
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft
File: tGhODWIsua_RLLX6PkiF382FAE0.mft (raw, json)
Hash identifier: OxoQ5shid7YzkjuDk0qACTYBeZw57tXyFQasqJqpGdc=
Subject key identifier: 89:C1:92:6F:30:FB:22:7B:BA:0D:4A:EF:EB:0C:98:62:E7:71:FD:4A
Authority key identifier: B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D
Certificate issuer: /CN=A91D4636/serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D
Certificate serial: 0485
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft
Manifest number: 046E
Signing time: Thu 11 Jun 2026 02:15:28 +0000
Manifest this update: Thu 11 Jun 2026 02:15:28 +0000
Manifest next update: Thu 18 Jun 2026 02:15:28 +0000
Files and hashes: 1: tGhODWIsua_RLLX6PkiF382FAE0.crl (hash: i1+vOYUIBh7EpjNLrA7ItyCZKfMhbNbQTrrX2VP6Kc8=)
2: C458350E979C11EC8E769C43C4F9AE02.roa (hash: qwlX5vNKgphi0cDeLb8b9XuSIhNZMIjTsz9ccOAsGxo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl
rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 02:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1157 (0x485)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4636, serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D
Validity
Not Before: Jun 11 02:15:28 2026 GMT
Not After : Jun 18 02:15:28 2026 GMT
Subject: CN=6a2a1a40-56e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:57:dc:e5:72:74:75:09:79:f3:60:f0:41:ab:
7d:d3:5e:bc:a1:3b:40:69:6c:e8:b1:a1:8a:e7:3a:
13:c1:46:38:39:e0:19:7f:6a:65:81:72:96:63:2a:
06:d4:f6:f1:98:6d:46:fb:b1:bb:23:c6:c1:3d:60:
ac:71:bb:9d:81:a0:57:59:2a:7f:63:ab:2f:b0:5c:
43:c8:63:e8:5e:22:4c:5c:65:75:1d:90:91:d0:9c:
29:cf:9b:7d:21:47:7a:3a:e0:15:34:f2:59:fc:63:
eb:ac:ab:58:0c:c8:04:9c:18:72:e2:ac:b8:c3:f0:
13:ea:fb:4e:66:ed:65:91:e5:ad:5b:5b:f5:1c:a0:
64:3c:e8:a3:30:de:6b:56:ae:81:b2:03:69:02:e3:
06:99:ea:a4:8f:97:2f:7e:e7:74:a8:15:02:6f:04:
5f:75:46:8e:bd:8e:74:cb:a0:d4:3f:c1:b4:b0:1d:
a6:7b:8b:ce:4b:44:00:7e:ba:69:77:a5:64:76:1f:
af:3f:d9:16:22:6a:74:8c:a3:25:c8:51:e3:01:25:
6f:76:e6:00:b7:22:e0:fb:6e:fc:c3:48:63:15:ee:
1c:61:a3:ee:20:47:22:2f:1e:52:81:fd:19:87:ea:
7b:5f:0c:17:df:0f:40:59:ce:98:2d:10:39:90:de:
ee:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C1:92:6F:30:FB:22:7B:BA:0D:4A:EF:EB:0C:98:62:E7:71:FD:4A
X509v3 Authority Key Identifier:
keyid:B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:36:f6:fd:69:65:fc:5a:fa:aa:51:b5:1d:e0:6d:4d:85:77:
