
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File: tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier: qJ2MriJSuhOrr3l9mucrCXpK1AeKL1kArC3mTxkD2qA=
Subject key identifier: 41:F4:D4:52:04:98:E0:90:F3:1D:50:B4:31:00:77:36:7A:1E:BA:42
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0DFD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number: 0CFE
Signing time: Fri 04 Sep 2026 18:44:53 +0000
Manifest this update: Fri 04 Sep 2026 18:44:52 +0000
Manifest next update: Fri 11 Sep 2026 18:44:52 +0000
Files and hashes: 1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: opzYFqqi1pgQf9JUXQP+wRxYbkLBhPNSyOnOjkOMdwE=)
2: F04C908AA85711F18FFCAC0D4011F970.roa (hash: XQT6focf8duOylg1ZZ3HUJmMwp7Rdw/KmIis9QJeUpg=)
3: 4A7E2898A5C411F19C8FF2B67011F970.roa (hash: Oo3xLhYdX4LaDkZHIvo2YBA4zCU5lfp7HfSpK5gZTlY=)
4: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: rfIVMs6AUfnF9P9/mHach4AIencfTT3AboN2vIjJlGQ=)
5: 3486A02AA5C311F19BC95E547011F970.roa (hash: vs7sa5NS68Qk8KNYKrQf+y7MRMvUgeeC0OfnYx4e6O4=)
6: 7B0202308D7511F1B81A5A6E3211F970.roa (hash: lv3GXVFOzs+qZgsFZM+UB3hGX5PZBVPXBw8RmXvYngs=)
7: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: lZKpR1VVIPheOf685hGoxyJuXh0TJ+bcZ5UNcYowwXY=)
8: F894F5B0E09411F0B3B2B389426F56BC.roa (hash: ECJMyzNQQdPVr4eVezuJlY7AiD6IT4ky/xg4cQ7ishs=)
9: C7BD7A22908211F1B42CEF406511F970.roa (hash: URZ1HAVsZ8gDNHs/f+Mvco7+rFhBUEkt2pK3T1DSEzw=)
10: 7CDB77C68D7511F1B81A5A6E3211F970.roa (hash: wW3zDmhseyh3Yh/oOeh4ea2UWN+ukBkLwblwcoglm2g=)
11: 60A1565CA1F211F1993DFC693F11F970.roa (hash: vUUvIDHpi+5qhhVsIm9u11cDe+AgLvPuSqn8tQsyhOo=)
12: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: X5kHDpuuQNfIGRpaueB+R7zUfzuivixJGb6q6/nzsAU=)
13: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: A4zYqw73DHHyadBQLcyhIlD6IDAEqxDy3foGsjv4EZ8=)
14: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: aEhA9+ssD2dfx+1WtFOaw2FrI9zywwb1i6+vFoIN8fo=)
15: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: EDgw1y1njUptJobYA07Zwnc+lrn+MA53o6pSdj5Vrcc=)
16: D9D9DEF8A69911F182359F0F3411F970.roa (hash: kSMdikhUB64TDDAQf33yJf5KmpRLoHxtdZFPCRUfWx0=)
17: 6ACD5ACC227711F1A91DCF18A4833773.roa (hash: TJMnHoqNrDu0s7s8nY8tdFhEqoWxtnw6hx5yIb/HoEo=)
18: BFF3DC6A8D7511F1984B69733211F970.roa (hash: f289QnqNyHbHfv+02sdYQZ3fZtIcF9r7+WPKnhUBFuI=)
19: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 6JLMteJnja7+tiZnKdI5bf0UkqKb/Uh5AX2ANHa//84=)
20: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: 0R8aUOkuvkxBptQCqK8x5AV36AA1pHonSA2IeVHkDK4=)
