
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
File: TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json)
Hash identifier: lId3G9qfo/le1fKu/TX0G9tPa7ZwQdbyQJikNqBdKU0=
Subject key identifier: 3A:02:37:B9:62:DB:D0:4B:A3:39:60:D5:C9:38:4D:EE:63:13:BB:28
Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Certificate serial: 0647
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
Manifest number: 063E
Signing time: Mon 20 Jul 2026 23:27:33 +0000
Manifest this update: Mon 20 Jul 2026 23:27:32 +0000
Manifest next update: Mon 27 Jul 2026 23:27:32 +0000
Files and hashes: 1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: Clk2VHFXpI8f9AR0NpNuEMHdKhEDAdWvTjgpdL7Da5Q=)
2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: bWBcHaEKUgQ7gyCf6hn1djUztS6Lgf7ZTFoCzaWijUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl
rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 23:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1607 (0x647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Validity
Not Before: Jul 20 23:27:32 2026 GMT
Not After : Jul 27 23:27:32 2026 GMT
Subject: CN=6a5eaee5-6742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:6c:a6:f7:b6:5e:2a:0f:7e:04:fa:4e:b5:
3c:b3:f0:06:43:87:25:a5:63:ba:b7:07:b5:37:7e:
75:df:7a:57:1e:10:a1:27:db:84:53:f6:7b:b9:3e:
c8:3b:67:96:3b:c1:8d:e5:ce:5a:8f:8a:a2:65:54:
96:c8:71:7c:c2:6d:97:1b:1f:a9:22:3e:47:fd:de:
3f:5e:b5:1b:7d:5b:6f:f6:a1:51:59:ad:dd:82:d9:
b9:cc:0d:89:aa:e6:c4:f8:ea:cb:a6:c1:68:36:8e:
83:51:3c:21:77:30:8e:8c:e3:6e:b4:af:96:b2:45:
51:5e:23:27:4f:29:d0:a0:3a:6b:55:7e:25:00:80:
1a:2a:40:85:a8:19:c3:87:14:9c:e6:a5:a2:89:f0:
3c:f7:23:24:ac:56:00:18:61:9c:39:e5:e4:2d:1b:
19:f3:a6:fa:46:df:48:28:4f:21:ef:52:cf:58:6b:
3c:3e:f3:e4:1b:f8:94:d7:45:74:ee:fb:57:60:8f:
fa:51:9b:dd:8a:ed:b2:00:39:41:b6:ae:8b:d8:a9:
bf:b1:14:68:2d:e2:54:b7:21:8f:ce:93:22:c4:52:
d5:77:06:e3:75:ed:60:16:2c:90:b8:42:41:12:4e:
43:87:b4:4f:e8:40:10:c4:e7:d3:c6:2c:35:e6:31:
64:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:02:37:B9:62:DB:D0:4B:A3:39:60:D5:C9:38:4D:EE:63:13:BB:28
X509v3 Authority Key Identifier:
keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:ed:da:3f:47:97:d8:1e:bf:87:71:09:c7:19:9e:df:05:b7:
b4:cb:e1:39:14:44:a7:21:ba:1d:e7:4e:81:94:c1:82:6e:5a:
e4:26:39:d0:0e:fb:94:21:a3:2a:9e:ce:e7:5c:1c:ac:a9:1f:
f2:49:9f:fd:45:42:36:01:0e:0f:82:9a:49:16:9d:8f:33:62:
c6:9f:f9:c2:f1:5e:69:85:c0:c1:64:a5:b8:e7:2c:98:18:45:
da:7c:c0:1b:75:7e:a4:6a:1f:77:68:2b:e6:69:2b:67:9b:9a:
30:0b:b1:42:8d:11:1e:b4:ae:4b:06:3f:f6:1c:05:f3:7d:d6:
54:ef:fe:14:56:3c:50:f1:1b:c1:4d:39:87:65:92:0c:cc:f3:
b7:e3:87:f6:11:28:2f:d1:b1:b2:04:f4:ea:6e:4f:57:b5:99:
4c:2b:ba:89:ba:dc:ae:05:d6:ab:3f:e4:44:6e:59:45:ad:09:
17:3e:7e:39:a3:c3:06:14:64:18:8d:6b:30:c8:f6:df:12:f0:
5a:b0:dd:d5:2e:88:21:1c:2e:33:04:0e:ce:7a:f1:b4:a5:57:
0a:5b:b8:32:18:de:4f:f5:3a:02:c8:77:0c:f3:29:79:55:6a:
d9:e4:a5:55:48:25:98:6f:33:bc:ef:61:c2:50:05:4e:eb:f8:
be:6b:cd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:47:28 2026 by rpki-client