
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
File: tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft (raw, json)
Hash identifier: Yyg6jxZX20zAl7V4rGpowxLWIMnNTfsh3DVBUYXD19w=
Subject key identifier: 70:CF:A1:39:5A:F4:F8:04:9D:A6:F0:DC:60:D8:50:64:8A:AA:87:6E
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Certificate issuer: /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial: 0205
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
Manifest number: 01EB
Signing time: Thu 03 Sep 2026 03:53:10 +0000
Manifest this update: Thu 03 Sep 2026 03:53:09 +0000
Manifest next update: Thu 10 Sep 2026 03:53:09 +0000
Files and hashes: 1: tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl (hash: ogrhQFsqXv1mqgfD/cVRyPhDBg8GK/UUzQx6tU/Ryns=)
2: 6D85335A58BC11F0983EE987C4F9AE02.roa (hash: bdKA7kvKI2THYNjeyi3Lbacr6XK2z8rAQaWiwHnpqT8=)
3: A6AB9D38335211F1960FCBDEC6833773.roa (hash: eXxCFDfnDfAFb+VxnPASq3AvIfkbg/uecOo6gz8yP10=)
4: 657EDAC0003D11F187167F2F4B6F56BC.roa (hash: 4QNpZ4lYAWDyFPtVqSrnEIjMO2wek++7TF/91yII7Vs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 03:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Validity
Not Before: Sep 3 03:53:09 2026 GMT
Not After : Sep 10 03:53:09 2026 GMT
Subject: CN=6a98ef26-3546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:8c:af:6a:02:a7:7b:e2:b6:fc:00:36:94:
7c:44:da:2e:b6:ae:41:9a:a4:5c:07:ae:c1:65:e5:
76:d6:16:6f:00:d6:e8:32:e9:10:fc:71:92:7f:9e:
08:7a:f5:cc:6e:a9:5c:9d:87:ac:12:cc:11:54:15:
5e:8a:f4:2b:f8:f3:da:2b:eb:3b:4b:5e:37:6f:ac:
83:63:70:b7:b8:e5:29:cc:3a:11:98:0a:e5:72:83:
ce:36:25:4b:3e:d6:d6:77:c8:96:a8:26:b2:cd:9d:
0b:66:49:f7:f3:78:47:7a:69:db:62:53:a8:29:ba:
ce:ac:6b:1d:c0:e7:95:4b:4e:91:ad:44:79:13:bf:
bc:2c:b3:bc:f1:22:75:9f:48:91:a9:e1:7c:b1:b4:
61:69:d0:ee:fe:ed:11:2c:8e:58:fb:a5:a0:e6:03:
1e:d1:31:81:03:e7:7f:ad:be:3e:6c:ee:91:03:72:
e3:fb:d8:f2:2b:6f:82:3b:51:8d:b1:63:17:9f:9e:
8e:c7:b5:ce:be:8a:1f:50:6d:d6:5e:16:66:cd:b5:
e9:cb:ab:eb:de:18:f0:df:17:49:41:59:9e:12:35:
cc:ae:1f:95:33:b8:32:35:17:d6:fd:73:42:bc:68:
49:77:12:d9:c8:6f:2c:6f:3f:75:40:80:05:54:c8:
b2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CF:A1:39:5A:F4:F8:04:9D:A6:F0:DC:60:D8:50:64:8A:AA:87:6E
X509v3 Authority Key Identifier:
keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:14:96:3c:6f:5c:90:3e:f2:ce:59:fa:61:14:89:3d:3e:ee:
35:35:88:ef:6b:55:73:d2:84:58:52:88:45:00:17:0b:68:8b:
dd:ac:87:d3:a3:7c:d7:a2:93:95:8b:27:9b:6f:fd:fb:ec:47:
4d:07:0b:59:0d:19:b7:68:6e:72:b4:ca:0f:39:70:b3:2f:c4:
be:02:fd:96:2a:e4:25:b4:89:38:61:ab:60:e7:33:19:d4:1f:
83:fc:9f:43:00:e1:83:64:00:82:16:de:6f:b4:d9:8b:f7:a0:
a1:a2:5d:fc:9d:46:39:30:e1:ff:4c:5c:8e:33:87:a0:2a:6b:
18:11:6c:f1:89:15:1a:76:72:0c:50:6c:54:ae:9b:02:24:56:
39:ad:29:8a:c8:ff:d5:0a:9a:ad:a3:f3:ac:7f:3d:c1:6b:76:
0b:a3:e9:42:e9:2a:2d:bc:15:39:d6:9f:84:66:69:4e:77:3f:
08:45:e5:69:c6:dc:3d:ae:ad:0b:5d:26:a4:f5:81:fa:ca:08:
96:0b:26:56:3e:44:3e:75:46:c9:f6:c1:11:f1:89:6e:b3:b7:
e7:d4:d9:45:de:ce:1f:37:b6:8b:cd:4d:17:d6:2f:06:60:3f:
48:82:95:c8:57:b2:1a:88:4c:f2:26:32:0d:89:99:10:19:80:
bd:45:46:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:43:40 2026 by rpki-client