
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
File: TeFRsMiiGEElxljjJzHNoaojRwA.mft (raw, json)
Hash identifier: DKR2lq3Ay7sdWBG6CuE3vSq5jSd3eRiY/IMLN/JbC6E=
Subject key identifier: 3D:97:24:4D:5C:F4:2F:C3:70:A0:B0:05:D1:A0:CE:C2:EF:08:A6:EC
Authority key identifier: 4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00
Certificate issuer: /CN=A91AE9FF/serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
Certificate serial: 045D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
Manifest number: 044A
Signing time: Wed 18 Mar 2026 23:47:39 +0000
Manifest this update: Wed 18 Mar 2026 23:47:39 +0000
Manifest next update: Wed 25 Mar 2026 23:47:39 +0000
Files and hashes: 1: TeFRsMiiGEElxljjJzHNoaojRwA.crl (hash: jpeFSwCriTP8+DqTvmzGEsKOxWUmuLWZTzZBsX6rfaw=)
2: 4FED5C22A1C311EC960A4D2BC4F9AE02.roa (hash: MgjB0xAdbldyaXlgFQLHpz0T2WTl2dxm0udh6T1xJQg=)
3: E7AA9622DAFF11ECA67DA10BC4F9AE02.roa (hash: rL1Qmqmb7xnRddohoRezSgQ1RMEZQzxxbaEpDpxti7I=)
4: 50A8AF54A1C311EC960A4D2BC4F9AE02.roa (hash: MtmhFyitq/sKuN+sgrEu9ImoExGlL1zUzUXMnDpVvkk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl
rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Mar 2026 23:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117 (0x45d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE9FF, serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
Validity
Not Before: Mar 18 23:47:39 2026 GMT
Not After : Mar 25 23:47:39 2026 GMT
Subject: CN=69bb399b-938d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:a4:a3:95:6c:72:a6:63:f4:69:f8:36:63:
47:ac:73:03:ef:72:5c:e6:cb:11:53:62:0e:c6:d4:
f0:70:07:44:4d:72:06:53:c2:bd:c6:88:dc:44:cf:
89:76:22:63:2d:6a:8e:67:18:c0:bb:a8:71:f1:57:
10:24:aa:9a:a6:f0:ff:d3:f7:60:57:47:a6:b4:60:
be:fa:e9:a6:4f:99:0d:5b:8a:e2:e4:1f:c5:17:58:
d1:49:c8:d5:85:14:e7:61:91:fc:6c:3c:18:ad:45:
00:72:77:71:8b:78:62:a4:b4:a7:5e:88:0d:d3:44:
99:18:6b:99:7c:85:74:16:03:ec:c5:6a:e4:27:84:
7a:ed:0d:36:7a:c3:50:cf:e2:cb:c7:c8:b8:23:9c:
18:09:f5:21:50:6f:bc:ab:3f:19:e9:7f:1f:27:f4:
be:ef:8d:7c:5b:8b:30:0a:cb:05:fb:73:32:26:c6:
0a:b5:f0:5e:bd:f4:f2:fc:d7:86:9b:01:ca:79:9f:
08:a4:13:0b:f2:8b:f0:b2:fb:bd:25:8d:cf:30:76:
7c:31:e2:1c:45:61:05:74:bd:f3:8e:92:a9:39:58:
44:34:a1:35:1b:eb:3e:5f:b6:c7:80:ef:f2:2f:f5:
e9:3d:ca:24:95:32:74:61:74:12:55:03:d5:18:7f:
91:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:97:24:4D:5C:F4:2F:C3:70:A0:B0:05:D1:A0:CE:C2:EF:08:A6:EC
X509v3 Authority Key Identifier:
keyid:4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:3e:50:0e:dd:f4:b3:e5:5c:4a:f6:97:c6:91:75:a1:4e:a8:
68:c6:96:39:23:36:26:25:f1:ab:89:2b:7d:fc:2c:64:57:fe:
d4:37:d7:da:70:bc:fc:5a:98:9e:21:0d:c4:57:d3:eb:70:5d:
db:88:7e:19:8f:ac:60:9a:56:b2:c3:2a:2d:c8:fd:b4:16:75:
06:71:77:94:e2:69:87:5f:c2:70:68:5b:56:62:6c:4b:f4:f6:
5a:8e:81:35:bf:1b:2a:58:2c:f6:63:f4:43:a2:f5:61:8e:69:
6b:c0:db:f7:52:33:9b:31:a4:c0:02:08:b9:82:60:ef:c2:98:
e2:a2:9a:69:e1:66:53:d4:bf:b0:ce:88:a7:9e:89:3c:aa:d5:
e8:c2:de:1d:ea:52:22:09:b2:5a:6d:f3:b9:c9:83:f4:18:cb:
81:fd:5f:03:77:c9:49:fc:76:c1:43:5c:2e:eb:d1:ff:08:c6:
60:49:f8:56:82:3c:aa:7f:91:be:80:32:2b:04:b2:a8:c1:49:
05:6d:e0:8c:d1:23:a4:dd:59:3f:8e:0d:bd:3a:d8:7a:4f:d3:
03:c8:e5:57:dd:4b:6b:e1:6d:15:da:83:c2:8e:d1:75:3f:d0:
1a:6e:22:ba:90:1e:e7:48:d5:f7:a5:d6:3a:93:b4:a5:b4:60:
70:94:a6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:06:12 2026 by rpki-client