21: D36559D68D7511F1A94DC67B3211F970.roa (hash: Fy8jBtvRVu9jhps9hbfZRQWKRAOfiyIIynpps0EdNs4=)
22: 1F379CE69D2211F1A2D31D4A4411F970.roa (hash: hHqfaMqHudinN58Q6SY+uw71820GehKW91mX6AroNpg=)
23: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tLlrYfQgXxnaToikebv9ZSOJv+09BIPvjOuMTXnI+m0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 18:44:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3581 (0xdfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Sep 4 18:44:52 2026 GMT
Not After : Sep 11 18:44:52 2026 GMT
Subject: CN=6a9b11a4-3258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8a:d5:5e:7b:53:f3:b3:a7:9f:39:dc:3e:95:
e5:c0:e3:4c:24:a2:fc:92:18:13:67:20:ee:93:17:
bb:6a:7b:a1:2d:a0:88:49:f1:ae:f1:fc:88:25:57:
e4:bc:bf:60:70:e9:8e:d5:52:c0:ff:06:69:8f:97:
82:6d:c0:4d:a7:4f:4f:9d:53:9e:87:59:6d:02:ef:
63:98:64:9b:af:de:49:4b:9f:13:a1:73:2b:0b:04:
69:95:c4:c6:2b:27:eb:ba:78:17:93:d1:75:75:a9:
0e:81:07:7e:29:b1:6f:27:90:eb:36:2c:82:5c:0b:
31:20:32:69:94:8f:35:7e:db:36:af:c5:ba:4b:b4:
8c:f3:65:14:0f:eb:75:0c:b5:02:ec:4e:55:ca:4b:
04:0f:a7:10:bf:00:ce:75:97:83:22:56:c0:f0:2a:
0a:61:14:29:a2:c3:82:15:42:b7:d0:6f:2b:c5:aa:
a1:27:ef:3e:d2:b4:29:a1:6a:98:a8:19:64:d4:31:
f8:45:51:0a:69:35:8c:b3:7b:84:d2:3f:5e:10:9e:
69:c0:ab:6d:cd:d7:cc:43:14:f7:a1:08:47:8e:54:
90:d2:a6:9e:8f:69:e6:56:d1:26:29:a1:08:b7:8f:
dd:50:4c:6f:c9:c9:58:90:bc:01:f5:80:6b:4c:b1:
a0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F4:D4:52:04:98:E0:90:F3:1D:50:B4:31:00:77:36:7A:1E:BA:42
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0f:5c:fa:aa:03:35:6b:72:e1:77:07:71:53:83:ac:47:24:
8e:ed:ae:12:74:a0:35:fa:94:d9:9a:4b:a0:08:a4:18:04:38:
b0:c9:5d:a1:5f:95:36:d9:b6:0d:5c:23:98:ee:e4:45:6f:ec:
f5:7d:12:eb:03:c7:77:97:d8:6a:dd:1d:f1:77:6d:74:0a:ab:
f9:a0:d6:de:7a:09:0f:e6:89:03:6c:0a:ce:68:83:c5:1b:bd:
48:54:00:70:26:90:e1:a2:65:8f:fe:67:bf:27:1f:97:52:ce:
85:04:15:e7:e8:c7:81:64:f5:f8:07:0c:e3:9a:0e:55:b3:3b:
dd:35:52:74:eb:04:be:fd:a2:be:3f:cc:ee:a9:ed:6b:35:13:
2e:b1:2e:bb:e2:42:87:5d:3e:f0:46:f2:fe:96:37:7b:70:57:
fc:89:07:ad:74:8e:18:d7:c9:af:f8:37:9a:6c:e9:84:a2:7c:
c1:c3:1e:ec:f6:72:f3:97:14:6b:f3:99:4a:9b:f7:69:b3:b3:
bc:11:16:23:fc:93:56:c4:b5:04:6d:5d:56:f5:f9:f8:36:47:
4e:3f:78:bf:bd:1e:55:7a:94:de:17:4e:c5:7a:f0:7d:4f:49:
16:0e:4b:45:80:b0:5b:2b:32:d3:73:0c:aa:cd:cd:3c:aa:2e:
d4:9c:9f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:27:14 2026 by rpki-client