
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft
File: TNneNy0DSKwzsWel144wE_wDVx8.mft (raw, json)
Hash identifier: CeBJLk20Q62urRoR92qQzto/g8ZoS1EQckmLVEpdvhI=
Subject key identifier: 4C:3E:C6:3A:1D:1F:17:BE:04:90:20:84:BD:95:BC:94:70:F0:F4:7B
Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F
Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F
Certificate serial: 02DA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft
Manifest number: 02D0
Signing time: Tue 06 Oct 2026 16:19:37 +0000
Manifest this update: Tue 06 Oct 2026 16:19:37 +0000
Manifest next update: Tue 13 Oct 2026 16:19:37 +0000
Files and hashes: 1: TNneNy0DSKwzsWel144wE_wDVx8.crl (hash: zjIkmZOksGr+eOWLWuqQrPnxQU7Ki/Z/wrl16G/k/ZI=)
2: 5CAB3758374A11EFB612084EC4F9AE02.roa (hash: ueHqaGP9BcHIMZqPcQWizwyy9v5xkPDp7cUx2N9DhCY=)
3: E4C7F5CC861C11F1A1A4787881A30FBC.roa (hash: eS4gifaEB1Ko6koZdynUYduB0XDv64fPCwP13PzmRbY=)
4: D999BCE486E911F189970DEF85A30FBC.roa (hash: PM+CjH8NGl/svPw8N5o7ZKEH0zYFpc1M+Q6DjNKK8fc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl
rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:19:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 730 (0x2da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F
Validity
Not Before: Oct 6 16:19:37 2026 GMT
Not After : Oct 13 16:19:37 2026 GMT
Subject: CN=6ac51f99-7e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:27:3a:e2:22:e6:49:2f:7a:38:a7:b2:93:
0d:ff:67:ae:60:48:d2:4b:ca:5e:a4:16:41:d1:36:
fe:50:ce:7c:0d:e0:9a:b0:62:c8:a5:72:3b:f9:5c:
0c:ed:63:22:74:f6:03:29:a7:40:bb:54:21:79:43:
6a:f6:d6:6a:9b:d8:7d:da:2f:17:df:25:43:d9:57:
14:44:83:8a:ca:fb:cd:d8:1c:33:c0:61:f1:5c:27:
d0:25:f5:d7:14:5a:26:05:1c:41:94:c4:0e:f0:ba:
d2:d1:81:f5:84:f8:39:87:22:bd:7b:fe:a7:61:05:
1f:87:9f:77:57:6c:59:22:b3:3c:45:8d:0e:15:3d:
86:9f:45:21:5f:d2:c3:a1:05:00:29:bb:69:61:56:
e4:ae:94:76:9f:75:46:f0:af:ac:d2:c6:77:96:ad:
d4:3d:17:c3:78:99:aa:87:6c:61:91:b7:21:97:9e:
e7:42:84:14:32:66:43:e1:b8:d7:27:51:2e:c1:60:
ac:28:56:74:af:13:37:47:ed:a6:77:6a:dc:10:dc:
84:ec:e2:8e:55:bf:45:de:82:2d:3c:c9:2d:14:8a:
53:a6:2f:09:8b:72:30:a6:84:89:20:b9:4d:93:5f:
4f:6e:81:68:96:3e:a9:5d:3b:c8:ca:ae:24:7d:9f:
0b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3E:C6:3A:1D:1F:17:BE:04:90:20:84:BD:95:BC:94:70:F0:F4:7B
X509v3 Authority Key Identifier:
keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b7:4f:92:4f:5e:7a:85:7d:d7:d1:c2:f7:37:c4:44:c8:27:
03:36:75:04:df:44:04:ca:67:e7:77:cf:b8:2a:04:fc:be:f1:
43:e5:b9:ec:04:60:49:35:a1:47:dc:ad:72:7b:a6:63:74:04:
d2:87:86:34:25:fc:7c:3c:35:5c:14:23:d4:64:74:d0:77:2e:
89:75:2c:ee:f0:f4:bc:5d:92:7a:e8:91:b0:62:1d:df:83:e2:
a6:f4:d6:9f:91:5a:84:6f:9b:f7:e1:b2:ea:6b:4a:1e:be:f9:
3f:73:cd:8b:b7:98:bd:e1:36:78:6c:e1:6a:a5:66:d8:b7:50:
7c:d8:3d:13:34:92:36:a0:37:ac:c8:ea:a8:4e:38:a2:71:b2:
bd:bf:14:fb:49:c2:33:52:c8:45:2a:b2:92:1e:b5:fe:5a:10:
80:d3:89:39:e5:82:6f:73:53:e4:65:af:13:0d:74:02:75:64:
29:26:b7:8a:04:ba:37:f6:24:6e:ee:d5:7f:ae:47:ee:ef:4e:
d6:dd:de:46:55:fc:f4:ff:ff:76:02:52:aa:6c:4c:0f:a9:76:
2a:a1:fd:63:24:b5:fb:b8:be:30:51:7e:45:28:ff:9a:89:82:
cd:fa:ec:42:e5:d5:52:c6:7e:f9:f0:b5:88:a2:5b:34:22:5c:
5c:e8:10:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 18:54:08 2026 by rpki-client