
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
File: TnWast4kVGn4MRuSc7VVOH51CpA.mft (raw, json)
Hash identifier: N6SrQihZHuvhV3l2SAmwqjZJvChEDmE+DDyHt7qocDU=
Subject key identifier: C1:C4:81:FE:AB:03:40:98:97:E6:E7:52:BD:5E:1C:1B:51:73:62:1F
Authority key identifier: 4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90
Certificate issuer: /CN=A91DF233/serialNumber=4E759AB2DE245469F8311B9273B555387E750A90
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
Manifest number: 011A
Signing time: Mon 01 Jun 2026 06:39:17 +0000
Manifest this update: Mon 01 Jun 2026 06:39:16 +0000
Manifest next update: Mon 08 Jun 2026 06:39:16 +0000
Files and hashes: 1: TnWast4kVGn4MRuSc7VVOH51CpA.crl (hash: 8XiXWhM63DtfKbyT3MVoEgh3GQdQS7dGBBjaUhqnorI=)
2: 1FE0E016B37D11EFBDE18263C4F9AE02.roa (hash: dVowzphy2uXgtzt1PiwbcwH9pWDhfnknLc0RqbSLyzs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl
rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF233, serialNumber=4E759AB2DE245469F8311B9273B555387E750A90
Validity
Not Before: Jun 1 06:39:16 2026 GMT
Not After : Jun 8 06:39:16 2026 GMT
Subject: CN=6a1d2915-5217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:79:15:5f:fd:ab:09:5b:eb:be:db:2b:85:ae:
86:da:14:cf:d3:e9:52:99:e4:53:65:ff:2b:b0:6b:
23:64:6a:e4:15:5b:2c:bd:45:d9:33:c4:69:53:e3:
a0:c8:71:9c:03:c7:4a:b7:47:a3:69:d1:c4:38:4a:
83:e4:5a:a1:44:76:87:48:27:45:8e:70:a3:03:e6:
eb:de:f7:9f:21:c7:6c:67:b8:06:b1:f9:1e:ed:db:
ac:0a:7b:d2:e0:69:70:27:25:f5:d2:36:da:05:93:
22:f4:22:a5:d3:70:2f:d4:6e:16:4e:54:e7:2f:dd:
94:fc:74:26:cd:b8:0e:5a:b3:5c:68:b1:6f:95:1a:
5b:5c:a5:7c:0f:48:c3:a2:6c:b0:0d:b1:54:09:d8:
bd:97:02:11:15:4b:ce:31:39:4e:33:47:c3:5b:c9:
71:0d:0f:7a:ae:dc:5b:5d:03:9b:19:cb:7b:16:5d:
97:d6:5a:29:c9:80:84:7f:f8:62:e1:4f:f2:22:c0:
bd:f6:b9:c8:1f:cb:af:e4:c0:db:08:ea:23:81:1d:
32:f1:0d:c0:77:62:30:4f:b2:c2:15:ec:69:b0:e0:
68:ca:2a:79:27:76:cb:5f:26:b7:a0:3d:f3:9c:31:
1a:24:c3:4e:07:39:a3:18:1f:1c:94:e3:6f:9f:32:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C4:81:FE:AB:03:40:98:97:E6:E7:52:BD:5E:1C:1B:51:73:62:1F
X509v3 Authority Key Identifier:
keyid:4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:df:37:58:92:61:15:39:41:04:14:37:a5:4d:d7:7a:a0:73:
83:35:bc:0e:bd:9e:d9:f5:e5:2b:06:91:41:78:a8:c3:36:f2:
bb:c2:f8:11:ef:ae:2f:8a:45:39:2e:b4:23:b5:16:26:22:c3:
f9:56:ae:6a:46:dc:e5:1a:47:8b:4d:01:58:65:5d:3a:00:08:
c4:f2:4f:5e:a0:10:20:1c:28:7d:25:2e:a2:d3:19:9f:48:37:
49:ea:ca:14:3b:a7:d2:cc:c0:1c:96:ae:47:d0:68:cd:66:dc:
6b:1c:5a:9b:95:72:e8:30:b0:6a:af:8a:7a:ae:e3:7c:b1:15:
55:b0:10:ed:87:7f:ca:0d:01:0e:12:bd:f0:19:7b:7c:49:72:
a1:dd:b0:2d:a4:01:ad:bb:a7:c3:cd:b3:af:3b:02:01:77:36:
5e:f7:67:40:75:82:27:bd:0c:40:0b:82:62:1e:28:e6:3a:fb:
d4:f2:b6:4b:35:3b:6b:cc:9b:07:12:2a:f1:0d:8c:53:8c:be:
ad:ff:00:bd:e9:67:9e:7d:88:96:66:e0:2d:85:ad:a1:74:26:
a4:d3:62:fa:bf:a7:ef:35:62:05:2d:9f:f2:b3:bd:2d:c6:ce:
e5:79:7d:ff:7b:78:f7:25:d7:10:d5:1d:eb:26:94:65:7e:21:
21:30:e7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:11 2026 by rpki-client