
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft
File: tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft (raw, json)
Hash identifier: dQK1iDCb0TRYx3biFWeRSmYEoBYCHOHQUN4RlbasLqQ=
Subject key identifier: EC:BA:C1:19:50:31:08:8E:FA:D8:EC:7D:1C:C1:7F:D8:B8:CE:1B:AB
Authority key identifier: B6:74:70:83:A4:B5:36:69:36:0F:88:B0:99:D4:97:4F:8F:28:95:0E
Certificate issuer: /CN=A91CF477/serialNumber=B6747083A4B53669360F88B099D4974F8F28950E
Certificate serial: 34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnRwg6S1Nmk2D4iwmdSXT48olQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft
Manifest number: 34
Signing time: Sat 03 Oct 2026 09:23:13 +0000
Manifest this update: Sat 03 Oct 2026 09:23:12 +0000
Manifest next update: Sat 10 Oct 2026 09:23:12 +0000
Files and hashes: 1: tnRwg6S1Nmk2D4iwmdSXT48olQ4.crl (hash: s5vl9YnIuhECJyQ/usSdEqr8Or0fvUpyWG/LEZ4W96k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.crl
rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnRwg6S1Nmk2D4iwmdSXT48olQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 09:23:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF477, serialNumber=B6747083A4B53669360F88B099D4974F8F28950E
Validity
Not Before: Oct 3 09:23:12 2026 GMT
Not After : Oct 10 09:23:12 2026 GMT
Subject: CN=6ac0c980-b2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b5:68:68:48:1b:eb:13:34:08:35:93:40:f1:
a9:d3:30:ed:11:07:5d:fc:44:4d:a9:cd:cf:7d:a9:
e2:ef:ae:f4:7d:11:d2:c4:e3:94:d9:e3:10:38:55:
ac:fb:51:ba:ed:74:f9:91:52:e9:70:e1:32:5e:a4:
fa:98:cd:ef:22:09:db:3c:21:74:c9:e4:54:c1:3f:
10:7d:e6:fd:c5:7e:5f:35:33:4c:c9:f3:ab:38:b2:
61:32:c4:41:26:a4:ca:7c:de:02:84:bb:75:f4:20:
03:73:be:61:ce:ad:3f:d8:03:31:30:c6:3a:a9:cb:
b3:8b:e5:b4:20:c5:ef:7f:03:9a:8a:19:4b:ca:ab:
8a:cf:4c:3a:0d:03:27:72:00:fb:50:f0:88:86:04:
af:af:4c:20:ee:28:12:4a:74:d7:09:4c:62:9f:b6:
34:ef:2c:24:2b:20:e3:91:d0:36:06:8c:a0:f1:f1:
9c:d7:ed:67:27:b5:4a:02:fd:35:66:c0:be:d7:ec:
cc:e5:e6:60:e8:f8:10:42:7c:4d:49:47:9c:af:4c:
68:f2:04:70:8a:10:4c:4a:fe:fb:a6:1c:9c:64:d1:
95:6e:bb:b9:c8:5d:4a:7a:f9:c1:30:19:00:10:ab:
21:fa:65:c4:72:e5:05:4a:d9:6c:92:e2:3e:f8:6d:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BA:C1:19:50:31:08:8E:FA:D8:EC:7D:1C:C1:7F:D8:B8:CE:1B:AB
X509v3 Authority Key Identifier:
keyid:B6:74:70:83:A4:B5:36:69:36:0F:88:B0:99:D4:97:4F:8F:28:95:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnRwg6S1Nmk2D4iwmdSXT48olQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c5:07:66:dd:d0:95:b9:5c:4f:a8:9d:7b:bb:7f:e4:98:34:
