
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
File: TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json)
Hash identifier: rcRZvDc5rTon5McrduxynHTnlwajD9CA6ibUTdZH33I=
Subject key identifier: 51:07:CE:C5:17:65:51:65:DD:28:E9:26:35:55:CE:06:49:40:D3:25
Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59
Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159
Certificate serial: 0266
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
Manifest number: 0260
Signing time: Sat 05 Sep 2026 01:59:45 +0000
Manifest this update: Sat 05 Sep 2026 01:59:45 +0000
Manifest next update: Sat 12 Sep 2026 01:59:45 +0000
Files and hashes: 1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: 7j7EPbY3b53LU81rbF2KllFVPFpprOrrWRZs/ZVik50=)
2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: LTD30aegM2n/FIPS7PJPfAtlPCR/CQg1h9hsg7fN65E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl
rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 01:59:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C05E4, serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159
Validity
Not Before: Sep 5 01:59:45 2026 GMT
Not After : Sep 12 01:59:45 2026 GMT
Subject: CN=6a9b7791-2237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:91:9b:0f:6d:01:9c:99:c9:4b:73:af:15:ee:
9d:66:81:a6:db:92:63:54:66:ed:dc:2e:38:78:7d:
95:36:19:c8:c9:b4:e4:cc:ae:9e:b4:8b:6b:83:09:
b9:a0:c0:dc:d7:5e:7a:39:b6:42:bb:bd:13:61:9c:
e6:4b:76:ce:82:4b:a2:36:0a:15:4b:a5:f2:46:84:
9f:cf:ad:77:07:8f:ab:a7:57:3e:a8:0d:62:97:c2:
23:cd:62:59:47:b5:4a:9b:41:d2:f1:47:8b:19:d3:
c4:4f:d4:29:4a:0b:cb:75:3b:78:f6:2c:ff:75:41:
b3:16:6d:98:7f:8b:52:85:6a:5f:c2:6e:c8:fa:61:
23:6f:bd:a1:7e:4c:d5:16:da:10:58:f9:ac:02:eb:
d3:99:db:f6:73:c9:88:44:6f:91:1f:aa:e8:8d:3d:
ec:fd:ae:23:64:fc:be:d7:bf:81:c8:5a:2f:98:8b:
53:32:a8:bd:dc:8d:52:8d:58:fb:c3:9a:1c:93:38:
40:ad:66:1c:68:3b:3b:c0:a1:f0:96:4b:b1:da:92:
cf:31:d2:4c:cd:a2:60:47:2f:d5:8c:1c:92:58:93:
75:c5:f3:5b:95:28:e2:45:aa:00:b7:e5:71:76:a8:
95:dd:eb:11:89:2a:cc:53:22:58:51:31:a6:0b:3c:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:07:CE:C5:17:65:51:65:DD:28:E9:26:35:55:CE:06:49:40:D3:25
X509v3 Authority Key Identifier:
keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8b:58:03:98:55:ec:00:06:20:56:5f:82:cf:33:db:68:a4:
e5:74:84:80:5d:8c:ad:5f:70:23:cb:29:cc:16:fa:46:6b:93:
af:7a:ff:e8:42:2b:e8:48:01:a8:2a:4e:43:02:ad:a4:96:76:
a2:2b:af:b8:e9:69:40:6a:66:2a:5b:55:df:34:cb:3b:52:94:
5f:67:d8:c8:6e:e9:de:5f:b8:e3:85:0e:c6:d0:3b:11:78:83:
fd:47:94:aa:fa:80:2f:f2:db:df:5f:c3:2d:51:3d:0a:94:0f:
13:27:bc:0c:84:f3:15:06:07:f5:00:a8:ca:56:c1:e3:6c:0e:
a9:5a:3c:6c:45:50:7b:a0:d2:ab:67:76:bc:c8:4d:81:35:70:
83:ee:eb:8b:d0:7b:64:ad:58:9b:b0:e5:d3:df:90:88:a9:62:
b0:0c:27:44:74:b5:08:60:a0:e4:88:3c:1c:21:c4:61:97:a4:
30:1b:01:ee:e3:fb:d0:19:58:c7:8c:df:08:21:08:a5:6f:8b:
c4:bc:c0:de:f3:16:db:19:51:23:4e:48:b4:a3:53:e9:72:1a:
8a:4d:c2:5b:65:bb:1c:1f:34:91:22:2c:11:2e:4d:64:1d:68:
b6:41:b7:b3:c1:d8:54:4d:9b:f8:f9:6a:0e:6a:13:0c:3a:91:
c5:26:72:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:35:22 2026 by rpki-client