
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
File: Tusdx9KCFNMWqjN4seKV6RAbTKo.mft (raw, json)
Hash identifier: Qsm3odNQi0HubUe3Zj1N09uKx4Fjd77qCWfXbK9mJe8=
Subject key identifier: 56:4F:47:77:01:83:97:7F:FA:E0:65:F5:4C:62:56:5D:45:46:17:F0
Authority key identifier: 4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA
Certificate issuer: /CN=A91B6B4B/serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
Manifest number: C9
Signing time: Thu 21 May 2026 06:56:06 +0000
Manifest this update: Thu 21 May 2026 06:56:06 +0000
Manifest next update: Thu 28 May 2026 06:56:06 +0000
Files and hashes: 1: Tusdx9KCFNMWqjN4seKV6RAbTKo.crl (hash: OrOa61xcmzh4v9AUKEUmr39qYTNMTTxrEReWevSAVho=)
2: B47FEDD024C411F0A4C45287C4F9AE02.roa (hash: MojY0BL42g+25RMVkptUnRgFYNWH3XV06u/QKeiFORg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl
rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:56:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6B4B, serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA
Validity
Not Before: May 21 06:56:06 2026 GMT
Not After : May 28 06:56:06 2026 GMT
Subject: CN=6a0eac86-2ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:e3:02:8e:64:a2:df:97:05:80:f8:d3:c0:
b4:60:49:66:0f:10:ac:40:f5:7e:88:36:cc:04:21:
c6:88:76:fb:dc:24:65:02:ed:88:23:fc:78:89:4b:
0a:3f:61:c4:74:80:fb:cd:b9:6c:43:1b:a0:65:ae:
4e:f9:5b:cb:1d:c9:73:f4:5f:78:b5:3f:15:48:b8:
ea:7c:13:dd:1e:de:c6:bd:a3:a2:68:1b:e3:1a:92:
e3:8a:5b:2b:06:60:aa:96:5c:42:c3:89:3b:4f:df:
5e:87:22:e8:fc:93:95:02:f1:a4:11:29:99:d8:6c:
62:a1:58:6b:66:cf:49:bd:47:ec:72:b3:f5:6d:b0:
25:67:96:4d:01:aa:20:8c:8e:22:1e:23:69:48:4d:
08:5e:7a:05:e5:e5:da:d3:46:b9:eb:d6:7c:ac:e9:
d6:1d:ae:be:ba:40:5f:77:ee:b8:55:3e:a5:7d:3f:
48:c7:61:89:10:65:b6:61:3e:aa:92:d2:4c:6f:73:
74:f3:55:ca:e9:cb:a8:b0:3d:cf:df:af:bd:38:8d:
3d:c1:6e:17:0a:fc:60:03:03:75:38:cd:c7:0d:10:
71:85:17:2e:09:e3:5a:11:e7:60:92:10:89:db:5f:
ab:b9:ec:5a:79:a5:bf:fd:1b:84:a1:52:a8:19:d0:
b2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4F:47:77:01:83:97:7F:FA:E0:65:F5:4C:62:56:5D:45:46:17:F0
X509v3 Authority Key Identifier:
keyid:4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:de:18:74:95:a7:60:0c:9e:56:fd:66:e5:d6:56:44:d8:b6:
8c:7a:f3:4d:52:15:ef:c5:65:6b:56:9b:ef:31:4c:75:74:b9:
f5:b5:c2:18:29:61:67:b8:6b:de:57:5a:ca:40:a8:30:5b:08:
b6:90:48:9c:db:fc:5a:3e:50:11:17:3e:9b:4a:a0:72:8e:69:
ec:c7:78:e0:87:b9:f4:f3:55:7c:22:f4:82:ca:21:7e:99:0b:
67:67:8d:74:ce:a3:7c:96:38:6a:7e:2e:40:8a:ea:1a:5a:97:
cd:d2:64:52:0e:4a:92:50:ab:48:54:8e:7a:10:82:b0:f1:58:
e2:3f:d1:de:f3:b3:c2:85:e8:b3:58:1b:a4:df:8d:85:82:b8:
84:b2:87:3c:fd:14:16:6f:d4:9f:bf:76:72:ef:a7:df:33:c8:
5f:91:5d:48:6f:6b:a7:d1:3a:69:62:66:05:ae:d5:af:d4:76:
af:8a:56:71:93:68:06:e2:aa:b9:44:b9:08:71:48:75:d6:1e:
d6:4b:a0:3b:8f:e9:21:ed:da:8e:d3:a4:0c:79:25:4f:b7:09:
b5:b2:19:ac:3c:fe:1f:95:9c:89:92:37:51:a3:bc:34:e7:e3:
45:51:8f:5b:69:e0:13:ae:7c:83:47:0b:8c:66:db:25:4f:ee:
76:ff:b9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:40 2026 by rpki-client