
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
File: TCb5fJV7v72Mqq_a-nlacx4RKtI.mft (raw, json)
Hash identifier: MMXwNS8FeT4d7rZk2EzbqxdRN1aBntPRFZK5mtjOqIY=
Subject key identifier: 12:17:96:86:4A:CB:90:E5:90:A3:EA:63:11:E9:A9:69:25:D9:05:9C
Authority key identifier: 4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2
Certificate issuer: /CN=A91DBADA/serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
Manifest number: 011F
Signing time: Tue 29 Sep 2026 06:23:16 +0000
Manifest this update: Tue 29 Sep 2026 06:23:15 +0000
Manifest next update: Tue 06 Oct 2026 06:23:15 +0000
Files and hashes: 1: TCb5fJV7v72Mqq_a-nlacx4RKtI.crl (hash: gL/mcES+wT75hX87QhLTl0V+/2xjknlmRINr/9zg0ek=)
2: PgoJdCghHx_LgNbRlX_1CVZj_38.asa (hash: excOU5/rQaalk2dxSuvS20vzuZh/FMrlAwfv0doS5Lo=)
3: 9B4952122CC411F18DA02C7B8F833773.roa (hash: bxkYgKM3AZY7JP6+Ac7J2hlgQV4hzjnKcNdgfr1Hzwo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl
rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 06:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBADA, serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2
Validity
Not Before: Sep 29 06:23:15 2026 GMT
Not After : Oct 6 06:23:15 2026 GMT
Subject: CN=6abb5954-c1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:99:e7:5f:6c:16:90:dc:59:7a:56:01:d6:
1a:99:e7:a1:67:55:80:f6:fa:a6:58:8f:6c:3e:9f:
17:74:f3:4c:d3:2b:01:9c:62:be:a1:eb:d5:9e:6e:
8a:ef:a6:b0:0c:c2:33:cf:13:c6:25:44:51:16:dd:
7d:35:d6:92:07:ab:f4:d3:b1:6f:af:67:84:de:e4:
f1:ca:45:35:b1:8e:ee:94:34:58:ca:17:6e:97:c9:
dc:72:8e:e5:ab:cf:dd:1c:72:78:bf:84:f4:74:39:
fa:a0:5b:ce:11:1a:f0:82:db:6a:fe:ce:98:81:c2:
29:76:88:09:5f:0d:10:82:a0:6c:93:16:c6:89:6a:
57:6c:cd:e5:ca:75:9a:35:16:2c:bc:05:ea:82:a8:
ca:3b:49:6c:e1:a4:ae:ce:01:12:3c:bf:fc:0b:6e:
2e:eb:60:e6:b2:e8:02:ee:28:a0:4b:5a:d1:c2:1b:
2a:da:1b:e0:1d:ca:d6:df:e9:21:d0:a8:e9:d6:11:
8a:7f:6e:98:6a:43:d3:91:bb:c3:66:4c:80:88:f9:
d1:d0:e3:7b:30:ea:80:23:ab:fa:09:76:ff:7d:39:
e8:b9:14:9d:ab:2a:ab:31:33:90:38:e2:aa:b9:1c:
48:2e:1e:07:55:e5:72:0a:27:a3:7f:a8:58:d3:31:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:17:96:86:4A:CB:90:E5:90:A3:EA:63:11:E9:A9:69:25:D9:05:9C
X509v3 Authority Key Identifier:
keyid:4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:39:3e:e4:14:60:00:b3:6b:36:c6:4c:af:f0:00:d1:25:b4:
44:c9:e0:41:2d:a9:e6:be:4b:f6:2b:a6:16:e7:8b:06:94:90:
72:42:85:7f:fb:08:df:f7:0d:87:45:8e:5d:08:0c:6d:30:7e:
ce:40:78:f4:bb:17:4a:e3:72:2f:d3:a8:a9:33:73:cb:a1:d7:
2b:fc:f7:aa:0c:30:6d:54:63:cc:ea:0a:77:37:5f:09:54:61:
45:6e:32:cc:75:e5:22:7e:0e:5d:6e:79:5d:80:42:ba:16:2e:
61:ad:cb:74:38:66:75:71:05:04:a7:91:d0:50:aa:ea:4a:0f:
09:87:ab:61:80:42:00:24:71:99:80:e3:ed:15:35:e5:7e:fb:
df:a2:79:17:91:bd:3d:36:58:12:d0:13:af:6d:9f:33:b9:58:
db:02:51:5e:2c:08:4d:68:fd:02:22:c2:96:1a:66:05:a4:c7:
e6:2b:48:b2:db:bc:d7:83:b2:2d:cf:24:ac:68:0f:8b:db:2c:
91:ed:62:c7:20:8c:65:81:99:b3:a9:11:90:f4:d8:24:19:64:
c3:c9:19:7f:bc:b7:22:37:34:d9:02:28:c8:d3:ec:45:00:9b:
1c:a7:85:04:34:3d:4c:49:0c:65:69:71:e3:0d:03:85:64:6c:
ca:90:ef:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:59:57 2026 by rpki-client