
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
File: tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft (raw, json)
Hash identifier: VyGI/o25oLzYHcBAoSx2pR7U1Yhamct3J5jGPURmCWs=
Subject key identifier: 29:06:49:BC:70:A8:38:F9:78:3E:80:1D:5B:48:6F:D5:29:AF:6B:A1
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Certificate issuer: /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial: 01D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
Manifest number: 01BC
Signing time: Mon 01 Jun 2026 04:59:03 +0000
Manifest this update: Mon 01 Jun 2026 04:59:02 +0000
Manifest next update: Mon 08 Jun 2026 04:59:02 +0000
Files and hashes: 1: tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl (hash: iPsp6y6gYkHVoJCaoRGChHOoQQVjeDuzV5YGChjtV8E=)
2: A6AB9D38335211F1960FCBDEC6833773.roa (hash: eXxCFDfnDfAFb+VxnPASq3AvIfkbg/uecOo6gz8yP10=)
3: 657EDAC0003D11F187167F2F4B6F56BC.roa (hash: 4QNpZ4lYAWDyFPtVqSrnEIjMO2wek++7TF/91yII7Vs=)
4: 6D85335A58BC11F0983EE987C4F9AE02.roa (hash: bdKA7kvKI2THYNjeyi3Lbacr6XK2z8rAQaWiwHnpqT8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 04:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Validity
Not Before: Jun 1 04:59:02 2026 GMT
Not After : Jun 8 04:59:02 2026 GMT
Subject: CN=6a1d1197-1bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:19:85:e4:98:6a:d1:8e:64:71:ae:61:ee:
28:64:3d:96:d4:29:c5:e0:47:01:93:f1:cc:d7:de:
91:4f:c0:ee:a4:68:c1:9d:dc:ce:65:4d:0d:3b:66:
42:5f:fb:ca:0d:33:69:fa:87:93:f6:c9:ff:e6:a5:
c8:2e:5b:df:0d:31:d7:4e:1c:84:db:a8:21:e6:6e:
ae:4d:41:4e:c5:13:26:ed:8e:84:80:45:b4:5c:e5:
71:d7:a7:67:48:00:d7:64:32:bd:cc:04:cf:56:1d:
0c:db:09:57:58:d6:b3:d6:30:c4:1a:8c:d9:e5:d0:
24:44:ea:5f:7b:07:e0:72:08:f2:6c:23:63:cc:d5:
53:8c:2c:b2:27:32:eb:e2:47:2a:a6:cc:1c:ec:bd:
29:b8:86:a3:a7:cf:a1:c3:70:48:7d:55:03:c2:4d:
e8:5c:09:cb:8a:df:fa:bc:66:fd:47:b8:56:dd:0e:
4a:db:5e:7d:43:01:13:dc:a5:12:46:89:cd:7b:1d:
dc:3a:68:98:be:cd:8c:88:3a:03:12:b2:04:6b:4b:
83:23:97:cf:f5:3d:48:67:61:f5:3b:32:6a:b9:dd:
82:46:e0:0b:15:35:b6:87:5b:34:c8:ef:54:98:18:
f3:2b:76:80:55:7d:4d:35:8b:eb:7b:9c:9d:f8:20:
75:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:06:49:BC:70:A8:38:F9:78:3E:80:1D:5B:48:6F:D5:29:AF:6B:A1
X509v3 Authority Key Identifier:
keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:91:c6:db:97:49:cc:72:f3:3c:24:a9:b2:ea:06:dc:bb:e3:
a3:6f:3f:f3:9d:8c:25:8a:57:3f:1c:01:6c:2d:d5:83:b1:1d:
18:dc:54:6e:1c:e2:2c:c2:b8:b3:22:68:c0:a7:02:ba:52:3e:
67:b2:79:8e:7b:d1:52:a8:0a:d8:65:8f:7b:8b:e7:78:66:33:
1a:27:32:ac:6e:4a:32:c8:a4:a5:30:da:e3:b4:59:1d:73:5e:
ea:1c:8e:7c:95:bd:f8:1f:9b:cc:ae:9d:d8:3a:08:c0:60:40:
21:ef:63:4a:bb:da:2a:c0:a2:51:b8:09:f9:96:ee:a7:7f:cc:
5b:00:cf:3f:6d:5d:db:6e:01:67:60:03:9d:88:d5:18:df:6a:
cc:38:60:7a:0f:37:f5:1c:d5:63:de:38:86:83:32:4f:dd:6e:
0e:b0:33:9c:4d:f0:23:ff:a2:98:5b:20:87:76:2b:55:86:4a:
bc:49:ed:81:fc:15:a4:b0:11:2e:6c:cb:84:8b:ac:77:5f:62:
cf:a3:6f:f9:7b:c8:14:7e:1f:5d:50:d0:01:8d:a1:3b:5f:9b:
94:47:8d:7a:b4:5f:f4:3e:62:23:2b:3f:cc:0e:a2:45:cf:20:
e2:6c:ee:6e:56:80:c0:b3:b4:a8:e1:8c:65:c2:99:ed:66:59:
b3:25:35:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:17:05 2026 by rpki-client