
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json)
Hash identifier: UrOBm3jUEUgMp+6YO0Udf7QlFdiPgaRDnFPKWWFD2nU=
Subject key identifier: EB:D3:26:E9:27:5D:63:12:8B:9A:13:01:6B:97:4F:C3:5C:E7:09:CF
Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98
Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198
Certificate serial: 0DCC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
Manifest number: 0DC9
Signing time: Sun 02 Aug 2026 17:58:38 +0000
Manifest this update: Sun 02 Aug 2026 17:58:37 +0000
Manifest next update: Sun 09 Aug 2026 17:58:37 +0000
Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: TgKZ8Vllthp1pdAv7lhK2zF3ow7Vj+8AfL7H4oJ4dOk=)
2: 3F6AC59EB27A11F095B9C63DC4F9AE02.roa (hash: DNZsoV57+rQGIAJrL+CwAovCV4qI5UyFXg2qYhLRO4o=)
3: 97EA257424D611F1948C90B8AB833773.roa (hash: x7ThlrbpRobxp6D+qx/sidRoN6DyIJk6KWUPxoCM1O0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl
rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Aug 2026 17:58:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3532 (0xdcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198
Validity
Not Before: Aug 2 17:58:37 2026 GMT
Not After : Aug 9 17:58:37 2026 GMT
Subject: CN=6a6f854e-6bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:39:71:23:bb:83:eb:a9:e5:08:55:03:39:2f:
75:69:77:8e:b1:f8:ad:11:ce:a9:0d:bc:42:cf:ba:
73:a6:f2:2e:02:01:68:4d:b1:5c:45:5f:e6:e1:3c:
d4:8c:7c:99:98:06:dc:d5:40:b4:93:e1:da:1c:f6:
6a:f7:16:7b:d0:f4:db:bf:ef:33:41:1e:2c:1c:27:
ba:85:d4:f4:ca:58:38:59:8c:fc:c2:0d:c4:cb:34:
fb:3a:6c:e4:10:bb:5d:5b:cc:41:ca:53:09:83:ae:
4f:71:af:f0:82:bf:4f:18:b9:51:6c:14:6e:2c:6c:
a5:49:68:9e:08:55:a0:d9:3a:46:1b:3d:c9:48:c0:
9a:51:29:25:e0:a1:a3:c3:f3:f8:f7:2a:be:36:61:
dd:61:78:cd:e6:01:69:52:15:8d:f6:b4:89:0b:82:
cf:5a:3e:20:0f:06:5b:c6:a1:39:e9:1c:6f:f6:d7:
fd:f1:a6:b7:be:e4:0c:fa:9b:9e:2d:76:2b:d1:97:
7f:de:ad:de:52:35:0a:d8:c0:db:27:89:cc:62:d0:
2c:7c:e9:11:86:18:43:2d:c8:a9:34:de:96:70:b4:
af:b3:f5:06:4c:85:60:54:43:0d:15:e5:a3:bf:1c:
7b:a8:43:57:28:cd:cf:6d:9a:54:36:bf:fc:7e:00:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D3:26:E9:27:5D:63:12:8B:9A:13:01:6B:97:4F:C3:5C:E7:09:CF
X509v3 Authority Key Identifier:
keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:31:06:fd:d3:00:d8:97:44:18:fb:65:af:20:be:ad:3a:83:
ee:7c:d9:85:e2:5e:24:f1:28:53:7b:8b:dc:06:d8:b8:7d:42:
f4:12:af:b5:30:74:e2:8d:bb:11:32:e7:ab:bf:a6:4c:eb:a6:
1d:e8:92:80:ef:be:1e:24:dd:64:f1:2d:e7:a5:d4:76:3b:a1:
c7:c7:b1:38:6f:cf:be:5b:1c:c1:f5:c0:89:db:c8:ec:5c:3d:
58:7e:7e:56:32:dd:70:a1:c7:74:41:32:f4:15:9a:9c:c5:ac:
da:34:56:a9:80:3a:26:a1:54:08:3b:11:b4:1c:16:cc:39:19:
81:eb:bf:19:26:c2:05:49:0a:b8:87:60:5b:5c:ef:53:59:77:
0c:a5:5f:b9:7a:fa:f6:f7:f9:77:2f:27:1f:4d:bb:9e:0a:0d:
a0:49:d6:9e:bf:6c:d7:1d:82:53:d6:62:ce:c3:1a:31:e7:96:
8b:00:d5:a0:3b:90:d3:58:f8:78:b3:5f:6e:ab:83:d4:9c:53:
c6:7a:d7:3b:ec:93:30:56:a9:e3:0c:94:cf:bc:2b:5e:80:92:
e7:25:05:c5:31:24:76:81:76:09:46:53:ce:9e:a8:1d:a1:d9:
ed:8e:af:c9:bd:d4:c8:9e:91:12:1b:19:01:6c:20:cb:4c:02:
82:18:6e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 08:50:02 2026 by rpki-client