
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
File: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft (raw, json)
Hash identifier: bphqDplELlUPZs1oqQYLChXAch+RVY0gJNRv44LqxbQ=
Subject key identifier: 2E:C1:90:DE:5F:FA:8A:14:2E:BD:AD:4C:AB:3D:16:AA:D5:F9:60:5E
Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34
Certificate issuer: /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
Certificate serial: 0356
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
Manifest number: 0345
Signing time: Mon 05 Oct 2026 01:00:45 +0000
Manifest this update: Mon 05 Oct 2026 01:00:44 +0000
Manifest next update: Mon 12 Oct 2026 01:00:44 +0000
Files and hashes: 1: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl (hash: VlDKyeClZ94Yc3NIQ0VZK0dTHSTk1lVezPXjw4Yi7Q4=)
2: 36765016252911EDBEF5C985C4F9AE02.roa (hash: JoW4tYmLI7ajRGBqQhmGtCkhUB7xQki7mCMRwUQ/WJs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl
rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 854 (0x356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDBD0, serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
Validity
Not Before: Oct 5 01:00:44 2026 GMT
Not After : Oct 12 01:00:44 2026 GMT
Subject: CN=6ac2f6bd-393d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:e7:cc:45:bc:1f:0a:27:37:dd:b0:78:99:
83:7f:55:44:e5:1d:f2:43:0c:1d:b0:70:98:04:98:
fd:e9:b3:5c:1f:22:af:4c:fe:8d:d5:90:f9:0a:05:
55:a3:f4:16:aa:7e:1d:5e:98:e5:58:c6:95:49:56:
b7:f6:87:d1:f9:8a:98:ce:18:cf:20:1e:b8:6b:5b:
28:9e:f6:d4:61:27:7b:d5:fb:c2:65:8b:88:c5:32:
89:a5:8f:5a:76:8f:47:45:6c:51:fc:da:6f:2a:b7:
27:5b:55:db:b5:f5:d0:3d:d7:1b:ab:9d:4b:85:5d:
11:8c:78:52:29:e2:7d:98:67:6d:5e:0f:93:d7:27:
32:57:af:ca:1f:15:6b:20:ee:a9:ca:db:51:20:56:
49:b6:2d:32:18:f2:4e:58:ca:2c:af:38:04:60:3b:
dc:a2:1b:06:da:c3:6c:0b:73:9d:76:86:39:f0:19:
22:46:0c:a6:71:30:3c:fe:79:26:75:f5:99:80:88:
17:fc:2a:16:fe:73:11:34:06:21:71:2d:a2:22:96:
ce:71:1c:94:54:74:33:e6:71:c8:e0:8e:2e:32:fe:
e4:06:cf:0f:3c:44:a9:9a:ce:1d:83:f3:00:e2:d5:
5d:00:32:22:82:ea:e1:ca:2b:c3:df:e1:b0:06:77:
e6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C1:90:DE:5F:FA:8A:14:2E:BD:AD:4C:AB:3D:16:AA:D5:F9:60:5E
X509v3 Authority Key Identifier:
keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ab:50:68:d2:48:68:6a:5d:cf:fe:bf:83:eb:dd:2a:47:8a:
94:06:ce:80:57:58:cc:bf:f1:76:76:cb:69:c2:f8:c1:46:37:
76:3f:a0:ce:98:30:a9:f3:70:0f:38:9f:d1:e2:38:1f:50:69:
35:51:e0:79:1f:5d:91:21:98:70:1c:92:ba:4a:d7:fa:34:32:
9c:f1:b3:ce:80:4d:ea:71:bd:7c:5f:12:24:ba:8b:42:88:f5:
a4:02:5b:eb:76:55:d1:ed:12:1e:47:02:ca:11:c0:b3:f0:12:
05:cc:01:4d:d7:e1:9f:ca:92:c2:34:2f:0a:1d:2b:97:b2:01:
54:ec:e7:7c:c7:f2:90:26:8a:3f:59:8f:87:54:bc:b1:ef:49:
e7:ae:14:02:14:12:55:f7:07:ec:08:3e:e8:f8:a5:2d:2e:a3:
3b:74:3c:f8:76:17:d2:4f:3c:0e:7b:fe:aa:c9:78:c7:f8:df:
a3:43:8e:e1:c6:9a:ed:4e:e8:be:97:eb:96:10:69:d0:f0:7d:
3e:1e:73:06:ae:46:fc:a6:2a:28:1b:6b:2e:f3:97:92:86:b7:
85:5d:01:59:ce:23:6e:a0:9f:9e:d2:f7:2c:a0:22:97:e4:2c:
0a:d0:0e:0f:5b:82:5a:06:57:bf:72:c4:7a:9f:c4:72:f0:5b:
66:79:15:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:39:09 2026 by rpki-client