
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
File: tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json)
Hash identifier: 1ks4TVTz/1Lanpehl6k4zclnomkSxef7pVVdydqUpVQ=
Subject key identifier: 6D:09:BB:C7:01:AA:5B:8D:2C:35:63:F1:24:9E:26:E0:31:94:CA:BF
Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
Certificate issuer: /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Certificate serial: 0194
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
Manifest number: 017C
Signing time: Mon 27 Apr 2026 04:30:10 +0000
Manifest this update: Mon 27 Apr 2026 04:30:09 +0000
Manifest next update: Mon 04 May 2026 04:30:09 +0000
Files and hashes: 1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: bSXTCNDaRuiyWgPL4zkDav1+1TExc+qnOHmcLpsqbFE=)
2: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: YBbzvVhuDe0JBEniZRZQfShMx+qsENyrYUEkIrWxQCw=)
3: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: lN2R/Ai1/H4y4rcwjFYf6RmytrpeM9mEWKhNt95uzoM=)
4: C27BAE1E63B411EF9A87155DC4F9AE02.roa (hash: k+syne/qwmIS8QA8cfkIQ/6o3usgazmP314zIWYqprk=)
5: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: raANeknaYAFLrEXg5mJ29hPwQZTZdRNH0CFF0rT054Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 04:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Validity
Not Before: Apr 27 04:30:09 2026 GMT
Not After : May 4 04:30:09 2026 GMT
Subject: CN=69eee652-8eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:d5:59:79:ee:15:f7:59:a8:e7:3b:e1:9c:
10:6e:a0:cb:7c:a9:00:bb:37:6e:0f:6b:42:9d:f1:
14:f2:0b:08:f2:b3:78:1f:77:8f:91:a0:c6:e4:f4:
21:3a:69:12:64:ec:a4:30:cc:48:1a:2b:40:f8:d5:
6f:08:29:0a:ce:17:cc:62:bd:73:36:03:78:68:ef:
8d:60:70:d7:25:e2:0d:dc:d0:cc:82:25:3d:cc:03:
41:3d:1f:b6:3d:11:13:d1:3c:d5:37:30:1f:79:18:
1b:fa:7d:c9:86:07:07:fe:60:78:c5:fe:0f:08:30:
bc:47:c2:3b:a0:e5:08:ab:47:46:21:87:c1:67:d3:
34:3f:09:46:c0:05:65:e5:53:d1:9d:dc:89:5d:72:
98:32:5f:50:75:7a:f8:80:d7:89:53:98:cd:c9:92:
5f:32:cd:d1:f0:75:07:ac:e0:21:ab:1c:22:b5:e8:
19:a1:32:72:48:0c:ce:de:f4:69:9d:7f:f3:22:92:
72:3b:20:9c:89:c0:31:1f:3a:ec:ef:cb:98:67:a1:
02:be:13:44:80:43:46:d9:87:41:d4:c3:05:f4:92:
23:bd:aa:a8:d8:8e:06:6e:3e:8a:6c:4a:4e:24:3c:
9c:b5:d3:2c:2f:e8:56:fa:52:6b:9b:3c:fb:a5:af:
51:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:09:BB:C7:01:AA:5B:8D:2C:35:63:F1:24:9E:26:E0:31:94:CA:BF
X509v3 Authority Key Identifier:
keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1a:2e:6a:38:06:fc:17:5c:d8:81:1a:37:36:60:cf:0b:b5:
e2:ec:c7:18:d1:1c:af:84:00:db:e9:47:37:a8:72:7d:77:b9:
41:a5:91:ab:46:41:05:04:83:1c:a9:97:8c:23:ad:62:46:cd:
00:73:ab:59:c0:60:15:5c:2b:f0:d9:78:9b:52:b0:24:56:bb:
0d:69:a2:5a:1e:37:4d:e4:b5:d9:92:60:5f:c6:71:3f:3e:05:
06:64:10:6a:5b:a8:1d:9b:0b:43:68:a4:a7:b0:bf:56:ef:85:
6d:42:18:0f:6d:3b:45:77:94:63:12:42:2b:40:ad:65:a6:0d:
56:43:c7:7e:24:9c:6c:08:68:ce:65:50:26:3a:41:3a:06:ff:
53:fa:8e:fb:9a:e4:11:dd:f1:5b:d6:99:af:1c:99:03:81:34:
74:67:ff:32:18:f1:2a:3f:e0:5e:e1:69:7a:e6:7c:2d:78:66:
36:44:e5:ba:64:78:56:d0:e3:df:6d:66:dc:34:b2:3b:71:e6:
a6:dd:e4:6c:8a:2a:25:28:76:8c:eb:db:ea:62:38:e5:d6:ef:
6a:61:db:46:84:33:b5:47:06:e9:75:89:6e:87:93:77:59:3f:
88:44:37:53:8e:af:2f:31:77:2c:ff:b1:c6:98:7f:19:7e:2f:
36:47:d4:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNGNUQxMTAvBgNVBAUTKEI0MDgxODE1QzZCQUVEOThBMUNDOTUwQUM2RkExMEJD
NjAwNTg5MDIwHhcNMjYwNDI3MDQzMDA5WhcNMjYwNTA0MDQzMDA5WjAYMRYwFAYD
VQQDEw02OWVlZTY1Mi04ZWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwrzVWXnuFfdZqOc74ZwQbqDLfKkAuzduD2tCnfEU8gsI8rN4H3ePkaDG5PQh
OmkSZOykMMxIGitA+NVvCCkKzhfMYr1zNgN4aO+NYHDXJeIN3NDMgiU9zANBPR+2
PRET0TzVNzAfeRgb+n3JhgcH/mB4xf4PCDC8R8I7oOUIq0dGIYfBZ9M0PwlGwAVl
5VPRndyJXXKYMl9QdXr4gNeJU5jNyZJfMs3R8HUHrOAhqxwitegZoTJySAzO3vRp
nX/zIpJyOyCcicAxHzrs78uYZ6ECvhNEgENG2YdB1MMF9JIjvaqo2I4Gbj6KbEpO
JDyctdMsL+hW+lJrmzz7pa9RgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG0Ju8cB
qluNLDVj8SSeJuAxlMq/MB8GA1UdIwQYMBaAFLQIGBXGuu2YocyVCsb6ELxgBYkC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Y1RC8xMEY5NEVGMDA2
QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjdaaWh6SlVLeHZvUXZHQUZp
UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RBZ1lGY2E2N1ppaHpKVUt4dm9RdkdBRmlRSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
M0Y1RC8xMEY5NEVGMDA2QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjda
aWh6SlVLeHZvUXZHQUZpUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAohouajgG/Bdc2IEaNzZgzwu14uzHGNEcr4QA2+lHN6hyfXe5QaWRq0ZBBQSD
HKmXjCOtYkbNAHOrWcBgFVwr8Nl4m1KwJFa7DWmiWh43TeS12ZJgX8ZxPz4FBmQQ
aluoHZsLQ2ikp7C/Vu+FbUIYD207RXeUYxJCK0CtZaYNVkPHfiScbAhozmVQJjpB
Ogb/U/qO+5rkEd3xW9aZrxyZA4E0dGf/MhjxKj/gXuFpeuZ8LXhmNkTlumR4VtDj
321m3DSyO3Hmpt3kbIoqJSh2jOvb6mI45dbvamHbRoQztUcG6XWJboeTd1k/iEQ3
U46vLzF3LP+xxph/GX4vNkfURQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 12:40:28 2026 by rpki-client