
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
File: TT_EcGT06hvcqym55lsx103iZOA.mft (raw, json)
Hash identifier: SSs34ohBpKVJ2XLa5+Q2GCgidshIGZSYhh/EoVUl4t4=
Subject key identifier: A7:1B:11:D7:91:77:F8:8E:1C:4E:A8:80:4E:F2:AF:4A:FA:ED:82:EB
Authority key identifier: 4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
Certificate issuer: /CN=A91AFAAC/serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
Manifest number: D2
Signing time: Tue 23 Jun 2026 07:01:01 +0000
Manifest this update: Tue 23 Jun 2026 07:01:01 +0000
Manifest next update: Tue 30 Jun 2026 07:01:01 +0000
Files and hashes: 1: TT_EcGT06hvcqym55lsx103iZOA.crl (hash: uzH607EI6xFTuYqBLy/VoE0rYFwNvKt55KrsJ7WBrJU=)
2: 40F5D9E6354B11F0A873F14DC4F9AE02.roa (hash: A51WAFZICOqaHWPYKHK1gS3hIBrXwfplrOAwkWglh6M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl
rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFAAC, serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Validity
Not Before: Jun 23 07:01:01 2026 GMT
Not After : Jun 30 07:01:01 2026 GMT
Subject: CN=6a3a2f2d-1f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:e1:99:25:76:f4:c8:ff:32:22:81:16:6d:
86:45:75:2d:e9:e0:6d:75:0b:cf:c8:f8:6b:56:0e:
70:ee:29:e7:81:94:8a:ed:a5:f2:e4:0e:0f:2b:bc:
53:63:d5:0c:e5:22:85:30:5b:b9:82:5c:fd:86:3b:
9d:5e:35:78:61:b3:5d:2b:4a:d0:dd:29:74:fb:db:
3e:8e:3e:fd:91:23:92:fd:f8:12:be:21:53:dc:3d:
80:f8:6e:d2:7a:76:27:43:ef:c0:45:3d:51:9a:c3:
c2:dd:ec:0b:7d:af:e8:b4:94:07:e0:9e:eb:d9:8b:
f1:6a:d6:e7:59:bf:3d:50:48:f8:95:f6:bf:9b:5e:
05:50:3c:f3:25:91:36:3b:8a:55:b3:54:ce:21:06:
e4:1b:36:31:ef:3c:73:8d:84:2c:31:96:99:4b:99:
cb:11:b2:37:ad:d8:1b:e1:08:f4:24:46:3c:90:64:
3d:5b:c8:3f:38:34:88:ea:f0:24:34:ba:9c:27:98:
72:1b:9f:98:2b:e6:c2:ed:6f:30:3d:e3:7a:4d:3f:
6f:f6:58:10:ba:42:2d:2c:85:f8:b5:fe:55:6a:d1:
0b:cd:cd:64:b1:a5:9f:13:f6:8c:f8:e7:c1:28:1e:
3e:e5:94:fa:9a:f7:04:83:30:71:4a:21:7e:46:4e:
a8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1B:11:D7:91:77:F8:8E:1C:4E:A8:80:4E:F2:AF:4A:FA:ED:82:EB
X509v3 Authority Key Identifier:
keyid:4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:03:e6:e6:f9:c7:95:9c:05:4f:99:dd:e6:d1:6b:57:46:81:
b7:89:90:fa:74:e3:ff:7d:cb:44:5b:77:40:fc:a9:f6:fa:74:
91:1f:f0:9d:b0:2b:5c:38:b1:f5:4a:55:39:1f:0a:ea:49:2d:
4f:00:92:2c:28:e2:dc:36:ec:15:7d:d2:c4:7d:77:4e:e3:07:
6e:62:bd:b9:22:e7:a0:a6:f0:1c:07:b8:a1:92:a5:9e:6d:69:
e8:95:56:15:bd:9d:5e:b4:64:b7:78:d9:5d:38:f6:e5:17:1a:
88:23:98:1f:84:87:19:bc:ab:1f:34:93:92:24:df:0f:2d:8d:
c6:f8:b4:3c:49:19:e0:8c:f8:f3:54:81:77:73:e7:53:cb:ac:
55:ff:42:c0:02:25:b4:9b:5f:1e:c4:ec:e0:51:73:99:c1:39:
18:eb:4c:2a:1f:56:85:b7:43:d2:0c:31:c9:58:13:bc:03:44:
ad:73:e4:7a:8b:ed:ac:57:0d:65:3f:47:29:b8:59:0e:5e:18:
b9:82:10:ca:78:82:6a:ce:72:27:1e:90:12:a0:e1:d9:55:0d:
49:db:b3:86:1c:47:bc:52:6d:44:6e:55:62:78:1a:52:5d:df:
58:1c:73:e7:a3:fb:09:e8:58:23:e0:99:22:e7:ea:e9:87:96:
33:ff:f5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:30:54 2026 by rpki-client