
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
File: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft (raw, json)
Hash identifier: yIuGVrUKUsMUDtAp1JO3rR+eiQTG6YOO0En8UT8N3+s=
Subject key identifier: 0B:E6:39:FA:9F:59:E2:26:06:58:FA:BF:00:42:2B:5D:C5:74:52:23
Authority key identifier: 4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4
Certificate issuer: /CN=A91E82C4/serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4
Certificate serial: 08E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
Manifest number: 08D7
Signing time: Tue 06 Oct 2026 20:36:12 +0000
Manifest this update: Tue 06 Oct 2026 20:36:12 +0000
Manifest next update: Tue 13 Oct 2026 20:36:12 +0000
Files and hashes: 1: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl (hash: YWHgh7MffOTAdfR3MALy0R86ApSH3pZyaJ1iPNPbPDs=)
2: EE7FBFECF5DA11EAA1976953C4F9AE02.roa (hash: ExGJTiud1rXJSl9IY1FGT8jQxtLz10H7Yw1Ot/i2ids=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl
rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2281 (0x8e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E82C4, serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4
Validity
Not Before: Oct 6 20:36:12 2026 GMT
Not After : Oct 13 20:36:12 2026 GMT
Subject: CN=6ac55bbc-6571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:88:06:63:7c:d4:bf:2a:ee:03:c8:72:f3:
e0:e3:59:b2:b0:6f:cb:09:a4:a9:08:3a:ec:9a:cd:
2f:6d:f1:a8:2a:61:81:24:09:74:bd:96:af:62:0a:
6b:57:a2:88:d6:1d:e8:c2:b2:4d:89:c4:bf:63:98:
09:de:86:d1:22:8a:c6:75:d0:3b:e0:92:4a:a0:b8:
8b:68:bf:b2:18:dd:83:a7:c3:58:2b:32:9c:4e:72:
53:b6:3b:9e:cf:01:35:e0:fb:a5:2e:43:32:5c:2c:
5b:cb:93:24:90:c8:44:f2:ba:c6:33:14:35:0f:a4:
a1:f5:6e:a4:17:a7:74:fb:07:9b:81:ca:3d:7a:c5:
3f:f5:25:dc:75:1d:56:3c:44:83:7b:a7:b8:33:91:
c6:01:90:63:b9:81:f6:70:4d:43:a7:d0:19:28:04:
33:4a:ca:9b:23:f6:df:5b:d3:e6:59:09:49:19:d6:
62:06:96:e5:14:f5:88:ee:3e:86:df:5a:a2:cc:b5:
ac:f3:1a:d7:a5:7c:4c:2c:97:80:80:ca:74:dc:71:
a4:34:26:81:0d:52:15:34:da:eb:e8:ca:20:f3:7d:
49:80:5b:1a:b2:5b:f1:b1:c5:56:19:cf:06:4f:eb:
e3:b4:c4:0b:b9:01:99:98:ef:0d:e1:1c:44:11:7f:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E6:39:FA:9F:59:E2:26:06:58:FA:BF:00:42:2B:5D:C5:74:52:23
X509v3 Authority Key Identifier:
keyid:4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:67:f6:3e:d6:33:06:2d:83:f6:36:8d:bb:13:d6:38:7b:06:
91:5f:fe:3c:67:86:32:b6:0a:16:46:29:ec:61:06:60:e4:28:
91:85:ed:e0:59:81:51:cd:af:9e:77:32:e9:97:78:b1:fb:58:
9c:f9:cd:ef:dc:23:ea:a6:43:92:27:84:4a:a8:fa:fe:01:b6:
96:11:50:ea:b9:7a:3a:50:3f:32:34:28:3f:ee:d6:e5:b8:df:
ac:90:c6:89:65:ba:d0:4f:99:2c:66:77:35:0f:f5:f1:74:e3:
d6:7e:9d:21:b9:49:fb:9c:7a:cb:d6:3c:52:3e:93:68:cb:a5:
f8:3c:c0:47:38:12:80:f2:b0:23:f7:5d:62:cc:f0:1e:fb:11:
53:d4:6f:61:28:e5:1d:32:1f:91:d5:71:f4:bd:2a:8a:dd:ec:
d0:0f:c9:c6:f1:3b:19:ea:62:50:91:7c:00:a1:a3:1c:25:64:
0b:ef:b2:93:f6:ba:57:38:ef:47:32:89:62:4a:3b:3b:fc:7a:
5c:5c:4c:94:67:f9:a3:45:64:c7:a5:0b:17:01:7b:a4:f2:55:
1c:98:66:61:48:78:b8:fe:4f:46:92:40:57:fe:c2:79:46:33:
bf:68:65:5a:32:63:5c:b9:87:8d:a1:86:50:f4:77:02:7f:ec:
37:d9:b2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:41:11 2026 by rpki-client