
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft
File: tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft (raw, json)
Hash identifier: BHO9egGL/1qcg4RJnX8m9JqFkS+DWk3ZRVIxqyx/MQo=
Subject key identifier: 3A:B1:96:E2:F1:6E:4A:DF:87:19:9D:C5:0E:92:E0:80:1C:8F:BF:CE
Authority key identifier: B6:74:70:83:A4:B5:36:69:36:0F:88:B0:99:D4:97:4F:8F:28:95:0E
Certificate issuer: /CN=A91CF477/serialNumber=B6747083A4B53669360F88B099D4974F8F28950E
Certificate serial: 06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnRwg6S1Nmk2D4iwmdSXT48olQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft
Manifest number: 06
Signing time: Fri 03 Jul 2026 10:07:33 +0000
Manifest this update: Fri 03 Jul 2026 10:07:32 +0000
Manifest next update: Fri 10 Jul 2026 10:07:32 +0000
Files and hashes: 1: tnRwg6S1Nmk2D4iwmdSXT48olQ4.crl (hash: nG6q4yTv2w5Gn0/3n02gqVcKbfN9qqOY/HUemSi1+t8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.crl
rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnRwg6S1Nmk2D4iwmdSXT48olQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 10:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF477, serialNumber=B6747083A4B53669360F88B099D4974F8F28950E
Validity
Not Before: Jul 3 10:07:32 2026 GMT
Not After : Jul 10 10:07:32 2026 GMT
Subject: CN=6a4789e5-47b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:a1:3c:e9:b2:48:56:ef:9f:0a:27:cf:89:
4d:36:0d:d3:e5:d3:de:f3:64:d1:b4:63:7f:3d:3f:
c8:f2:7f:e2:63:75:69:ca:c7:fc:56:e4:db:16:c7:
cb:6b:12:4e:b6:84:ee:1f:35:f4:a1:e3:47:ac:6c:
82:bc:7a:a6:63:d7:22:46:b3:97:b4:85:01:fd:dd:
89:29:b1:a6:b0:3f:b5:a5:20:49:ab:cd:29:3a:8e:
7f:19:1d:15:b6:f1:8b:fe:71:c1:38:60:5d:1d:dc:
ee:6b:40:f0:92:4d:1e:6b:c7:17:1b:ce:4e:f4:7c:
03:fe:f1:9b:30:a7:41:1f:91:88:71:60:c4:23:fb:
a8:c4:18:0a:d7:f4:89:7d:62:a1:1e:87:18:17:95:
ed:42:9d:b2:2a:88:c4:a1:3a:a5:df:21:7f:92:65:
a8:80:ce:da:1f:aa:9c:5f:25:2b:ae:af:69:cb:21:
aa:75:af:f7:b6:97:3b:d6:81:ec:8f:f0:40:e8:ec:
7f:c2:84:94:94:93:01:ff:54:6c:9f:7c:1d:4f:0b:
f3:35:2d:02:7d:8a:96:e4:77:3d:b6:88:10:4f:ea:
76:7f:0d:2e:4b:22:bd:c6:20:5a:b4:b0:fe:23:3c:
cc:61:eb:83:48:f2:af:9c:d1:a3:8d:67:a8:ef:cc:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B1:96:E2:F1:6E:4A:DF:87:19:9D:C5:0E:92:E0:80:1C:8F:BF:CE
X509v3 Authority Key Identifier:
keyid:B6:74:70:83:A4:B5:36:69:36:0F:88:B0:99:D4:97:4F:8F:28:95:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnRwg6S1Nmk2D4iwmdSXT48olQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:f0:3d:22:38:a0:60:06:cd:e5:f8:e0:01:d0:1e:a5:18:9b:
9b:08:d1:70:b8:d4:57:09:a0:f1:80:c2:b5:cb:0a:65:7b:da:
8d:4d:eb:4d:17:9a:6a:29:a9:51:c3:42:f3:b2:da:06:fa:6b:
f1:36:98:35:7b:c0:dd:d9:fb:4c:8c:5d:fe:82:83:e3:3d:44:
0e:76:fc:e3:8c:36:92:1c:80:5b:6a:e2:70:41:9d:17:8b:00:
b9:30:43:34:70:b5:85:4c:3e:2e:5a:33:c6:ce:81:39:26:61:
08:9e:eb:ab:a7:7d:a2:2b:71:23:33:6e:e0:ae:23:25:8a:81:
15:27:ff:bd:e7:99:4f:21:57:d7:20:ae:f4:aa:6c:1a:fe:1c:
81:0c:e2:8e:95:3b:65:1c:61:06:9c:c8:77:fa:ae:d9:8f:89:
31:90:8b:14:09:ed:26:f8:ba:33:44:90:c0:e4:99:20:ce:a0:
14:4d:f4:3d:8d:58:32:0c:ef:d1:f2:29:5f:7d:3d:75:f8:de:
3b:06:ba:72:b7:fe:2a:5a:5d:2d:2d:e6:d2:98:7b:09:6d:03:
42:b5:f2:21:0a:ec:db:03:1a:00:ac:ad:d7:25:63:22:ba:12:
28:50:e4:a4:6f:46:7a:ee:d1:02:43:24:f6:b5:ba:e6:07:ea:
d0:65:18:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 07:50:19 2026 by rpki-client