
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
File: TT_EcGT06hvcqym55lsx103iZOA.mft (raw, json)
Hash identifier: hmTyt6lwJCqqZ3HE66/U87HIRUX6vtb78gQWvQMfeLk=
Subject key identifier: 6A:57:E9:97:10:1C:52:CB:4D:10:EF:24:DF:7D:D7:EE:26:A9:88:0C
Authority key identifier: 4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
Certificate issuer: /CN=A91AFAAC/serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Certificate serial: B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
Manifest number: AD
Signing time: Fri 17 Apr 2026 06:53:23 +0000
Manifest this update: Fri 17 Apr 2026 06:53:23 +0000
Manifest next update: Fri 24 Apr 2026 06:53:23 +0000
Files and hashes: 1: TT_EcGT06hvcqym55lsx103iZOA.crl (hash: xyYnlb1feUH6vqYO+FGsN1onZSHeKLaTrMub8hD1rBk=)
2: 40F5D9E6354B11F0A873F14DC4F9AE02.roa (hash: stzvaQb1q0aBe4Ji0bjzDRZOM/zXcEzYJI+enj1Jq5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl
rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFAAC, serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Validity
Not Before: Apr 17 06:53:23 2026 GMT
Not After : Apr 24 06:53:23 2026 GMT
Subject: CN=69e1d8e3-a435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:23:9b:d0:c4:44:39:30:3b:c3:9f:12:4f:
34:dd:1c:88:e4:f8:32:df:fe:5e:34:22:84:cb:79:
04:7b:9e:51:14:67:bc:aa:06:8e:be:f6:98:a7:3b:
8a:b5:22:1b:07:ee:2b:41:90:77:57:db:fe:32:91:
3d:29:e9:6d:f0:8f:67:e0:8b:3f:78:7f:a7:a9:d6:
08:f3:41:af:95:5f:9d:2a:96:4c:6c:0f:01:69:a0:
db:f3:72:dd:fc:d5:d3:d7:e0:3b:bd:2f:82:c9:40:
81:b1:f0:05:5b:16:1e:78:09:e3:ac:ba:29:ec:f9:
46:43:6f:2a:ca:c7:fe:db:28:17:37:8b:7b:c6:43:
06:4f:0a:21:39:87:cf:6e:78:73:f6:39:a1:60:3f:
93:c7:eb:a3:1b:6f:0e:34:b1:f2:f1:16:15:26:3b:
40:7c:2d:d4:ef:b8:08:43:80:12:b6:30:63:68:35:
ea:c9:4d:a2:81:f3:ef:e6:1d:8d:d0:8c:70:6d:fa:
9b:f9:4d:51:bc:45:76:62:29:67:c4:b3:a5:65:18:
f2:6f:8d:d0:f0:9b:65:d3:a3:b1:c5:d1:c7:cc:23:
81:52:b0:8d:c4:06:d5:52:79:20:70:3b:d5:64:62:
d8:cf:dd:a9:c6:43:7a:df:ea:a6:d5:2b:9d:8f:46:
c3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:57:E9:97:10:1C:52:CB:4D:10:EF:24:DF:7D:D7:EE:26:A9:88:0C
X509v3 Authority Key Identifier:
keyid:4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3a:ba:c9:77:1b:c9:d4:08:42:18:d6:29:ea:2d:88:a5:53:
da:75:28:a2:2c:f2:41:24:f0:8d:b2:00:48:cc:99:0d:a2:c5:
f5:f4:ed:a3:0e:06:54:56:0a:0d:b4:df:aa:c2:2f:2a:58:d0:
c5:b3:0d:23:e7:29:c3:7d:66:d4:c7:cf:eb:06:c0:47:ca:e2:
83:28:92:d8:d5:50:e1:87:df:c0:9d:dd:41:8d:fd:a3:b0:77:
cb:0a:92:45:63:b6:d7:d5:cc:ad:c0:60:df:ac:c8:d3:ea:d4:
04:a6:0c:2b:b4:6a:93:3f:ce:61:c8:de:0f:01:dd:07:c4:20:
e9:83:10:67:20:57:5b:c0:59:d4:9c:61:51:36:e2:d5:64:55:
f6:18:ea:a6:d1:ae:29:0f:6f:42:62:3d:2c:33:c7:6f:e4:05:
0b:0f:1a:00:50:8a:94:a5:fe:6e:e2:2c:ea:11:b7:0e:91:0c:
33:54:a5:1a:87:46:76:7b:63:b1:1c:dd:bf:03:5e:81:04:55:
a1:e0:b6:6a:5a:db:0d:0d:c1:c3:77:a8:f9:ed:39:7e:d5:44:
7b:60:ae:9b:e3:ed:ae:0a:f6:7a:81:db:a2:86:92:cf:18:62:
c1:c1:09:47:0a:39:48:25:de:84:c7:4d:55:d8:50:4f:1a:36:
38:50:97:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:24:23 2026 by rpki-client