31:9b:e6:b9:9d:eb:c8:ea:d2:5c:55:
89:7f:dc:73:54:36:01:e0:ea:15:f0:cc:75:0e:9f:f3:04:83:
7b:f4:88:93:09:f1:0c:7b:2a:cf:dc:cf:ec:e3:8c:86:ee:62:
e0:3f:2f:52:3e:8e:1f:32:2a:11:2f:21:ea:00:a0:3d:17:78:
2c:35:0c:8c:a9:da:b9:07:f1:3a:b8:a7:55:2d:f0:59:53:72:
9d:e2:be:12:c3:10:b0:17:8b:88:ca:14:26:3f:c5:33:00:a6:
ce:f9:e1:6b:bb:37:ba:56:96:a4:25:0c:22:12:8a:3c:2e:18:
19:a5:cd:49:d3:01:cf:3d:1a:c2:7c:e9:c8:43:7a:eb:4f:64:
6b:07:ef:ca:ab:54:f1:6a:f3:2a:1c:ce:65:b6:46:4b:75:00:
b9:72:f3:74:cb:4b:e3:22:b8:96:b8:af:c4:5c:bd:c5:7c:71:
4a:c6:9f:27:0a:75:19:ff:79:e1:e7:b7:89:de:7c:3d:c5:d3:
ee:3a:0f:5e:7f:9a:9d:6c:49:1d:7f:9e:ca:ba:cc:1b:8f:21:
c9:bb:f0:f8:75:59:3e:86:18:c8:e8:8e:db:d9:3f:63:42:2a:
6d:19:8f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:18:08 2026 by rpki-client