34:9b:b2:dd:e6:60:b1:dd:c2:d2:99:c6:a4:69:ea:6b:f1:36:
ec:a7:73:a4:93:60:a8:b9:d4:4e:ea:f4:3e:4e:f4:68:d9:37:
9f:d5:9b:fe:85:9a:d0:58:6b:31:4a:1a:64:d3:29:19:56:bc:
de:4e:af:20:33:42:6d:14:35:e6:c8:d4:36:65:02:37:3d:28:
8a:7a:91:b2:d4:5b:85:66:16:d9:70:c6:fe:c3:86:f7:e2:ee:
40:6b:b7:d0:c0:24:d9:c3:f2:da:d1:a5:0a:e6:8d:fa:21:48:
e6:4e:8d:20:5c:e3:5a:b9:c6:4c:bb:b9:83:a3:77:c0:82:53:
3b:00:ba:51:7c:e4:c2:c2:90:2b:e0:12:03:f0:7a:7a:ac:df:
80:0a:cf:6a:56:07:45:ea:ba:01:0d:5b:e0:03:5b:0e:af:ea:
32:8b:9f:f0:eb:2f:50:dc:27:50:d5:ac:c2:d9:0b:99:fe:c4:
78:71:34:75:b0:0e:42:25:60:b1:64:ed:d4:4a:38:fd:c4:b5:
ae:28:62:ae:0f:4a:c7:bf:bb:fc:41:2e:da:9e:0e:84:df:02:
20:d9:74:00:ec:8e:9f:36:44:39:a5:8c:4d:d4:3f:cc:de:b1:
a1:83:76:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ2MzYxMTAvBgNVBAUTKEI0Njg0RTBENjIyQ0I5QUZEMTJDQjVGQTNFNDg4NURG
Q0Q4NTAwNEQwHhcNMjYwNjExMDIxNTI4WhcNMjYwNjE4MDIxNTI4WjAYMRYwFAYD
VQQDEw02YTJhMWE0MC01NmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnlfc5XJ0dQl582DwQat90168oTtAaWzosaGK5zoTwUY4OeAZf2plgXKWYyoG
1PbxmG1G+7G7I8bBPWCscbudgaBXWSp/Y6svsFxDyGPoXiJMXGV1HZCR0Jwpz5t9
IUd6OuAVNPJZ/GPrrKtYDMgEnBhy4qy4w/AT6vtOZu1lkeWtW1v1HKBkPOijMN5r
Vq6BsgNpAuMGmeqkj5cvfud0qBUCbwRfdUaOvY50y6DUP8G0sB2me4vOS0QAfrpp
d6Vkdh+vP9kWImp0jKMlyFHjASVvduYAtyLg+278w0hjFe4cYaPuIEciLx5Sgf0Z
h+p7XwwX3w9AWc6YLRA5kN7u8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFInBkm8w
+yJ7ug1K7+sMmGLncf1KMB8GA1UdIwQYMBaAFLRoTg1iLLmv0Sy1+j5Ihd/NhQBN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYzNi8yQzlCQzMzQzk3
OTkxMUVDQkU3MjVBM0NDNEY5QUUwMi90R2hPRFdJc3VhX1JMTFg2UGtpRjM4MkZB
RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RHaE9EV0lzdWFfUkxMWDZQa2lGMzgyRkFFMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDYzNi8yQzlCQzMzQzk3OTkxMUVDQkU3MjVBM0NDNEY5QUUwMi90R2hPRFdJc3Vh
X1JMTFg2UGtpRjM4MkZBRTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAzb2/Wll/Fr6qlG1HeBtTYV3NJuy3eZgsd3C0pnGpGnqa/E27KdzpJNgqLnU
Tur0Pk70aNk3n9Wb/oWa0FhrMUoaZNMpGVa83k6vIDNCbRQ15sjUNmUCNz0oinqR
stRbhWYW2XDG/sOG9+LuQGu30MAk2cPy2tGlCuaN+iFI5k6NIFzjWrnGTLu5g6N3
wIJTOwC6UXzkwsKQK+ASA/B6eqzfgArPalYHReq6AQ1b4ANbDq/qMouf8OsvUNwn
UNWswtkLmf7EeHE0dbAOQiVgsWTt1Eo4/cS1rihirg9Kx7+7/EEu2p4OhN8CINl0
AOyOnzZEOaWMTdQ/zN6xoYN2kw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:07:31 2026 by rpki-client