25:4a:a9:38:a2:a7:e9:13:91:e8:6d:34:1f:80:e5:8f:62:7e:
28:80:4c:d5:95:11:85:55:2b:05:f5:e6:a8:96:b8:64:4c:14:
aa:f6:96:a0:b4:24:9b:33:38:36:1c:3b:53:3c:4f:e9:b9:b1:
c9:be:ff:4c:07:c4:eb:dc:ab:17:39:ab:73:e2:9c:1a:1a:5c:
86:ed:59:7a:1c:cc:69:b7:d9:ec:42:c0:7f:2d:6c:9b:8b:86:
8a:a9:67:00:38:13:5d:e7:c0:fb:54:32:95:19:c9:5c:74:81:
db:f3:2d:41:31:df:5d:27:9e:e2:4b:23:38:98:a5:96:ab:03:
ff:62:46:bd:40:a4:ab:28:73:37:e1:aa:87:25:f3:88:03:0f:
8f:6b:de:d0:0c:9b:7b:dc:cd:ed:ad:fd:00:b0:57:30:76:fa:
86:85:53:d8:c2:79:b6:2b:d9:ad:ff:7b:78:f2:2d:c7:4a:5c:
01:50:ae:4a:fc:c1:4e:13:56:56:ab:8a:f4:9b:a3:08:00:53:
c3:40:ef:74:f0:f5:69:07:0e:5f:89:52:68:a6:74:c9:59:64:
db:44:f3:d0:60:e4:83:3f:d8:59:ff:49:2f:6e:63:48:49:5e:
f9:80:06:44
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
RjQ3NzExMC8GA1UEBRMoQjY3NDcwODNBNEI1MzY2OTM2MEY4OEIwOTlENDk3NEY4
RjI4OTUwRTAeFw0yNjEwMDMwOTIzMTJaFw0yNjEwMTAwOTIzMTJaMBgxFjAUBgNV
BAMTDTZhYzBjOTgwLWIyYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD2tWhoSBvrEzQINZNA8anTMO0RB138RE2pzc99qeLvrvR9EdLE45TZ4xA4Vaz7
UbrtdPmRUulw4TJepPqYze8iCds8IXTJ5FTBPxB95v3Ffl81M0zJ86s4smEyxEEm
pMp83gKEu3X0IANzvmHOrT/YAzEwxjqpy7OL5bQgxe9/A5qKGUvKq4rPTDoNAydy
APtQ8IiGBK+vTCDuKBJKdNcJTGKftjTvLCQrIOOR0DYGjKDx8ZzX7WcntUoC/TVm
wL7X7Mzl5mDo+BBCfE1JR5yvTGjyBHCKEExK/vumHJxk0ZVuu7nIXUp6+cEwGQAQ
qyH6ZcRy5QVK2WyS4j74beEBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7LrBGVAx
CI762Ox9HMF/2LjOG6swHwYDVR0jBBgwFoAUtnRwg6S1Nmk2D4iwmdSXT48olQ4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGNDc3LzZGMENCQ0RFNzEy
NTExRjE4N0VBQURDQTZEQTMwRkJDL3RuUndnNlMxTm1rMkQ0aXdtZFNYVDQ4b2xR
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdG5Sd2c2UzFObWsyRDRpd21kU1hUNDhvbFE0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG
NDc3LzZGMENCQ0RFNzEyNTExRjE4N0VBQURDQTZEQTMwRkJDL3RuUndnNlMxTm1r
MkQ0aXdtZFNYVDQ4b2xRNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAsxQdm3dCVuVxPqJ17u3/kmDQlSqk4oqfpE5HobTQfgOWPYn4ogEzVlRGFVSsF
9eaolrhkTBSq9pagtCSbMzg2HDtTPE/pubHJvv9MB8Tr3KsXOatz4pwaGlyG7Vl6
HMxpt9nsQsB/LWybi4aKqWcAOBNd58D7VDKVGclcdIHb8y1BMd9dJ57iSyM4mKWW
qwP/Yka9QKSrKHM34aqHJfOIAw+Pa97QDJt73M3trf0AsFcwdvqGhVPYwnm2K9mt
/3t48i3HSlwBUK5K/MFOE1ZWq4r0m6MIAFPDQO908PVpBw5fiVJopnTJWWTbRPPQ
YOSDP9hZ/0kvbmNISV75gAZE
-----END CERTIFICATE-----
Generated at Sun Oct 4 19:58:13 2026 by rpki-client