
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft
File: TNneNy0DSKwzsWel144wE_wDVx8.mft (raw, json)
Hash identifier: oTYr5w/mRvjlkdaC1/ykaBS5piNS7+Z7NpcUARX8HRQ=
Subject key identifier: D3:35:EB:26:DF:AA:C1:5E:2B:2C:D8:4E:0B:B8:F6:52:E8:14:FD:78
Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F
Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F
Certificate serial: 0262
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft
Manifest number: 025D
Signing time: Mon 02 Mar 2026 16:22:55 +0000
Manifest this update: Mon 02 Mar 2026 16:22:55 +0000
Manifest next update: Mon 09 Mar 2026 16:22:55 +0000
Files and hashes: 1: TNneNy0DSKwzsWel144wE_wDVx8.crl (hash: pfxdNT2JXUwujEab22I5JdZBUr3osZ/1zyLH3+ew1C8=)
2: 5CAB3758374A11EFB612084EC4F9AE02.roa (hash: ueHqaGP9BcHIMZqPcQWizwyy9v5xkPDp7cUx2N9DhCY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl
rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610 (0x262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F
Validity
Not Before: Mar 2 16:22:55 2026 GMT
Not After : Mar 9 16:22:55 2026 GMT
Subject: CN=69a5b95f-27e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:3f:a8:a9:fa:85:5d:59:28:f1:b5:85:7a:
21:d7:7e:97:d4:bf:7a:80:5e:5b:d5:86:a3:b4:d3:
eb:75:17:0b:25:ce:a5:9c:03:74:0b:f7:a4:cc:57:
2b:29:8f:12:2a:1a:b0:37:9e:5e:97:10:a3:00:f4:
a4:c0:f7:cf:b2:71:f8:91:45:c8:eb:86:f8:69:ab:
76:f0:67:ce:ce:05:db:c2:b3:2e:5d:67:16:05:d6:
6b:f4:0d:b0:b9:4e:55:cd:ad:20:47:9d:da:59:18:
be:2b:92:e8:5c:54:9e:9c:3c:e6:f5:47:61:65:e1:
aa:f7:a0:41:6b:19:3c:ca:3e:56:36:9e:58:b3:fe:
1a:98:88:ed:50:8f:b8:08:ee:af:02:92:32:01:bd:
31:a3:e8:53:8a:c2:cb:57:e5:c5:4c:f9:77:4c:95:
ae:09:0d:d2:f1:ab:1a:1a:18:48:75:6c:5d:06:b7:
98:ad:77:e2:e7:2b:30:3c:8c:74:30:ab:1c:20:c5:
de:f3:43:fa:ee:7a:cf:bb:38:75:2a:85:c6:e9:1e:
80:c8:d5:24:24:a4:fd:35:84:54:58:80:c1:f1:ed:
0a:87:55:6b:76:66:f1:ea:ad:22:6e:e0:ac:dd:e8:
17:b2:9b:46:01:d4:f0:7c:78:ae:af:76:7c:71:c4:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:35:EB:26:DF:AA:C1:5E:2B:2C:D8:4E:0B:B8:F6:52:E8:14:FD:78
X509v3 Authority Key Identifier:
keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f7:38:c4:62:a1:81:62:a8:e7:4c:69:bb:92:7b:a0:82:ed:
f1:9f:5b:dd:eb:e3:5f:17:55:3a:92:fd:da:ba:e2:b0:93:f6:
37:5d:42:d5:6c:17:06:7e:83:89:aa:82:8c:48:75:09:e7:49:
f4:a7:72:99:f8:4e:5c:0b:39:dd:8c:92:1a:49:1e:cc:ed:55:
5e:bf:87:4c:13:34:4b:7a:09:fd:b7:d0:93:ed:b5:23:85:37:
f8:4a:27:8a:cb:3d:81:64:8b:e7:af:c1:8d:2e:12:c4:c1:ec:
a0:12:df:52:78:a3:43:74:aa:5f:64:53:f9:3f:a4:ea:0b:94:
54:bb:fb:68:2c:d1:bb:75:20:64:94:65:17:d1:1d:c2:4c:16:
4e:1a:a1:96:f6:f7:c4:ab:26:27:45:4d:fd:4a:98:65:66:ec:
be:f2:da:2c:47:cd:ca:4d:a8:77:6d:87:85:cf:3d:5b:80:fc:
6a:16:58:4f:35:0e:3d:8b:47:21:ac:11:f0:70:2d:9a:a9:42:
a7:bd:bd:41:33:0f:8c:93:0d:b6:e0:f6:d8:04:18:b6:38:fe:
ff:54:7a:6c:45:c6:2f:8e:e1:f7:3f:d4:fb:ef:0f:13:06:8f:
a7:58:95:4a:d8:eb:fe:75:e0:80:75:6f:ee:09:ce:24:a5:2f:
ba:dd:b9:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RENEMDkxMTAvBgNVBAUTKDRDRDlERTM3MkQwMzQ4QUMzM0IxNjdBNUQ3OEUzMDEz
RkMwMzU3MUYwHhcNMjYwMzAyMTYyMjU1WhcNMjYwMzA5MTYyMjU1WjAYMRYwFAYD
VQQDEw02OWE1Yjk1Zi0yN2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAujU/qKn6hV1ZKPG1hXoh136X1L96gF5b1YajtNPrdRcLJc6lnAN0C/ekzFcr
KY8SKhqwN55elxCjAPSkwPfPsnH4kUXI64b4aat28GfOzgXbwrMuXWcWBdZr9A2w
uU5Vza0gR53aWRi+K5LoXFSenDzm9UdhZeGq96BBaxk8yj5WNp5Ys/4amIjtUI+4
CO6vApIyAb0xo+hTisLLV+XFTPl3TJWuCQ3S8asaGhhIdWxdBreYrXfi5yswPIx0
MKscIMXe80P67nrPuzh1KoXG6R6AyNUkJKT9NYRUWIDB8e0Kh1Vrdmbx6q0ibuCs
3egXsptGAdTwfHiur3Z8ccS5vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNM16ybf
qsFeKyzYTgu49lLoFP14MB8GA1UdIwQYMBaAFEzZ3jctA0isM7FnpdeOMBP8A1cf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS81NzhCMDZDQzg4
NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNLd3pzV2VsMTQ0d0Vfd0RW
eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RObmVOeTBEU0t3enNXZWwxNDR3RV93RFZ4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Q0QwOS81NzhCMDZDQzg4NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNL
d3pzV2VsMTQ0d0Vfd0RWeDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnfc4xGKhgWKo50xpu5J7oILt8Z9b3evjXxdVOpL92rrisJP2N11C1WwXBn6D
iaqCjEh1CedJ9KdymfhOXAs53YySGkkezO1VXr+HTBM0S3oJ/bfQk+21I4U3+Eon
iss9gWSL56/BjS4SxMHsoBLfUnijQ3SqX2RT+T+k6guUVLv7aCzRu3UgZJRlF9Ed
wkwWThqhlvb3xKsmJ0VN/UqYZWbsvvLaLEfNyk2od22Hhc89W4D8ahZYTzUOPYtH
IawR8HAtmqlCp729QTMPjJMNtuD22AQYtjj+/1R6bEXGL47h9z/U++8PEwaPp1iV
Stjr/nXggHVv7gnOJKUvut25RQ==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:29:47 2026 by rpki-client