
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.mft
File: TdgDorFJaSWJyLWTW-UwEPhvP5Y.mft (raw, json)
Hash identifier: jzoacVzsapoYaaMgCIdywEvS0+ISZyApyYH7VghoxXE=
Subject key identifier: 95:E6:CC:77:72:BE:A3:4B:68:5A:B2:2E:B5:CA:C5:19:38:90:DE:F1
Authority key identifier: 4D:D8:03:A2:B1:49:69:25:89:C8:B5:93:5B:E5:30:10:F8:6F:3F:96
Certificate issuer: /CN=A91ADCB5/serialNumber=4DD803A2B149692589C8B5935BE53010F86F3F96
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TdgDorFJaSWJyLWTW-UwEPhvP5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.mft
Manifest number: 1F
Signing time: Tue 19 May 2026 08:48:34 +0000
Manifest this update: Tue 19 May 2026 08:48:34 +0000
Manifest next update: Tue 26 May 2026 08:48:34 +0000
Files and hashes: 1: TdgDorFJaSWJyLWTW-UwEPhvP5Y.crl (hash: gghUZ5R7j9AzPLjNBdyqzskBpSbA9jONYd6ezFTbV9M=)
2: 444120CE2D6111F1A40866B8CB833773.roa (hash: ZAH3UvNZsRyQgkmq6DAPegLexqNQ6jKxjrSkeAlJ2aM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.crl
rsync://rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TdgDorFJaSWJyLWTW-UwEPhvP5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADCB5, serialNumber=4DD803A2B149692589C8B5935BE53010F86F3F96
Validity
Not Before: May 19 08:48:34 2026 GMT
Not After : May 26 08:48:34 2026 GMT
Subject: CN=6a0c23e2-12bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:76:5f:7c:7d:41:2d:8d:55:d0:d6:cd:80:
15:36:ff:b1:b2:84:8e:30:de:49:fd:f6:c3:fb:f4:
d7:1e:1b:3d:d6:f5:0d:50:79:41:09:17:8d:8a:93:
02:e2:24:90:ad:12:6e:3f:c0:27:b2:12:ef:4a:a2:
98:fc:a5:8a:0e:f4:9e:35:2d:c5:91:ba:4a:bd:54:
c5:7a:1c:67:25:92:95:fb:04:5c:70:0a:15:4b:8a:
f0:99:40:f3:72:52:49:93:fb:cd:66:67:bc:bc:01:
56:e9:14:8f:fa:16:3b:9a:f0:1a:8e:ee:82:5c:b8:
e2:22:2f:df:8c:6a:58:02:c0:08:1a:22:ac:16:8a:
cf:08:0c:eb:7e:9b:a8:2b:1f:c8:57:2c:c1:b2:90:
54:59:ca:0d:70:6f:6c:78:94:1a:44:8b:03:d6:27:
6a:2c:d8:16:96:1b:bf:1c:76:77:0c:ad:4d:b3:57:
f5:81:bb:05:a1:06:2b:0a:dd:a1:51:ad:4a:b3:88:
27:96:aa:bb:8c:5d:f4:5e:6a:a5:40:30:c3:59:b5:
0b:1d:e3:af:fb:28:b3:38:0b:94:84:e6:64:9b:41:
3c:1a:5e:af:f9:77:eb:7b:21:8a:82:ee:2a:0a:1f:
20:0a:88:9b:20:b2:4c:71:4e:b8:1f:e3:ef:d1:4e:
3f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E6:CC:77:72:BE:A3:4B:68:5A:B2:2E:B5:CA:C5:19:38:90:DE:F1
X509v3 Authority Key Identifier:
keyid:4D:D8:03:A2:B1:49:69:25:89:C8:B5:93:5B:E5:30:10:F8:6F:3F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TdgDorFJaSWJyLWTW-UwEPhvP5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:20:2b:92:6a:b3:5b:75:4f:fd:3a:47:70:43:45:dc:f8:ee:
2f:a6:9c:f9:59:5e:8e:68:95:3f:1e:d8:a4:b5:cc:48:27:3c:
ec:73:af:07:3e:d7:03:a3:10:a5:da:22:c0:48:79:35:5a:1e:
ad:58:3b:8c:84:50:93:0f:a9:b8:f5:fa:15:df:99:ab:b7:81:
34:0c:f5:48:f8:49:6f:7e:65:8d:61:77:72:a3:ce:21:98:61:
0c:02:8b:98:3f:99:29:22:50:00:f5:32:f8:b2:dd:65:f8:3e:
50:e2:40:12:fd:3e:f1:a8:12:b8:3e:7d:67:f2:49:47:46:1c:
22:e3:85:4c:24:a2:b5:7b:0a:b7:6d:25:84:59:c1:4f:22:d5:
be:be:3b:3b:e7:67:b7:ca:ab:2b:1d:ab:e2:a7:36:44:12:50:
93:b7:94:8c:fe:84:4a:f8:a6:0f:02:f7:ee:5b:bf:71:80:2b:
a0:6e:bd:67:ab:da:47:af:dc:39:8c:ed:3d:1e:56:8c:fd:e1:
dc:55:94:4a:f3:77:fc:eb:89:15:8b:06:16:1e:a8:de:9d:06:
70:f4:66:8b:a4:3c:d3:c3:13:5c:9e:86:ce:98:c3:1c:6e:3a:
47:39:ae:ce:24:64:82:8f:da:47:88:2d:f0:a5:8d:a1:e1:2d:
39:dc:b1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:18:04 2026 by rpki-client