
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
File: TT_EcGT06hvcqym55lsx103iZOA.mft (raw, json)
Hash identifier: 7D3R3zUj7D/1NwidZqCNryVnubEOihyFJkqhmgmCT6Q=
Subject key identifier: 7C:F1:3B:17:3B:5D:53:3E:E5:9F:B2:01:67:54:D3:86:85:05:A3:03
Authority key identifier: 4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
Certificate issuer: /CN=A91AFAAC/serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
Manifest number: 96
Signing time: Tue 03 Mar 2026 07:02:44 +0000
Manifest this update: Tue 03 Mar 2026 07:02:44 +0000
Manifest next update: Tue 10 Mar 2026 07:02:44 +0000
Files and hashes: 1: TT_EcGT06hvcqym55lsx103iZOA.crl (hash: 3FKR5r3yXqPMrJhrlaSHi3/DpD/44lmuL5rXsi/98dk=)
2: 40F5D9E6354B11F0A873F14DC4F9AE02.roa (hash: stzvaQb1q0aBe4Ji0bjzDRZOM/zXcEzYJI+enj1Jq5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl
rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFAAC, serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Validity
Not Before: Mar 3 07:02:44 2026 GMT
Not After : Mar 10 07:02:44 2026 GMT
Subject: CN=69a68794-6b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:68:1d:5c:30:e6:d9:97:d0:58:a7:c5:de:
ac:15:bb:6e:9d:e0:b3:20:12:b0:d3:a8:46:9e:6a:
ae:d3:7c:61:b1:e7:a6:d8:37:85:0e:d6:28:35:1e:
02:44:65:56:85:19:35:ba:bc:06:6d:03:30:15:2a:
a3:a5:42:04:d9:77:63:aa:f1:36:98:b5:7f:bc:7f:
9d:0e:13:b4:38:3e:32:aa:c1:ec:1f:9d:a0:b5:40:
c2:26:4e:f0:f7:1a:bf:fc:3b:98:0a:5d:3f:0d:37:
18:0a:60:61:d2:c8:75:bd:7e:17:dd:fb:60:e8:bd:
ba:22:11:82:d8:0c:78:21:31:d4:62:d3:a8:4e:b9:
63:5c:ca:65:09:98:19:a0:dc:fb:b9:13:e1:22:09:
50:00:46:e5:27:ee:dc:94:31:63:76:33:23:29:c1:
af:ca:09:69:b9:7b:71:4b:0f:55:22:0e:fa:e1:77:
13:7b:83:2c:44:c6:55:bc:d5:5a:f7:34:24:b7:ab:
45:80:67:22:b8:88:63:5b:11:b9:0d:b7:00:2c:91:
d9:8f:f7:c1:ad:a9:27:17:01:95:f6:33:fd:73:2e:
8f:6f:ca:f2:72:f3:22:50:05:af:92:41:64:75:07:
8f:2a:95:20:32:8c:a8:08:55:b1:34:00:0e:d3:3b:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F1:3B:17:3B:5D:53:3E:E5:9F:B2:01:67:54:D3:86:85:05:A3:03
X509v3 Authority Key Identifier:
keyid:4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:44:6d:d5:79:53:84:7e:e7:93:55:13:b2:52:61:44:53:6b:
3a:8b:54:5b:4d:b9:86:fb:2f:f1:3c:0e:48:71:9a:c7:2f:c3:
ce:24:29:61:d6:7e:00:40:1d:71:2f:31:5b:a2:00:0e:db:d6:
fd:92:0c:1d:e2:db:0c:48:ca:6e:92:88:59:25:e5:b1:ff:bd:
b7:ad:a6:32:04:32:01:67:de:77:74:f1:89:b5:d5:04:b7:1e:
f9:d8:52:e6:85:69:b0:35:2c:b7:ba:77:44:43:09:d2:61:9d:
06:d4:ea:67:5a:0d:43:ea:c4:77:04:25:88:97:1d:cf:d1:fd:
19:40:66:8e:50:92:8c:10:91:a8:8a:f7:19:7f:2d:c1:82:1d:
96:f6:c9:64:43:77:1e:cf:e5:35:9d:70:45:5f:3b:29:04:db:
22:8f:ab:4a:18:20:73:ec:2b:73:77:f9:34:ef:4c:4d:5a:4c:
ee:fa:c9:9b:a9:6d:81:ae:bf:8a:d5:9b:f6:0c:d8:a7:61:36:
16:6d:c7:6f:3a:a9:fe:ed:6a:b0:81:50:65:d7:60:3a:6f:16:
ed:56:a8:cb:3b:14:f8:5c:53:8a:ab:01:4d:80:9f:53:42:c5:
d4:10:36:2f:e3:c9:d5:0f:61:f4:b0:0b:ae:02:d1:40:64:75:
15:ee:8f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:45 2026 by rpki-client