
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
File: tgQSzpgJwQxn3eq7oOM1462k_hA.mft (raw, json)
Hash identifier: aqg7o12dWJjXPJU0egLPYtQ+qNAZfKKmHyAtK1J/Y6w=
Subject key identifier: 72:90:49:F5:53:89:71:AB:4F:D8:9C:02:18:DF:D3:44:45:9F:B5:20
Authority key identifier: B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10
Certificate issuer: /CN=A91BF306/serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10
Certificate serial: 0230
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
Manifest number: 022A
Signing time: Sat 03 Oct 2026 03:22:50 +0000
Manifest this update: Sat 03 Oct 2026 03:22:49 +0000
Manifest next update: Sat 10 Oct 2026 03:22:49 +0000
Files and hashes: 1: tgQSzpgJwQxn3eq7oOM1462k_hA.crl (hash: vN7uRiR4uxOd6fbT6gvU9grJvjLURXlsBHsPFG7O+1c=)
2: 3CED465E8E0811EE8450D961C4F9AE02.roa (hash: ziV25lfjtFOT+vBGm4XLNNAFbNMnNRrhayXY3daFNNs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl
rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF306, serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10
Validity
Not Before: Oct 3 03:22:49 2026 GMT
Not After : Oct 10 03:22:49 2026 GMT
Subject: CN=6ac07509-6dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:d9:60:b7:a2:12:f0:a9:59:a4:b1:3e:2f:
85:76:53:19:a9:75:b7:3c:f1:2c:2a:a1:19:52:49:
f8:d2:9b:65:ae:2d:73:52:11:55:3a:c4:e5:1f:ae:
56:6a:75:13:e0:a9:50:75:7e:ae:33:f0:7b:ff:4e:
a8:c4:a0:cd:04:af:df:6d:75:c3:44:b8:66:1d:98:
9c:d2:6d:bc:e6:d2:c8:a5:fa:95:2b:31:bb:7e:57:
8e:0c:d6:5b:83:d8:97:83:14:b3:07:5f:44:d8:14:
60:72:7b:34:bf:6f:15:8c:9a:b4:36:2f:3d:4b:5c:
e7:97:44:39:0f:8f:54:b8:a8:7d:2f:e5:f6:19:7c:
06:04:72:6d:1e:8a:ac:f6:dd:f8:c3:f4:7f:f7:fa:
e0:2b:11:a9:46:66:51:8e:11:c0:79:04:6e:1f:4c:
60:46:01:6f:ec:6a:75:ff:05:5d:1a:5e:08:b9:8a:
65:3e:e6:b0:9e:6c:f4:a8:86:93:ef:4b:2e:c3:69:
9e:6d:4a:95:0a:28:b5:11:da:2e:1b:63:b2:af:7b:
17:b4:f1:57:e0:0c:32:ab:0a:3d:cf:4d:93:78:af:
17:89:06:64:a6:74:9a:54:ff:6d:5d:9f:09:aa:fe:
fa:bd:17:44:83:f6:3d:e6:ef:55:37:c3:0c:d8:d6:
18:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:90:49:F5:53:89:71:AB:4F:D8:9C:02:18:DF:D3:44:45:9F:B5:20
X509v3 Authority Key Identifier:
keyid:B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:7d:f4:bd:8b:15:c8:74:a9:05:42:b6:05:d4:d2:27:5c:18:
da:c9:c9:f1:14:61:4f:4b:4d:69:5e:f8:32:95:b2:80:48:c5:
2b:b2:a6:d6:4a:58:0f:54:45:f3:a9:cd:4e:9d:9d:bc:bf:e0:
43:10:ce:80:77:3c:33:85:08:f8:88:ea:84:95:cc:98:df:7e:
82:16:e4:65:75:84:06:ce:d0:dc:51:8f:93:6f:e9:d1:81:aa:
53:6c:8b:3d:44:cc:21:e4:e0:63:a9:1a:ee:d9:ae:a9:d1:b0:
c3:45:e1:f2:ae:77:65:f8:c1:a3:b0:c4:40:15:62:99:c6:ab:
a8:e3:ec:c2:ec:82:2e:5f:c0:3a:2c:9c:40:85:aa:22:b7:05:
2a:99:13:2c:1d:e2:3b:4e:76:62:42:8c:60:6f:f1:2d:f5:17:
48:12:26:b6:e4:01:70:7c:34:cd:0f:97:d3:f4:58:73:be:cf:
ea:c3:12:51:b5:a0:66:73:4d:22:4c:0c:82:63:ac:f6:d2:14:
c1:c8:a4:33:42:e0:ab:68:83:91:b4:28:61:dc:45:31:e7:9d:
f2:93:31:0d:50:4a:75:24:84:7e:44:93:21:91:75:a0:20:fd:
58:bd:a8:5f:82:92:6a:92:71:b6:71:72:3d:af:85:ca:59:c4:
e4:e2:65:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYzMDYxMTAvBgNVBAUTKEI2MDQxMkNFOTgwOUMxMEM2N0RERUFCQkEwRTMzNUUz
QURBNEZFMTAwHhcNMjYxMDAzMDMyMjQ5WhcNMjYxMDEwMDMyMjQ5WjAYMRYwFAYD
VQQDEw02YWMwNzUwOS02ZGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsHPZYLeiEvCpWaSxPi+FdlMZqXW3PPEsKqEZUkn40ptlri1zUhFVOsTlH65W
anUT4KlQdX6uM/B7/06oxKDNBK/fbXXDRLhmHZic0m285tLIpfqVKzG7fleODNZb
g9iXgxSzB19E2BRgcns0v28VjJq0Ni89S1znl0Q5D49UuKh9L+X2GXwGBHJtHoqs
9t34w/R/9/rgKxGpRmZRjhHAeQRuH0xgRgFv7Gp1/wVdGl4IuYplPuawnmz0qIaT
70suw2mebUqVCii1EdouG2Oyr3sXtPFX4Awyqwo9z02TeK8XiQZkpnSaVP9tXZ8J
qv76vRdEg/Y95u9VN8MM2NYYswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHKQSfVT
iXGrT9icAhjf00RFn7UgMB8GA1UdIwQYMBaAFLYEEs6YCcEMZ93qu6DjNeOtpP4Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMwNi8xNzE3OTIwRTcx
NkIxMUVFQjE2NzMyNzdDNEY5QUUwMi90Z1FTenBnSndReG4zZXE3b09NMTQ2Mmtf
aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RnUVN6cGdKd1F4bjNlcTdvT00xNDYya19oQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjMwNi8xNzE3OTIwRTcxNkIxMUVFQjE2NzMyNzdDNEY5QUUwMi90Z1FTenBnSndR
eG4zZXE3b09NMTQ2MmtfaEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ330vYsVyHSpBUK2BdTSJ1wY2snJ8RRhT0tNaV74MpWygEjFK7Km1kpYD1RF
86nNTp2dvL/gQxDOgHc8M4UI+IjqhJXMmN9+ghbkZXWEBs7Q3FGPk2/p0YGqU2yL
PUTMIeTgY6ka7tmuqdGww0Xh8q53ZfjBo7DEQBVimcarqOPswuyCLl/AOiycQIWq
IrcFKpkTLB3iO052YkKMYG/xLfUXSBImtuQBcHw0zQ+X0/RYc77P6sMSUbWgZnNN
IkwMgmOs9tIUwcikM0Lgq2iDkbQoYdxFMeed8pMxDVBKdSSEfkSTIZF1oCD9WL2o
X4KSapJxtnFyPa+FylnE5OJlxw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 19:33:25 2026 by rpki-client