
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
File: tLEObLONU2XQVOjb6Q808sOIsQw.mft (raw, json)
Hash identifier: hVp912DLgt2QrOTKw7RSef28whfoIMeEuWZphEnlvcU=
Subject key identifier: 72:A6:B2:93:C9:6A:85:7F:01:65:29:63:02:D1:A9:AA:06:9F:53:8D
Authority key identifier: B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C
Certificate issuer: /CN=A91CE3A3/serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
Certificate serial: 0D58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
Manifest number: 0D25
Signing time: Tue 02 Jun 2026 18:12:40 +0000
Manifest this update: Tue 02 Jun 2026 18:12:39 +0000
Manifest next update: Tue 09 Jun 2026 18:12:39 +0000
Files and hashes: 1: tLEObLONU2XQVOjb6Q808sOIsQw.crl (hash: FNyWohTrBGDvwy5kvFfZjiPA4wX9xmnRxZDqqFxMspg=)
2: 610856EC638A11F08BC2A840C4F9AE02.roa (hash: hFVkKE+Qi5ASFcR8wJP4hxF2ONROpTw8ANjmt7CoeCQ=)
3: 30256B5CF7B911EEAB0C6C36C4F9AE02.roa (hash: 98uYds8I1pxO4Y6dKdHlz74HRamQ9x93aGa9N7uQZao=)
4: 618AD7B6638A11F08BC2A840C4F9AE02.roa (hash: l1iCGSn/PX7oFU8pYAYmto407lNna+dcfVIeQPwpey4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl
rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3416 (0xd58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3A3, serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
Validity
Not Before: Jun 2 18:12:39 2026 GMT
Not After : Jun 9 18:12:39 2026 GMT
Subject: CN=6a1f1d18-88f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fa:b7:d0:7d:49:6d:84:64:fa:bc:81:07:f8:
60:33:22:4f:aa:33:c2:e7:a3:1f:50:23:d0:7c:8f:
32:d2:02:c3:b5:58:64:ba:09:af:2f:06:b1:a4:6a:
37:ce:0a:77:29:bd:ce:13:af:9d:f9:35:7c:9b:27:
4d:a5:79:ab:89:69:0e:bd:f0:e9:45:0b:e2:18:52:
49:0a:27:4c:8b:83:e6:e9:8e:21:15:a7:85:74:52:
8b:98:ec:4f:44:50:9a:4a:ec:63:4d:57:11:c9:c7:
0f:59:3d:7e:71:05:82:86:73:6a:3d:b8:d8:02:bf:
82:94:4d:a6:47:a6:75:af:5d:48:7c:46:ea:37:6e:
28:07:01:02:5a:9d:36:33:04:42:9d:1d:e6:3b:46:
f3:f8:70:d7:8a:c8:1e:24:1e:97:bb:cf:c3:8e:57:
ee:8a:38:1f:85:b3:3e:2e:b2:a8:53:c6:cc:2f:6c:
e2:30:03:96:f3:7b:19:a4:1c:34:0e:85:4c:13:9b:
3d:da:1c:40:7f:9d:17:ce:db:71:97:1d:00:3c:1f:
0e:b1:45:ad:7e:86:0c:91:2b:e7:e6:4c:09:04:2e:
c3:cc:e6:6c:75:eb:83:c2:9c:03:c8:97:93:02:e7:
68:89:ba:fe:db:07:d1:85:ee:45:3a:d9:32:84:56:
18:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A6:B2:93:C9:6A:85:7F:01:65:29:63:02:D1:A9:AA:06:9F:53:8D
X509v3 Authority Key Identifier:
keyid:B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:8b:32:04:29:12:25:8f:8d:13:dd:21:6c:95:4a:d1:cd:64:
08:34:25:e6:83:61:37:7b:5c:15:6b:2c:ba:71:40:2b:78:05:
f0:31:12:e7:79:17:3a:30:d4:16:48:6b:93:08:73:30:a3:77:
fb:2e:d1:42:e5:3f:d5:85:7e:12:d7:80:77:7e:59:0b:6e:97:
50:fd:8e:8f:99:28:48:36:23:28:29:ec:c0:b1:cd:09:57:aa:
16:56:1d:4d:ac:f6:c7:c7:4c:71:12:f1:84:0b:c8:fd:2e:d5:
c3:46:6f:aa:5e:9c:84:9d:cb:2c:1c:77:64:12:78:ed:0d:1b:
f8:26:7c:87:6c:2c:bb:63:a8:74:df:d5:21:72:07:c3:d3:71:
ba:5a:a6:53:51:48:2e:9f:0d:ca:6f:5a:1f:c1:8a:3e:03:1a:
fe:a1:29:95:fa:90:13:b2:91:18:96:70:a1:dd:62:ee:e5:5f:
f0:3b:0c:99:df:af:36:48:7d:ec:61:db:ac:86:c6:fe:7d:c6:
7c:f6:b4:6b:d4:06:7e:d9:76:b7:5c:35:cf:81:87:ed:d0:81:
33:2c:08:2b:4a:06:76:7d:a8:29:b0:39:71:02:71:ef:05:3f:
66:84:68:12:f0:17:61:ca:01:f4:6a:95:34:cc:d8:65:0e:d9:
69:9b:c4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:10 2026 by rpki-client