
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
File: TC5icWMgr9SgFwBna-i_kmT0XkI.mft (raw, json)
Hash identifier: Qd+N9NrpwzIeSpdvOodDNtTtZqCv6xI4Hou35PMd5RU=
Subject key identifier: D7:1A:AB:5C:C0:A7:19:5B:90:88:96:C7:12:DB:B0:BF:EC:2F:B5:8B
Authority key identifier: 4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42
Certificate issuer: /CN=A91A10E4/serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42
Certificate serial: 1915
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
Manifest number: 18FD
Signing time: Tue 06 Oct 2026 16:28:49 +0000
Manifest this update: Tue 06 Oct 2026 16:28:49 +0000
Manifest next update: Tue 13 Oct 2026 16:28:49 +0000
Files and hashes: 1: TC5icWMgr9SgFwBna-i_kmT0XkI.crl (hash: jg2IOEYvW/LbZw9C7oHMuxsee2xI98Mo9uulbgbkIfg=)
2: 221560BEAF3711E98F7FF448C4F9AE02.roa (hash: TAF/4rrr92fj80k4rXF09UZ7GAsTjO+mKvPw6lKrblE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl
rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6421 (0x1915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A10E4, serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42
Validity
Not Before: Oct 6 16:28:49 2026 GMT
Not After : Oct 13 16:28:49 2026 GMT
Subject: CN=6ac521c1-07d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:73:d8:c9:55:cf:da:51:57:08:f5:c1:4b:
fb:23:85:37:08:c1:cb:de:a7:17:81:b4:62:70:3f:
9b:ae:e5:cb:2c:c5:a1:d9:2a:d4:ae:64:81:bd:41:
d3:9c:9e:a5:c8:2e:66:28:05:ba:fe:63:c8:90:d7:
8b:c7:da:9e:33:11:26:44:38:aa:51:f3:44:e9:32:
a1:ab:10:a4:7a:99:a2:6a:97:8f:79:57:10:2f:fb:
a5:f9:ec:29:47:5e:bd:a8:24:a7:25:1b:37:9b:f1:
9f:0e:98:17:66:5c:9f:6d:b8:7c:19:ce:5d:28:c6:
ef:9e:80:cc:4e:e1:a0:51:c6:ca:7e:b4:92:f4:4c:
69:03:a8:41:c1:7e:ed:7f:71:32:81:5b:7c:03:04:
d4:1a:95:ea:ec:e7:08:37:5d:d4:62:e7:34:e7:bb:
b1:aa:1f:7b:be:8a:67:38:7d:a4:42:e9:80:12:d0:
39:37:a0:7c:76:4c:5b:00:65:19:ad:1e:59:b1:54:
d3:18:0c:46:5f:b2:17:54:0d:63:03:d8:a2:77:48:
06:a2:ef:a8:e5:83:f9:ff:ee:45:8b:a0:6b:81:cf:
de:42:82:2f:c3:97:1a:e5:fa:98:10:9d:a7:6e:8b:
5b:7b:20:c1:6d:3d:fa:10:94:71:5b:e6:4d:9f:48:
02:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1A:AB:5C:C0:A7:19:5B:90:88:96:C7:12:DB:B0:BF:EC:2F:B5:8B
X509v3 Authority Key Identifier:
keyid:4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:e9:55:14:61:e8:b8:6d:4b:0d:81:5d:31:d7:0b:af:19:8c:
6e:69:17:8e:3b:31:d3:1d:87:73:54:32:38:84:82:03:ec:a6:
f5:5d:1a:ad:7b:71:4c:7a:5d:0d:80:68:5a:d5:7a:32:d2:04:
5b:dc:b6:72:88:fd:4d:2d:c6:12:4d:ab:ea:93:44:57:b7:fc:
54:a1:e5:d4:88:f5:87:15:f9:35:5f:af:a0:47:64:89:54:06:
d6:e8:9c:62:75:f8:14:eb:82:01:83:aa:2d:be:10:93:ba:6e:
59:84:18:e9:5e:00:88:3a:56:74:94:20:2b:f6:c5:10:5f:a9:
8f:99:e7:5a:10:58:b1:a7:d8:71:0c:36:10:d5:d1:ef:b0:eb:
a1:05:2d:9f:81:92:c5:5d:a5:b4:33:de:f4:f9:fa:4e:de:ce:
4f:50:aa:e7:05:a9:79:41:e5:79:87:1e:b7:1a:61:07:3d:44:
6b:34:f0:d5:2c:a8:0b:9f:75:29:57:2f:5b:35:69:c7:05:d4:
cc:d8:46:d3:8d:96:c3:2e:3a:35:67:d4:2b:50:d9:74:a5:78:
60:20:82:c7:9a:2e:09:6f:62:6f:0d:2f:10:dd:a8:61:0f:e9:
96:07:72:8c:40:a6:42:87:f7:bd:e1:a6:bf:c5:1f:3f:c8:9c:
f8:0b:1a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:08:04 2026 by rpki-client