
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
File: tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft (raw, json)
Hash identifier: T3Ygnblp+cFFINK5/nwniYR3o9hz7chIcEPFtQhV/ak=
Subject key identifier: 56:FC:E9:7B:9D:B3:77:BB:41:02:DC:17:3B:F3:1F:C9:BE:A9:95:19
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Certificate issuer: /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
Manifest number: 0203
Signing time: Wed 21 Oct 2026 03:59:08 +0000
Manifest this update: Wed 21 Oct 2026 03:59:07 +0000
Manifest next update: Wed 28 Oct 2026 03:59:07 +0000
Files and hashes: 1: tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl (hash: grqE4SJuL/ySQwr+vAzUjwRe3Quo0kiVFMTArOhb45Y=)
2: 6D85335A58BC11F0983EE987C4F9AE02.roa (hash: bdKA7kvKI2THYNjeyi3Lbacr6XK2z8rAQaWiwHnpqT8=)
3: 657EDAC0003D11F187167F2F4B6F56BC.roa (hash: 4QNpZ4lYAWDyFPtVqSrnEIjMO2wek++7TF/91yII7Vs=)
4: A6AB9D38335211F1960FCBDEC6833773.roa (hash: eXxCFDfnDfAFb+VxnPASq3AvIfkbg/uecOo6gz8yP10=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 03:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Validity
Not Before: Oct 21 03:59:07 2026 GMT
Not After : Oct 28 03:59:07 2026 GMT
Subject: CN=6ad8388c-94de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:cd:ad:c0:1f:96:6c:cb:5c:b5:04:e3:51:
62:1c:a8:34:59:11:b1:87:5e:ae:80:09:1f:25:5e:
21:17:95:6c:78:84:8e:d5:18:6a:a9:8a:d2:80:1b:
51:c8:97:40:f0:d4:5c:cf:28:0a:b6:8b:91:72:07:
2a:db:20:22:e7:44:74:27:e5:c0:5e:9d:ba:b6:63:
5f:24:6a:d7:b3:de:66:b8:be:fe:c5:b6:24:9f:9a:
08:b1:73:81:01:3c:fe:32:67:1c:6b:c1:86:23:8f:
ff:6b:ed:0a:27:8f:d5:bf:05:46:d7:3e:5e:85:60:
ce:91:31:bb:91:5f:aa:30:eb:6e:3b:e7:00:b6:80:
21:a6:ba:6e:be:2d:6c:9d:b8:c9:22:3d:e9:11:02:
a5:c1:15:9b:11:f1:52:4a:f0:13:e9:96:dd:1f:52:
13:ea:40:9c:90:d8:6d:51:3a:32:9b:1b:6e:5e:f8:
33:ad:bf:80:73:c0:5b:8a:ba:9a:1e:f6:2f:71:50:
de:80:66:04:ae:85:b8:c4:4c:2b:f3:d4:2f:e3:f3:
88:95:ad:3b:42:c3:c9:7e:f5:62:a6:17:11:45:c2:
52:c1:52:f8:3e:66:a2:56:3c:2c:22:3c:07:6b:c2:
29:82:b7:fa:6e:80:e8:af:2a:a5:fb:31:65:17:4d:
13:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FC:E9:7B:9D:B3:77:BB:41:02:DC:17:3B:F3:1F:C9:BE:A9:95:19
X509v3 Authority Key Identifier:
keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1e:4d:a5:bb:48:89:a0:2b:77:ba:0c:e0:6a:8b:9d:6e:58:
94:fb:5f:94:95:d1:4f:54:32:b6:aa:6a:e1:8a:35:4b:da:e8:
c3:71:e7:38:bd:98:19:3f:df:b7:cb:82:60:aa:f9:bf:f0:d2:
27:89:fb:0b:a6:a3:b5:09:3c:0e:0f:f6:20:d5:13:0c:2f:0d:
b6:2c:f7:4a:59:58:25:f9:6c:e6:90:f0:e7:b0:57:dd:43:a7:
12:4b:1b:61:2a:17:d1:97:c7:ac:58:ae:cb:ea:8a:ec:de:a0:
5f:bf:bf:a2:7f:61:ce:8a:c9:5f:5e:ff:1d:67:06:c2:bc:24:
bb:e0:6f:09:cb:b5:97:80:11:85:a3:02:9e:a8:c5:50:9f:68:
2c:ed:8f:da:34:af:47:95:62:db:65:39:94:93:f2:5e:83:d4:
27:88:64:eb:03:86:06:ef:5a:2a:57:dc:b7:6a:9e:9c:f9:d0:
5b:22:b0:24:16:33:c0:a2:89:a6:97:63:05:6f:b8:57:04:28:
c3:ea:d7:fc:df:1b:c6:d0:19:2f:81:e5:b6:d1:93:b5:52:a4:
45:49:36:6d:ff:2a:99:b2:e5:27:bd:9e:ef:1a:a0:7b:e1:c0:
07:82:3e:5f:c9:09:7d:5f:43:6b:92:24:60:22:a4:ba:cc:d3:
fb:07:23:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:23:33 2026 by rpki-client