
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
File: TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json)
Hash identifier: MTrJBp5PQK0b+QUSdtRec44kWV/nCsicAs/s174NuO4=
Subject key identifier: AD:81:97:67:56:0A:95:84:CF:EA:6A:F5:3F:07:7E:12:5B:7D:DF:0A
Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Certificate serial: 0616
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
Manifest number: 060E
Signing time: Mon 20 Apr 2026 22:46:57 +0000
Manifest this update: Mon 20 Apr 2026 22:46:57 +0000
Manifest next update: Mon 27 Apr 2026 22:46:57 +0000
Files and hashes: 1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: EKlv9+z6GuPdEv2L9PsAMxBJyDuVM9X2s/spON9IwRU=)
2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: waHlPrSIXU1DTG8JgX28cOXJ6bVasMgkvdeHgZb1AOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl
rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 22:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1558 (0x616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Validity
Not Before: Apr 20 22:46:57 2026 GMT
Not After : Apr 27 22:46:57 2026 GMT
Subject: CN=69e6ace1-68ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:09:1d:7e:ec:b0:59:e0:15:c4:df:39:58:ee:
68:8b:b0:b3:49:17:1d:e8:01:56:a9:c3:70:d1:72:
e1:be:86:86:42:68:33:36:14:c3:30:be:74:de:8f:
8d:c5:4f:41:04:e7:15:a2:08:55:14:40:be:c8:6b:
d5:43:ac:5e:7a:d4:df:94:1a:cd:c6:2d:a9:80:67:
28:4c:74:dc:f1:44:f2:0b:fe:0e:64:d2:87:93:10:
75:57:2a:79:ac:41:c5:d5:db:a9:21:53:a1:b0:ac:
7a:d1:97:f1:11:0a:8b:95:24:fa:69:1e:c7:e3:90:
83:0c:93:50:9a:1d:c5:ba:28:5b:05:df:3e:0a:c9:
b4:74:12:0c:b4:e7:78:d8:8d:36:9c:f1:f3:94:4e:
6a:17:22:d4:74:21:f1:ac:60:44:4d:3a:ab:fc:55:
51:d1:9a:a8:e2:5d:c7:f2:6c:1f:c2:34:25:80:9d:
1d:74:70:92:b2:78:f1:53:d3:48:71:46:d7:ed:5e:
61:d7:19:dd:ac:4f:d4:4c:e8:9d:8b:b8:d2:53:5c:
45:ff:21:ac:09:2b:6e:0c:c4:ca:7d:e1:e3:a8:ff:
69:d6:61:df:c0:26:2d:fc:c7:c8:d6:76:84:50:df:
a4:ee:78:b6:33:7b:2e:b2:2b:87:8d:99:37:75:b8:
97:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:81:97:67:56:0A:95:84:CF:EA:6A:F5:3F:07:7E:12:5B:7D:DF:0A
X509v3 Authority Key Identifier:
keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:9c:e6:4d:6e:2b:c2:3c:bd:21:30:51:14:03:a0:ee:6b:d1:
20:3d:ea:f0:8d:b6:d6:82:9d:65:ec:8a:f4:29:50:9c:b0:58:
2d:8c:64:ec:ab:7b:d9:78:22:e4:02:1f:20:b4:97:59:39:26:
e7:5b:e4:8f:22:6a:38:79:73:e4:03:1c:f9:b4:da:9f:a9:e8:
f9:5c:46:8e:03:71:33:f7:6b:fd:1f:e0:43:c2:fa:51:f7:da:
23:48:ea:63:8d:e6:15:1e:b0:30:fc:19:1e:18:f2:c0:f5:2e:
ab:e5:25:e7:cc:79:e2:fb:f0:e1:bd:61:8a:32:f8:47:86:13:
51:b6:d5:6d:22:48:08:86:f4:c6:94:1e:1a:24:60:dd:a5:3a:
ca:0e:d9:4b:ec:8c:0c:82:d0:ae:38:fa:f9:fd:4a:e9:76:1e:
10:7d:4c:12:69:99:92:50:f1:5a:c1:0d:d8:86:da:f7:70:f3:
49:cc:fd:1c:50:d4:c3:cb:4b:96:5c:e5:32:34:08:10:c0:73:
52:8f:85:dc:d1:89:32:57:59:e4:d6:c0:27:de:6e:b4:fd:92:
fb:fd:a7:66:db:25:85:a7:53:f5:31:62:e3:6a:e1:8a:af:a7:
d5:8d:81:2e:ad:cc:10:cd:7c:51:88:07:9d:77:29:9f:f0:a0:
72:86:3c:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQwNDIxMTAvBgNVBAUTKDRGMzMyREMwOEM5NzQ3QUM5QkM4MUM1NDdEMUJBMzQ1
NjQzRjc2QjcwHhcNMjYwNDIwMjI0NjU3WhcNMjYwNDI3MjI0NjU3WjAYMRYwFAYD
VQQDEw02OWU2YWNlMS02OGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzgkdfuywWeAVxN85WO5oi7CzSRcd6AFWqcNw0XLhvoaGQmgzNhTDML503o+N
xU9BBOcVoghVFEC+yGvVQ6xeetTflBrNxi2pgGcoTHTc8UTyC/4OZNKHkxB1Vyp5
rEHF1dupIVOhsKx60ZfxEQqLlST6aR7H45CDDJNQmh3FuihbBd8+Csm0dBIMtOd4
2I02nPHzlE5qFyLUdCHxrGBETTqr/FVR0Zqo4l3H8mwfwjQlgJ0ddHCSsnjxU9NI
cUbX7V5h1xndrE/UTOidi7jSU1xF/yGsCStuDMTKfeHjqP9p1mHfwCYt/MfI1naE
UN+k7ni2M3susiuHjZk3dbiXcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK2Bl2dW
CpWEz+pq9T8HfhJbfd8KMB8GA1UdIwQYMBaAFE8zLcCMl0esm8gcVH0bo0VkP3a3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDA0Mi9FRkM5OERFNkU1
MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2eWJ5QnhVZlJ1alJXUV9k
cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R6TXR3SXlYUjZ5YnlCeFVmUnVqUldRX2RyYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NDA0Mi9FRkM5OERFNkU1MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2
eWJ5QnhVZlJ1alJXUV9kcmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZZzmTW4rwjy9ITBRFAOg7mvRID3q8I221oKdZeyK9ClQnLBYLYxk7Kt72Xgi
5AIfILSXWTkm51vkjyJqOHlz5AMc+bTan6no+VxGjgNxM/dr/R/gQ8L6UffaI0jq
Y43mFR6wMPwZHhjywPUuq+Ul58x54vvw4b1hijL4R4YTUbbVbSJICIb0xpQeGiRg
3aU6yg7ZS+yMDILQrjj6+f1K6XYeEH1MEmmZklDxWsEN2Iba93DzScz9HFDUw8tL
llzlMjQIEMBzUo+F3NGJMldZ5NbAJ95utP2S+/2nZtslhadT9TFi42rhiq+n1Y2B
Lq3MEM18UYgHnXcpn/CgcoY8CA==
-----END CERTIFICATE-----
Generated at Wed Apr 22 10:27:49 2026 by rpki-client