
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft
File: TsOX96VQvpBMGG-SCBd0AHHSRTU.mft (raw, json)
Hash identifier: 41IUK2UGTYDQS7wlfqY0Z7vF3o0i/wn0nzW7i2egR8s=
Subject key identifier: A5:09:C0:79:04:09:01:85:66:05:8F:93:9F:48:28:58:B4:FC:46:80
Authority key identifier: 4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35
Certificate issuer: /CN=A91E1C0B/serialNumber=4EC397F7A550BE904C186F920817740071D24535
Certificate serial: 0675
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft
Manifest number: 066C
Signing time: Tue 06 Oct 2026 22:44:40 +0000
Manifest this update: Tue 06 Oct 2026 22:44:39 +0000
Manifest next update: Tue 13 Oct 2026 22:44:39 +0000
Files and hashes: 1: TsOX96VQvpBMGG-SCBd0AHHSRTU.crl (hash: 5myql2jN2BeQ3A0xU2jN2RdVUDYPyzfjrxvNawlGtdM=)
2: 1DE1E418EDE211EB8CEA3415C4F9AE02.roa (hash: aU5xrCVr0rx2dJrESHwVd+dJg3AOWpB3NnDDFJyaC0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl
rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:44:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1653 (0x675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1C0B, serialNumber=4EC397F7A550BE904C186F920817740071D24535
Validity
Not Before: Oct 6 22:44:39 2026 GMT
Not After : Oct 13 22:44:39 2026 GMT
Subject: CN=6ac579d8-efa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:ae:4a:d7:bd:63:2e:af:e0:70:d9:3f:47:
48:cd:c4:34:5c:39:c3:ae:29:93:d7:ac:4d:c3:c5:
0f:be:38:01:e6:14:ac:e3:44:37:29:44:3f:26:da:
d7:da:70:a8:c3:10:84:cd:96:5c:5c:96:b0:a5:0f:
ee:fc:3d:93:41:ef:f4:6c:ff:cd:36:8e:1d:45:63:
81:01:2b:bd:ba:63:48:c7:9e:11:e2:a8:0f:4a:14:
e4:1c:cc:88:1a:1a:d4:da:2b:d9:b4:fa:24:56:b1:
bb:3b:09:f2:a5:e8:5e:e8:0c:ae:ff:35:67:0b:b4:
5a:c1:4c:a2:59:57:00:2f:bb:ca:d2:09:4e:21:82:
7c:aa:78:af:82:b4:74:c5:17:bf:b3:14:aa:95:ef:
67:d7:f2:46:ba:8a:b5:4f:ff:35:6f:b1:f6:da:03:
32:f9:90:dd:84:2d:2a:09:11:7b:d6:94:9e:6c:2a:
e2:9e:c3:5a:9e:7b:fb:22:10:11:a2:1c:fd:45:82:
69:86:13:5e:f2:e8:eb:65:79:b2:e9:54:bc:af:5b:
6f:81:91:89:5d:c7:4d:39:46:f2:6d:d6:47:36:89:
45:43:04:d3:ed:c0:92:04:f0:ac:e2:ee:25:8d:e8:
6b:97:23:d4:87:ea:34:e2:f1:fe:b0:37:92:01:1d:
79:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:09:C0:79:04:09:01:85:66:05:8F:93:9F:48:28:58:B4:FC:46:80
X509v3 Authority Key Identifier:
keyid:4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:ea:6a:36:98:58:7e:d3:44:41:5e:1f:c0:91:ce:ce:89:47:
3c:e4:0e:e7:d5:81:f9:2e:5b:79:c5:8a:84:a6:5d:47:41:52:
7d:54:83:00:3b:d0:36:9c:8a:f8:e4:d1:bb:99:3d:83:fa:87:
fb:9b:18:21:26:7f:5e:d0:0a:3c:eb:c4:05:8e:37:97:97:66:
d3:b7:12:fb:5b:f1:8a:0d:2c:7a:3f:e6:f4:89:85:b7:b5:98:
a0:01:2e:13:3a:a0:64:d0:cb:02:fe:24:32:f8:2b:cb:9f:53:
e9:f2:14:48:28:fe:a1:8d:ce:51:9a:05:71:49:ab:f7:18:4c:
80:12:b9:e6:be:c0:b2:7c:c6:89:a0:19:ba:b5:f4:fb:4d:62:
0f:f1:e5:dc:cd:9d:1e:2c:f8:41:59:6e:39:14:e5:fe:0c:75:
cf:c2:af:04:2b:43:64:36:ee:83:8a:05:12:7b:b3:9e:df:67:
36:9e:fc:9c:4a:6d:fa:ad:36:5f:c0:4b:5a:c9:c8:7d:e9:e7:
98:93:68:d1:60:9c:f2:78:9e:b8:8f:d4:d3:be:e9:57:12:45:
53:5f:50:56:e1:f9:02:17:69:ac:a5:99:d1:c8:08:d5:e1:56:
c4:ba:84:3a:2b:bb:bc:10:50:81:29:9b:3c:3e:9b:e5:3c:d9:
a1:2c:e8:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFDMEIxMTAvBgNVBAUTKDRFQzM5N0Y3QTU1MEJFOTA0QzE4NkY5MjA4MTc3NDAw
NzFEMjQ1MzUwHhcNMjYxMDA2MjI0NDM5WhcNMjYxMDEzMjI0NDM5WjAYMRYwFAYD
VQQDEw02YWM1NzlkOC1lZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvLWuSte9Yy6v4HDZP0dIzcQ0XDnDrimT16xNw8UPvjgB5hSs40Q3KUQ/JtrX
2nCowxCEzZZcXJawpQ/u/D2TQe/0bP/NNo4dRWOBASu9umNIx54R4qgPShTkHMyI
GhrU2ivZtPokVrG7Ownypehe6Ayu/zVnC7RawUyiWVcAL7vK0glOIYJ8qnivgrR0
xRe/sxSqle9n1/JGuoq1T/81b7H22gMy+ZDdhC0qCRF71pSebCrinsNannv7IhAR
ohz9RYJphhNe8ujrZXmy6VS8r1tvgZGJXcdNOUbybdZHNolFQwTT7cCSBPCs4u4l
jehrlyPUh+o04vH+sDeSAR15dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKUJwHkE
CQGFZgWPk59IKFi0/EaAMB8GA1UdIwQYMBaAFE7Dl/elUL6QTBhvkggXdABx0kU1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUMwQi9CNzNBMTc5Q0U1
NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZwQk1HRy1TQ0JkMEFISFNS
VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RzT1g5NlZRdnBCTUdHLVNDQmQwQUhIU1JUVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MUMwQi9CNzNBMTc5Q0U1NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZw
Qk1HRy1TQ0JkMEFISFNSVFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE+pqNphYftNEQV4fwJHOzolHPOQO59WB+S5becWKhKZdR0FSfVSDADvQNpyK
+OTRu5k9g/qH+5sYISZ/XtAKPOvEBY43l5dm07cS+1vxig0sej/m9ImFt7WYoAEu
EzqgZNDLAv4kMvgry59T6fIUSCj+oY3OUZoFcUmr9xhMgBK55r7AsnzGiaAZurX0
+01iD/Hl3M2dHiz4QVluORTl/gx1z8KvBCtDZDbug4oFEnuznt9nNp78nEpt+q02
X8BLWsnIfennmJNo0WCc8nieuI/U077pVxJFU19QVuH5AhdprKWZ0cgI1eFWxLqE
Oiu7vBBQgSmbPD6b5TzZoSzokg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 11:15:10 2026 by rpki-client