
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
File: TG4jrAOOQ4__sH5li6xvKCFTRPs.mft (raw, json)
Hash identifier: E9HzcQHjblrdT2FBx+LQtnbmrDMdVBgIgm1Y3ZYzMYA=
Subject key identifier: A2:BF:5E:2B:28:D4:26:18:8D:16:55:EF:83:DD:D9:30:70:3D:2B:87
Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB
Certificate issuer: /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB
Certificate serial: 1086
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
Manifest number: 1079
Signing time: Sat 04 Apr 2026 17:15:59 +0000
Manifest this update: Sat 04 Apr 2026 17:15:59 +0000
Manifest next update: Sat 11 Apr 2026 17:15:59 +0000
Files and hashes: 1: TG4jrAOOQ4__sH5li6xvKCFTRPs.crl (hash: FJldpTFUZqcFkMVuYpbg9+oH+a1mk9GVT/FxbF8E0og=)
2: 159F22549D1B11ED96607C22C4F9AE02.roa (hash: UZ/sDYWhUU8n3wLtjpyLN8Vx46G+xjeN+IlTnHCxK80=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl
rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4230 (0x1086)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A793A, serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB
Validity
Not Before: Apr 4 17:15:59 2026 GMT
Not After : Apr 11 17:15:59 2026 GMT
Subject: CN=69d1474f-69bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:6d:33:52:b2:aa:21:29:e5:19:a9:47:2d:
3d:f4:b8:65:c3:f0:6d:f2:08:9a:a8:fc:4e:ad:62:
8f:70:3c:df:37:59:c0:d7:d4:1b:af:0b:e8:8f:06:
83:76:90:76:60:c9:57:86:6c:86:96:75:d7:86:e9:
0e:bb:bf:61:d5:68:1b:31:35:0c:62:dc:fd:d2:f7:
19:6d:b5:d5:c6:c9:29:d7:6e:8c:24:f9:b7:28:0e:
01:60:cf:f7:52:4e:d1:b2:b4:3c:5b:d8:0b:d1:fb:
37:6b:cb:45:c9:48:ca:c8:7b:3d:6b:55:cb:39:d5:
72:1d:63:7c:f2:3e:d0:39:45:b8:ec:ea:ac:bf:20:
ef:0c:37:aa:68:61:2d:f5:93:af:13:d1:bf:5e:c6:
6d:93:8a:e2:7c:94:29:93:d9:84:08:59:eb:19:64:
2b:09:9e:88:6e:10:6b:2b:e1:d5:54:03:79:57:43:
5a:41:6f:95:cf:12:fe:59:45:29:0c:7c:8f:33:db:
cb:08:d1:60:c1:1f:61:0d:98:c8:cd:56:13:5f:d5:
6f:39:c4:69:23:0e:2d:89:9e:13:e5:5f:d8:10:f8:
25:c0:51:7c:06:dd:df:38:9d:8e:19:5b:0f:b1:2f:
31:4c:a4:cf:19:4e:a8:ef:c1:f3:f0:fc:7d:73:42:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BF:5E:2B:28:D4:26:18:8D:16:55:EF:83:DD:D9:30:70:3D:2B:87
X509v3 Authority Key Identifier:
keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:4b:e8:25:69:f4:f1:67:2a:df:c7:c6:e9:38:98:9c:1a:e8:
24:e6:ac:01:69:ee:8a:87:51:29:db:8f:72:06:a7:e9:a4:5a:
06:2e:65:3c:68:77:a9:30:f9:fb:cc:57:79:21:f6:09:57:5b:
cb:3b:13:69:15:49:84:d4:1c:a6:d1:96:09:2f:85:56:71:07:
59:0f:83:3b:12:4d:d6:ca:a7:a3:bb:20:2e:5d:85:29:81:25:
ff:98:db:3d:ff:c0:67:38:e4:45:16:27:39:61:2e:f4:e7:e8:
4f:10:fc:3d:0a:24:ad:82:b9:5c:17:86:e2:2a:a0:4b:59:03:
4d:0e:e0:12:ac:88:eb:cd:15:e7:c5:e5:8a:a6:81:27:69:b0:
de:ca:cf:68:60:63:34:30:b0:be:ef:d5:ab:d0:26:4f:05:08:
cd:6d:5a:6e:6c:66:f1:2b:d5:ab:30:4f:85:96:dd:23:fa:6f:
d5:28:65:d3:76:f5:a1:7c:9a:21:2f:92:f4:75:94:2a:18:6d:
d5:d5:8e:4c:c2:26:7e:70:54:d7:81:35:5c:3a:21:6f:03:c4:
3d:e1:58:86:d7:fd:bc:9d:4f:94:a0:20:2a:6f:b6:27:dd:bf:
29:29:bf:74:bb:04:6e:4a:79:7b:c7:ea:06:09:9a:7d:44:6c:
3d:7c:95:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:02 2026 by rpki-client