
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json)
Hash identifier: Xb9fE8ik43uzMmDoHKcoPxhfiiw0hq4t+mLFVqXyKVE=
Subject key identifier: 63:EF:13:41:E7:D1:0D:27:B5:56:F0:E4:98:94:92:0D:48:2C:E7:59
Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Certificate serial: 35B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
Manifest number: 3588
Signing time: Tue 04 Aug 2026 14:30:09 +0000
Manifest this update: Tue 04 Aug 2026 14:30:09 +0000
Manifest next update: Tue 11 Aug 2026 14:30:09 +0000
Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: 0uj/JyrREa77u0z8+/LNLtFxxOn8NuzKCKT7MdLu714=)
2: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: 0XTEt5zoDaqcrBr+823BjJa/ThjwRUzgKmsZbBXqoBs=)
3: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: zH3hNiG3oNZT93Paosmg2thFHMW31DTiFkny+zicvU4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Aug 2026 14:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13747 (0x35b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Validity
Not Before: Aug 4 14:30:09 2026 GMT
Not After : Aug 11 14:30:09 2026 GMT
Subject: CN=6a71f771-4bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:14:23:ba:99:6f:94:7f:71:b6:c5:99:9b:
8e:7c:a1:15:7f:a8:92:cd:7c:4d:ac:f7:48:cf:bc:
62:ad:04:19:1e:31:9e:42:bf:aa:2e:2d:95:7f:e0:
2c:10:f8:a8:1d:96:cf:6e:8b:70:63:cf:a1:04:b5:
da:ef:10:f2:23:37:ae:8f:4a:ab:b7:de:14:1a:5d:
fd:1e:5e:67:8c:89:1d:77:bc:e5:7b:ed:65:ae:4c:
15:b7:23:df:66:86:1d:dc:bb:d1:4b:19:49:39:8a:
5f:b7:46:9b:d5:d3:f5:24:21:c4:ee:05:d4:d1:4c:
16:c2:0d:c9:86:14:0d:07:50:3e:ce:30:1f:02:c5:
2b:04:4c:5a:57:4f:e4:f0:8b:c4:3b:35:21:9a:e4:
17:b0:de:dd:2c:fd:2e:44:b8:3f:82:4d:1c:9c:5e:
33:d2:d1:47:8b:4e:ea:7c:5b:a8:33:83:31:bf:fe:
0d:c1:26:5b:6e:d8:1c:85:c7:5c:8e:0f:f4:db:17:
c0:ca:b0:c2:8c:23:20:da:2b:e3:c5:92:47:02:dc:
87:44:8d:b5:e3:25:8a:a4:01:38:99:e3:db:0d:46:
e5:d6:88:a9:01:29:a7:3f:f9:42:87:9a:18:99:06:
b0:da:28:b4:2a:f0:e4:5d:06:30:44:94:4e:98:c6:
ef:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EF:13:41:E7:D1:0D:27:B5:56:F0:E4:98:94:92:0D:48:2C:E7:59
X509v3 Authority Key Identifier:
keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5d:b7:47:67:de:c1:57:93:32:ca:46:c4:b1:bb:d6:95:ff:
2e:65:8d:14:4f:55:3c:74:5e:08:29:de:9e:9a:2c:0d:1b:fa:
01:f9:ed:1c:4f:e2:68:af:95:db:9c:9d:e2:56:75:27:bb:1f:
0c:d3:b5:df:a2:be:4f:40:91:2d:9f:5a:3a:b9:01:97:2f:3f:
9b:13:16:02:64:6d:a0:e8:5e:e0:c4:14:9d:84:fa:4c:f4:b8:
5d:74:8c:64:4e:2a:d5:62:e6:a1:15:aa:c9:e5:39:e8:6e:60:
80:83:2d:64:88:93:54:e6:7c:68:25:67:3e:f6:41:bb:81:a6:
b9:65:37:39:e6:24:7c:41:74:71:cc:55:63:99:d6:4c:d3:af:
47:f3:de:0d:7a:54:00:ca:96:28:8a:2f:74:02:c4:5d:79:1b:
6c:40:5a:33:9e:55:9e:fa:c5:e0:65:9c:e2:d6:6d:ec:32:d1:
09:49:6d:b9:f6:e2:3d:a3:d8:17:4a:b9:0f:6e:13:e7:2f:20:
63:f7:14:41:0c:8f:52:3b:35:b4:be:a4:e7:fc:07:57:66:67:
5a:76:ef:aa:04:75:bd:53:4d:c5:42:7a:9e:0d:43:b7:bf:de:
32:bf:a6:86:f7:d5:c2:1b:b1:0e:4d:ed:12:0f:6b:fb:39:5b:
19:12:76:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 13:41:49 2026 by rpki-client