
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
File: tii4qSXEXjrDpxvkEUZimYv0s-A.mft (raw, json)
Hash identifier: 6MIuZswbvX8X1lCP20WULSGVguOe0NvxPIeNIn2RIts=
Subject key identifier: 75:EF:53:C9:F9:51:08:95:3D:FC:C4:D6:4E:6A:15:05:38:5E:82:6F
Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0
Certificate issuer: /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0
Certificate serial: 058E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
Manifest number: 057C
Signing time: Fri 04 Sep 2026 23:04:29 +0000
Manifest this update: Fri 04 Sep 2026 23:04:29 +0000
Manifest next update: Fri 11 Sep 2026 23:04:29 +0000
Files and hashes: 1: tii4qSXEXjrDpxvkEUZimYv0s-A.crl (hash: ryJ0amGiePbccBvWqbXgL2hlxeM2sbCrlAk2tMwqbT0=)
2: 207388F2D45E11EE8D29793EC4F9AE02.roa (hash: GZLAqFDcKyRRvVvDeTXr2Kcx2FQWYyo5VaaW0SZn3+0=)
3: 14A07422D45E11EEB37CB639C4F9AE02.roa (hash: PITcK7XRyy+LMYXHuylhY3+Q/YKqPcRjVZDoGb15cIU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl
rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 23:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1422 (0x58e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA8EA, serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0
Validity
Not Before: Sep 4 23:04:29 2026 GMT
Not After : Sep 11 23:04:29 2026 GMT
Subject: CN=6a9b4e7d-e7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:6b:5e:97:93:c2:6e:ca:6a:4e:27:00:e3:
46:82:ff:6a:ff:be:d2:02:0a:1f:c3:fc:03:e5:68:
3a:ae:45:c1:bd:bb:8d:13:52:87:16:80:5d:b3:fe:
e1:eb:cd:9e:d6:8c:af:e3:b2:07:c9:09:6e:64:87:
41:19:ae:d3:d1:d4:07:0e:bb:de:a4:73:3c:c3:cf:
be:6e:c0:86:95:ee:45:fa:a8:7a:d7:dd:65:96:e7:
1f:c4:9b:75:5b:4f:bc:06:73:9f:9a:bb:55:e4:3a:
d7:4c:ff:5f:9e:2a:15:e2:a4:da:0e:ab:e5:ab:4b:
4a:83:1d:43:56:30:3b:64:ee:22:59:d0:7b:d2:ec:
24:e0:b2:6e:7b:c4:c4:6c:2e:47:25:da:3f:86:e3:
71:a8:17:5f:a8:0e:49:04:1e:30:8f:af:45:e3:de:
f1:a7:10:9e:7c:33:ff:fd:91:17:a3:ea:0a:62:79:
65:d1:f4:28:27:b6:09:f7:23:fa:e6:06:68:ff:15:
a7:8b:4c:cc:b1:99:3b:22:9c:54:e2:cc:20:60:1e:
67:9b:0b:b9:2b:ba:3e:b2:65:6b:04:a2:d6:3e:63:
65:a4:c4:f7:4a:79:27:eb:ea:df:ef:4c:51:fb:ac:
93:d8:b0:b8:b6:e5:5a:01:b4:d1:33:a6:cb:5c:27:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EF:53:C9:F9:51:08:95:3D:FC:C4:D6:4E:6A:15:05:38:5E:82:6F
X509v3 Authority Key Identifier:
keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:61:31:8f:58:82:98:29:66:e4:75:a9:63:c0:28:e0:76:9f:
dd:ce:f2:01:b4:f4:bb:91:b3:e9:fe:92:23:34:6e:ab:85:9a:
28:02:94:84:4c:4a:ca:5f:28:21:93:d1:22:4e:fb:ec:c8:9e:
ba:7a:88:d1:6f:d9:9c:8a:ef:5f:45:c4:40:78:56:c5:29:2a:
ab:80:1b:06:da:4e:c0:80:78:61:05:58:81:f3:3c:3c:ed:5b:
e3:57:c9:4b:2d:00:df:81:e3:05:15:7c:53:98:51:0d:50:c6:
53:5c:4d:17:46:2c:bf:95:ca:b4:b7:f1:7f:be:79:79:ca:62:
f0:3e:57:8e:01:b7:a9:a3:c3:ac:2a:30:f6:92:ca:20:5c:42:
bf:f1:53:f5:6b:19:84:f4:ce:01:36:eb:01:0c:50:50:e9:3b:
24:04:ef:62:bb:85:fe:2f:81:9e:ff:0e:8f:8e:c3:36:78:cd:
df:fa:31:ae:ff:d1:51:4c:c9:46:cc:6c:cf:8f:9a:a8:67:3f:
e6:90:73:2a:4f:82:d5:3c:d0:5f:54:c6:de:0a:d9:72:90:39:
62:d5:f5:2d:90:68:5d:26:5e:06:00:53:cb:ef:0e:3d:6b:b2:
99:8b:c4:75:3b:83:cb:88:58:4b:a0:53:d1:b3:80:06:d8:c4:
56:a6:c1:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0E4RUExMTAvBgNVBAUTKEI2MjhCOEE5MjVDNDVFM0FDM0E3MUJFNDExNDY2Mjk5
OEJGNEIzRTAwHhcNMjYwOTA0MjMwNDI5WhcNMjYwOTExMjMwNDI5WjAYMRYwFAYD
VQQDEw02YTliNGU3ZC1lN2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnfVrXpeTwm7Kak4nAONGgv9q/77SAgofw/wD5Wg6rkXBvbuNE1KHFoBds/7h
682e1oyv47IHyQluZIdBGa7T0dQHDrvepHM8w8++bsCGle5F+qh6191llucfxJt1
W0+8BnOfmrtV5DrXTP9fnioV4qTaDqvlq0tKgx1DVjA7ZO4iWdB70uwk4LJue8TE
bC5HJdo/huNxqBdfqA5JBB4wj69F497xpxCefDP//ZEXo+oKYnll0fQoJ7YJ9yP6
5gZo/xWni0zMsZk7IpxU4swgYB5nmwu5K7o+smVrBKLWPmNlpMT3Snkn6+rf70xR
+6yT2LC4tuVaAbTRM6bLXCdQ0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHXvU8n5
UQiVPfzE1k5qFQU4XoJvMB8GA1UdIwQYMBaAFLYouKklxF46w6cb5BFGYpmL9LPg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQThFQS9EOENBMTNDMjQw
NDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhqckRweHZrRVVaaW1ZdjBz
LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RpaTRxU1hFWGpyRHB4dmtFVVppbVl2MHMtQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QThFQS9EOENBMTNDMjQwNDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhq
ckRweHZrRVVaaW1ZdjBzLUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAimExj1iCmClm5HWpY8Ao4Haf3c7yAbT0u5Gz6f6SIzRuq4WaKAKUhExKyl8o
IZPRIk777MieunqI0W/ZnIrvX0XEQHhWxSkqq4AbBtpOwIB4YQVYgfM8PO1b41fJ
Sy0A34HjBRV8U5hRDVDGU1xNF0Ysv5XKtLfxf755ecpi8D5XjgG3qaPDrCow9pLK
IFxCv/FT9WsZhPTOATbrAQxQUOk7JATvYruF/i+Bnv8Oj47DNnjN3/oxrv/RUUzJ
Rsxsz4+aqGc/5pBzKk+C1TzQX1TG3grZcpA5YtX1LZBoXSZeBgBTy+8OPWuymYvE
dTuDy4hYS6BT0bOABtjEVqbBew==
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:52:17 2026 by rpki-client