
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
File: TZCQh73foVBeK7oD8gYRLq7_sRs.mft (raw, json)
Hash identifier: h4FzO0GSy0eFKOHEwOncocigb7vhHXYvOJ9GPfcTNO8=
Subject key identifier: 46:60:E6:01:FF:CF:EB:2E:A5:BB:A7:2B:96:BA:84:DB:58:4D:D8:7A
Authority key identifier: 4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B
Certificate issuer: /CN=A91D200F/serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
Certificate serial: 0257
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
Manifest number: 0245
Signing time: Thu 09 Jul 2026 04:03:14 +0000
Manifest this update: Thu 09 Jul 2026 04:03:14 +0000
Manifest next update: Thu 16 Jul 2026 04:03:14 +0000
Files and hashes: 1: TZCQh73foVBeK7oD8gYRLq7_sRs.crl (hash: XhGsfVFyUgCrzoUE5Aer2vc4/v04sA2pdBdTCGk2wrk=)
2: 039807B286B511EFAF868C6EC4F9AE02.roa (hash: GJOKnnR35/W//5xyyD5B9yPrJQet8eLCLqSkDmsdIrE=)
3: D71B60EC2B5911EE81C7542FC4F9AE02.roa (hash: Jas/B/HKgv6Ds9cxbOl0LkWTFVaps0+gG/0AuMhiV68=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl
rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 16 Jul 2026 04:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D200F, serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
Validity
Not Before: Jul 9 04:03:14 2026 GMT
Not After : Jul 16 04:03:14 2026 GMT
Subject: CN=6a4f1d82-d46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ea:9b:f6:8e:83:64:db:3b:5c:39:01:49:47:
69:11:3a:bd:c3:43:c8:79:28:d7:a3:b8:1e:f3:a3:
35:f0:37:2e:7c:a2:3f:84:b4:bd:0e:3f:e4:98:67:
de:c7:42:c2:c2:ad:c8:b4:76:06:a8:c2:84:22:19:
86:db:40:16:83:f6:8a:bd:10:b6:ee:9b:e4:22:69:
b9:15:95:40:72:a2:01:ff:03:13:79:58:70:05:9f:
30:3d:4d:c4:e1:51:75:3f:42:6c:87:09:ea:2f:58:
6f:ec:81:3b:cf:dd:d8:3e:1f:19:8c:dc:a0:3a:27:
86:82:ad:6a:4a:5f:36:30:c3:38:c5:74:36:31:83:
49:82:21:39:48:3b:22:9c:d6:33:d9:3b:53:74:8f:
0d:27:aa:95:9c:81:9d:1f:56:e4:45:de:7d:79:be:
33:9b:cd:71:90:b3:70:b5:8f:a4:5c:6e:d0:84:2d:
5d:27:7d:ef:77:7e:fc:32:09:be:a1:26:b6:36:e3:
9b:c2:54:c0:b3:8e:53:ff:a1:bd:2b:97:36:d2:1d:
7a:82:6a:db:30:28:23:d5:ac:d6:58:17:58:e3:b5:
9d:bd:d1:41:54:20:8a:b2:54:6d:ae:34:77:9f:91:
3b:f5:11:b9:45:d8:5c:bf:41:8f:5f:c7:4c:fb:10:
0e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:60:E6:01:FF:CF:EB:2E:A5:BB:A7:2B:96:BA:84:DB:58:4D:D8:7A
X509v3 Authority Key Identifier:
keyid:4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fc:58:21:d6:fe:f8:1e:c2:ca:bc:be:f8:d1:e4:19:db:21:
b7:71:2d:6a:4f:fe:ab:84:83:f8:2f:b1:fa:38:5e:29:5f:00:
88:ea:9d:f1:41:9e:ab:17:1f:f7:ef:24:a9:10:81:a1:58:0c:
1a:66:4a:66:ab:44:8f:48:db:20:7c:16:d5:55:ee:dc:cd:08:
9e:38:02:74:ab:10:dd:80:64:28:29:d5:b1:7b:e5:e0:1d:4a:
07:57:1c:0f:28:aa:c5:a1:ee:e5:38:ac:eb:e7:26:bf:b9:d5:
95:c4:34:90:f0:6c:a7:a2:e2:1e:ee:5b:21:2e:66:59:d5:59:
bf:60:bd:ca:e7:13:b7:67:de:d3:a3:7c:68:5b:db:75:8c:a7:
cd:39:f8:9c:8a:51:c2:db:62:7c:1f:38:a3:75:0a:5b:5d:be:
2f:5a:55:50:de:7b:59:74:65:ba:7c:17:75:64:48:1f:25:24:
d7:92:fa:2c:ed:d4:44:72:1b:37:60:40:a8:2f:e6:7f:df:9d:
65:77:2d:a9:f9:3c:a8:28:3d:c0:09:0f:ee:2c:2a:1a:51:32:
d1:ff:7c:0e:b1:ef:b9:99:62:dd:ca:e2:57:d5:d2:bd:76:3c:
62:ff:c6:a5:0f:ea:8f:37:ed:89:c3:54:b7:bd:de:10:61:3d:
38:8e:37:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 03:19:28 2026 by rpki-client