
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
File: tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft (raw, json)
Hash identifier: VvmCavbWsTL+A1Z3c6VeHBOjz1GMLU8uiakclWFbX2g=
Subject key identifier: B2:93:A1:78:4A:0D:AF:2C:34:C7:2F:B5:41:CB:AA:23:E3:AB:99:80
Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E
Certificate issuer: /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E
Certificate serial: 02C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
Manifest number: 0C00
Signing time: Tue 18 Aug 2026 20:30:28 +0000
Manifest this update: Tue 18 Aug 2026 20:30:28 +0000
Manifest next update: Tue 25 Aug 2026 20:30:28 +0000
Files and hashes: 1: tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl (hash: MlsB3UmBe/Z8Fysex33p8u85ww+hrzoYkJ5SFKWSNfA=)
2: 6897097E6C6311EDBCFA073FC4F9AE02.roa (hash: VPr6/FdGfv6oDujJfkxaUsLYAPyRqxzzh7zxxXbhpoM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl
rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 712 (0x2c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA0AE, serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E
Validity
Not Before: Aug 18 20:30:28 2026 GMT
Not After : Aug 25 20:30:28 2026 GMT
Subject: CN=6a84c0e4-0f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:c0:34:9b:28:56:e7:a6:f2:65:d3:f3:ba:
e6:42:bf:04:26:8d:27:f8:27:f7:12:3b:ab:56:4b:
fb:47:08:79:e4:c5:ae:8a:d0:2c:f7:d0:f0:93:6e:
68:25:36:b2:c8:5f:5e:e7:46:5a:7b:3f:e0:38:dd:
4b:9c:a0:9e:88:40:98:8e:3e:25:c6:49:25:f5:b4:
b1:3f:51:87:e9:a9:03:c5:e2:a3:ee:bb:88:6a:ff:
02:8c:42:5a:04:09:3c:7f:3d:c1:44:aa:32:c1:cc:
9f:84:75:a4:a0:56:eb:f9:56:1f:4c:e5:7d:4e:2c:
6d:0c:94:d0:b5:e0:26:ff:0c:e7:81:01:67:27:44:
53:3c:31:02:09:58:1a:1a:9b:2d:6d:60:bc:77:b0:
0f:09:a2:ea:f3:7b:3d:78:2b:1b:a0:d2:59:11:4c:
3e:51:06:b7:47:90:e9:c4:b4:ad:d4:2f:4c:c6:f4:
f1:1c:0e:87:66:da:0b:a2:22:78:fa:69:91:15:56:
9d:cb:d7:68:bd:f9:c6:14:4e:92:5d:0f:6d:cc:ad:
5d:60:2e:c9:3a:85:46:21:7d:12:c3:89:77:d3:b0:
6e:b5:0f:f6:96:fc:85:ae:d4:3a:df:da:5e:9b:ea:
55:ea:6d:fe:b1:45:bf:e5:37:00:3e:a3:ae:2e:ec:
d2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:93:A1:78:4A:0D:AF:2C:34:C7:2F:B5:41:CB:AA:23:E3:AB:99:80
X509v3 Authority Key Identifier:
keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:65:03:9d:c7:9e:17:f7:6e:15:01:c1:c2:b6:93:f2:39:4b:
95:fa:cf:92:bc:07:5f:34:ef:d0:21:35:fc:2c:f7:d1:b9:6a:
3b:60:be:00:9f:f3:98:a9:de:e8:b2:79:50:91:a2:0d:01:e3:
ea:cf:57:62:e7:73:eb:57:6a:57:e4:91:6b:9f:1b:4c:b6:0f:
bd:16:fd:12:64:5c:e7:e4:a8:8f:90:97:85:67:4e:7d:b2:3e:
b7:96:ed:3f:ac:fa:df:94:12:f5:a3:8d:6a:46:fd:ad:55:af:
38:75:db:70:be:92:50:c7:f7:15:23:3d:cf:56:cd:74:1b:6f:
04:2b:73:88:10:d6:78:29:3e:ee:82:e5:2e:e8:44:cc:51:28:
fa:0b:3a:d5:de:f3:3a:01:17:4a:66:7f:5f:57:04:f3:e5:0d:
6b:a5:be:ea:51:48:11:e7:ef:25:3b:5e:4d:b6:37:e7:40:be:
fb:3d:d9:ff:6a:f5:d6:0a:dc:ce:5a:a1:b7:8a:95:5a:0c:f2:
3c:ae:7a:61:40:b0:9b:62:15:0e:3d:ed:51:a1:dc:e4:2c:92:
72:21:53:69:e6:b9:1d:68:04:25:4d:8e:c0:30:de:82:a8:b6:
ae:3f:f5:0f:fe:85:2a:13:c9:f7:d3:ad:2b:13:56:6b:32:c3:
f3:6b:28:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:31:52 2026 by rpki-client