
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
File: tbNfkk61wy-7QYZ9OhZuSpa77KI.mft (raw, json)
Hash identifier: cUMTREdqeIQznZ6pl+EfuqnX5fv6vUV2DgPFB5V4wWI=
Subject key identifier: 34:44:A2:59:94:E7:38:13:AB:D5:95:6D:A4:B6:CC:F3:31:90:AB:3B
Authority key identifier: B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2
Certificate issuer: /CN=A91D9928/serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
Manifest number: AF
Signing time: Mon 31 Aug 2026 07:29:21 +0000
Manifest this update: Mon 31 Aug 2026 07:29:20 +0000
Manifest next update: Mon 07 Sep 2026 07:29:20 +0000
Files and hashes: 1: tbNfkk61wy-7QYZ9OhZuSpa77KI.crl (hash: DqvUQY7l+E8XKunoKw2pdHio+63TxU+DVoQ7qrIBYA4=)
2: A71814CA984F11F0B7A01E76C4F9AE02.roa (hash: Wqlgag3JASt9EH/u+Cc5ukalg78nje36S+xtNjVr+A4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl
rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 07:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9928, serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
Validity
Not Before: Aug 31 07:29:20 2026 GMT
Not After : Sep 7 07:29:20 2026 GMT
Subject: CN=6a952d51-c0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:46:a5:99:fa:84:ac:d5:a9:75:57:8d:1e:
45:9e:51:d8:a5:66:51:40:b2:83:9f:11:b9:85:ab:
10:3d:81:25:41:0d:c2:ff:23:0d:61:b9:ac:22:0c:
3c:23:8c:4c:21:54:d4:b0:1a:db:bd:ff:e0:fe:af:
ec:d1:74:82:3d:a7:1d:87:23:0d:3d:29:d2:9e:3d:
24:57:53:fe:25:6d:72:84:c0:1c:c2:77:11:34:19:
0c:cd:17:56:86:e5:a4:45:73:39:2e:7e:96:6c:d8:
32:3e:43:c6:66:66:61:e9:5a:0d:f4:49:24:2d:58:
c6:57:fa:f1:74:ab:7a:f2:26:43:f9:c5:6d:d6:70:
25:85:71:47:63:2a:fe:f8:85:54:2d:7c:48:4e:12:
a4:71:6d:7f:a5:d4:b8:39:b1:50:d5:20:61:1f:d0:
fd:dd:0b:0f:ef:a3:57:1d:cd:b6:39:b0:d7:d8:b3:
e5:28:3c:cb:d2:25:41:f8:fe:63:d7:63:ca:5d:3b:
65:4d:30:31:df:f4:e0:97:cc:55:33:84:64:ae:27:
f1:83:51:d0:e8:f2:3a:8e:30:5e:09:93:b8:a6:ce:
3f:59:42:19:2e:e3:1f:92:69:83:df:db:9d:fb:2f:
87:8b:26:c4:51:64:3e:a6:8f:47:f1:49:56:07:aa:
fd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:44:A2:59:94:E7:38:13:AB:D5:95:6D:A4:B6:CC:F3:31:90:AB:3B
X509v3 Authority Key Identifier:
keyid:B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b5:87:9c:c8:c2:ce:ac:f2:a8:c8:19:e4:35:0d:b4:1e:80:
2e:3d:01:8e:88:24:b5:e8:b4:c2:8b:6a:2c:a2:8a:75:60:e7:
1f:cd:34:98:ff:7d:23:ae:2b:13:9e:7c:c4:29:20:37:1b:56:
66:7f:ef:27:49:e7:44:43:06:49:13:8f:25:58:04:39:a2:cf:
6a:2b:ba:ed:bd:d4:78:94:40:09:59:d1:07:4d:76:18:58:17:
a9:e2:48:d5:75:16:98:d0:6c:25:2c:f8:c0:43:4e:81:f0:f0:
00:f0:1a:6a:5f:2b:73:15:89:a5:26:3f:41:fe:dd:ac:d4:02:
f1:9b:d3:b2:ad:a7:fc:af:c6:33:1c:cb:86:a0:7a:0c:31:f4:
29:e4:ad:12:18:31:6e:3c:40:fa:87:d1:7d:ea:2c:7b:a8:b8:
f2:6b:12:37:78:19:15:9d:4b:4d:55:c8:f8:2e:c9:00:f6:c2:
c0:a3:74:52:aa:00:cf:47:bc:42:af:00:df:1c:8d:1d:7d:e3:
9a:94:80:0c:b6:71:3b:9f:d5:f1:a0:97:ce:5a:a2:5d:d7:92:
41:5d:60:b0:3d:be:0c:47:78:eb:32:a8:c9:47:f2:c5:83:63:
c6:8a:04:f3:e4:86:91:f9:aa:7f:e5:86:e0:f2:f8:57:4a:35:
5a:64:3f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:25:02 2026 by rpki-client