
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
File: _10TK8Zqqiu89lw-X-iaDDcdizo.mft (raw, json)
Hash identifier: gAbE8xTWCppBwZTzd57Ma+jQcRbQY0bKAJMGptS+hqk=
Subject key identifier: 73:FF:E5:0B:F0:20:21:33:18:A5:75:9B:1D:7C:BE:D6:E1:35:89:C9
Authority key identifier: FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A
Certificate issuer: /CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A
Certificate serial: 02A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
Manifest number: 029B
Signing time: Thu 21 May 2026 01:39:43 +0000
Manifest this update: Thu 21 May 2026 01:39:43 +0000
Manifest next update: Thu 28 May 2026 01:39:43 +0000
Files and hashes: 1: _10TK8Zqqiu89lw-X-iaDDcdizo.crl (hash: JShHezBPrmbDqxsdJUQ+KxqRo01VOZPRHprCdPQ7m0Q=)
2: 064042F259F511EDB22E3F2BC4F9AE02.roa (hash: 0SaUic0cFmBX4GJg5caQlZtmFukZYlTwm6y1EfuxlnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl
rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675 (0x2a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1FA7, serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A
Validity
Not Before: May 21 01:39:43 2026 GMT
Not After : May 28 01:39:43 2026 GMT
Subject: CN=6a0e625f-900f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:85:85:c8:77:9c:2c:04:0b:84:5e:7f:37:
77:ce:15:fa:19:b5:42:2d:58:62:dd:8a:9d:8b:86:
d8:00:37:e4:0a:e1:8c:9a:13:52:32:ab:47:69:c3:
66:1f:83:d5:b5:1f:ed:1c:57:1e:b9:f3:ed:12:71:
18:a5:22:eb:b1:58:9a:7f:a2:f0:f8:90:ed:06:fa:
41:55:01:a0:7c:49:8d:c9:82:e4:8e:a8:49:a5:0e:
6c:1e:63:6c:33:7e:bf:6e:03:2d:3b:97:15:eb:b2:
1d:3b:7b:de:2f:28:37:78:33:02:5b:ed:49:3c:ca:
ed:80:64:8c:47:b9:1e:a4:84:d5:aa:a3:22:a4:0f:
66:dc:af:a2:3e:2c:3e:0e:56:95:99:e9:04:e6:93:
54:8e:3e:6a:00:91:51:94:bd:15:91:5b:b8:23:cf:
34:36:05:72:ca:7d:11:3c:0b:49:c5:3f:a7:2b:28:
0d:ff:ac:25:e5:a2:d7:18:5a:b3:19:65:e3:cc:6c:
c0:40:b9:9a:8a:5d:f2:6c:ca:2d:9b:5a:b6:51:4b:
b7:ff:f1:1a:42:08:ca:00:b9:2c:34:57:cf:e3:be:
76:8b:53:75:0d:b0:85:29:8e:99:09:69:a5:52:fb:
90:ec:89:f1:7f:83:34:49:1c:19:8a:5b:3b:3e:28:
b3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FF:E5:0B:F0:20:21:33:18:A5:75:9B:1D:7C:BE:D6:E1:35:89:C9
X509v3 Authority Key Identifier:
keyid:FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:00:74:1d:67:4d:c1:dc:dc:c4:3e:85:90:68:7f:4e:74:d2:
ce:dc:77:14:af:0f:f8:07:a4:1f:e5:52:38:92:b5:37:e6:be:
b0:73:aa:dc:13:be:d2:66:70:24:7b:f0:31:85:f7:40:43:63:
c4:8f:f4:15:ec:55:fa:f6:8e:52:eb:cd:5d:ba:e0:3f:c5:ef:
05:18:40:ed:9f:c4:e8:4e:b2:27:d9:af:5c:03:b0:3a:5c:1d:
02:08:cd:58:a3:38:ae:9e:57:8e:f6:e2:04:bf:ec:15:aa:a6:
da:79:38:35:95:81:e6:b3:c9:0f:97:be:4a:f0:3e:8e:2f:df:
66:21:62:6b:df:60:db:ac:e2:88:76:91:10:76:04:c7:f1:62:
8e:22:2a:c1:50:3f:64:c3:94:e3:f7:16:40:41:01:ff:e3:f8:
57:19:a2:a8:63:da:06:cc:23:07:0d:41:a9:bd:c3:ec:46:49:
5f:6d:bd:fd:97:30:39:2b:fe:25:47:96:1b:1d:34:79:da:53:
ae:4d:d0:a3:db:57:de:18:e6:37:80:51:c1:4d:e9:52:a2:19:
71:12:75:d3:2c:87:de:fb:04:26:6b:82:2e:f8:fa:4d:90:8d:
68:23:c2:c5:f8:54:64:4e:94:da:73:bd:bc:71:6e:e5:62:31:
80:e4:fa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:17:41 2026 by rpki-client