
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json)
Hash identifier: 0Be54U+t3dcvE7HyyZAFPvrnjPqgbdbAF/V5XUTBlBA=
Subject key identifier: 33:83:41:FF:9C:E8:AB:5A:19:3C:2B:A3:93:A8:56:42:BD:57:AB:CA
Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Certificate serial: 01B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
Manifest number: 0192
Signing time: Sun 11 Oct 2026 05:22:19 +0000
Manifest this update: Sun 11 Oct 2026 05:22:19 +0000
Manifest next update: Sun 18 Oct 2026 05:22:19 +0000
Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: 6PmgeXdhBNtS24f36/zhI1/oWQBnEJXpJkJNhym1G3M=)
2: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: vA/3pT/OlejQOLwDGu/X6cJGU1FiZeKJpR5h4oJH+vM=)
3: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: 9sVvG8nqt07RYgdjskUj+nbNgt9KI1DJ9r2FPQyKhdI=)
4: 2D6E98583F0511F1B91814A8C9833773.roa (hash: 0KtIlc2mv8e+ApfZaCaLHRgjKyyK1q+r9dEfZMgUpik=)
5: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: ++NAzFdgrCWq7Psti37kYod0Z/Cf5rqqSx5tqVELD30=)
6: C243BFC4FCE511F0AACA4132716F56BC.roa (hash: /Sm2zYzPsltCSnxXkde65QLcv4nLE4DZsGNDto3u1pU=)
7: 0153CD24917111F1B35E84E13111F970.roa (hash: QNI1/+FwX+x7J+2lhUxyR3o7NDToHEAEYia85ddZBYM=)
8: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: DLntlBgYeaZkB0B6+0ueNT8CTGCNO5fqwm8mNbtakHc=)
9: 1E17772C282A11F18C2E09ECC4833773.roa (hash: wvq+eeKQICfr0xthABW2pw2lePGMaoO+cQ143TEevew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 05:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Validity
Not Before: Oct 11 05:22:19 2026 GMT
Not After : Oct 18 05:22:19 2026 GMT
Subject: CN=6acb1d0b-b485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:15:d4:ff:74:21:b4:d5:57:71:b6:d5:f2:88:
81:64:7c:34:58:1b:8f:ca:db:59:79:c5:22:da:55:
c2:cb:7a:73:29:2a:d4:76:a1:0a:e3:48:52:61:ed:
0f:65:29:fc:f9:83:61:35:3f:f8:1e:7c:c2:72:50:
21:73:a5:df:5e:cd:38:a5:f7:70:12:e2:3c:f3:13:
ad:ed:02:da:51:09:d0:8c:5f:e5:b9:a1:79:e7:73:
b4:f7:2d:6c:1f:ee:91:b7:a9:8d:f1:0a:0a:4d:0c:
e0:fc:89:68:87:5d:14:b4:c9:d3:e8:32:bf:e8:d9:
81:e7:ea:46:18:25:a6:ac:eb:86:4c:75:cd:0f:5a:
73:aa:b1:11:ae:f4:99:19:cd:17:5b:17:a9:49:73:
0a:c3:bb:17:eb:2b:3c:ff:fd:04:82:47:b2:aa:f2:
2e:57:6a:d8:cf:85:b9:12:cb:43:aa:37:9f:14:90:
03:52:f8:1a:4d:83:77:df:55:5a:1e:10:60:99:e2:
21:ac:9d:50:d5:c5:92:5f:eb:ee:9f:88:fa:2a:c9:
0f:84:74:f4:f2:5c:66:8f:62:16:e2:20:f4:d2:a4:
3f:2b:29:0a:a7:ed:0f:a9:15:94:2b:2f:d0:85:c0:
85:0f:16:bc:6c:7f:81:89:b8:b4:db:d2:8e:0d:0d:
b6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:83:41:FF:9C:E8:AB:5A:19:3C:2B:A3:93:A8:56:42:BD:57:AB:CA
X509v3 Authority Key Identifier:
keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:df:90:5f:48:e2:b3:e6:45:28:09:5a:70:6a:40:e5:05:45:
93:ff:8d:fe:80:92:65:6d:87:7a:e2:46:04:f0:f0:25:01:5a:
84:09:53:21:80:ef:8a:4b:48:eb:b7:91:5a:fc:01:33:6d:4e:
3a:e9:6b:04:68:ea:91:76:63:a2:1d:c8:9e:12:c1:ad:21:a3:
80:c0:e0:dc:fc:1b:82:4e:bc:52:7d:1d:e3:f4:ef:55:80:e7:
81:79:03:df:78:e8:7d:e7:38:db:e9:09:d0:48:9a:05:84:dc:
f7:52:2a:55:e4:fc:b0:a9:a4:3b:44:81:e7:90:d0:83:1a:b9:
35:e0:4a:03:09:57:11:6a:2f:9a:db:07:0f:6b:c7:54:35:11:
84:bf:fb:c7:56:16:ee:c4:1f:a6:5b:74:01:2c:f0:57:97:4d:
a1:4d:16:9f:f9:ae:4b:f0:ba:4d:04:54:96:d8:9a:7d:a9:bb:
b7:95:8c:c0:3f:ef:d2:bb:61:80:f1:67:90:59:81:bb:4c:f0:
20:cc:bf:7e:41:35:a5:f9:c0:16:a8:4b:96:d2:5f:d1:9e:03:
12:c7:67:3b:09:de:9d:b6:86:2b:b4:c0:7b:9f:fe:ec:0c:a9:
95:d5:22:ed:52:4a:10:b5:b5:4d:ce:ea:33:04:bb:89:ed:6d:
c3:b6:22:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:52:15 2026 by rpki-client