
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
File: TMGqg6KKEDdySbbqS4nZ7doGqXE.mft (raw, json)
Hash identifier: eEfyCz8Dhu+AxmrrJVZL4sILperOjJ9YSkNV+5x8+Oc=
Subject key identifier: 38:07:FD:A1:47:1C:47:81:88:6F:D5:5A:F2:C0:79:10:01:72:A1:E0
Authority key identifier: 4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71
Certificate issuer: /CN=A91EA7E3/serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
Manifest number: 3A
Signing time: Tue 07 Jul 2026 09:49:49 +0000
Manifest this update: Tue 07 Jul 2026 09:49:48 +0000
Manifest next update: Tue 14 Jul 2026 09:49:48 +0000
Files and hashes: 1: TMGqg6KKEDdySbbqS4nZ7doGqXE.crl (hash: YBhITvE84vFGqAYgZYarWZEj6k/MEhIIm5bxdOdlzcc=)
2: 5BB88D38245A11F18A931CD8C3833773.roa (hash: dO+a4nQRE+isJxtzRbplPM324KVyASEgu6GREHrp+RM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.crl
rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA7E3, serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971
Validity
Not Before: Jul 7 09:49:48 2026 GMT
Not After : Jul 14 09:49:48 2026 GMT
Subject: CN=6a4ccbbd-b873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:bc:9e:14:80:c1:3f:77:7a:61:56:c5:d3:
a1:de:4f:ec:f2:93:69:57:60:89:95:6b:ca:aa:d3:
c7:cf:e7:0d:58:39:16:f1:ef:18:82:59:8b:1a:a5:
93:c5:af:e2:15:ab:21:cf:c8:18:4b:69:f1:81:54:
4d:2f:15:ba:aa:52:f3:27:56:6b:63:56:92:0a:53:
58:da:c1:1d:f0:f3:7a:54:84:67:55:cb:4b:6b:fe:
0a:6f:8f:61:66:33:aa:a6:1c:0c:c5:31:98:0b:82:
b8:46:a8:ff:c8:41:dc:85:ae:40:65:05:c8:0e:ae:
07:c5:46:65:83:2d:db:ea:e0:c6:88:42:e2:af:ad:
5e:f6:9b:c3:bc:fc:65:91:54:6e:f4:dc:82:51:4e:
07:42:2e:5c:f8:f9:44:8f:6e:f7:56:11:bc:50:a5:
26:3c:e9:e2:62:44:18:47:52:67:a5:4a:3b:bd:dc:
c7:6c:99:9d:74:96:e2:6a:5c:ab:79:c2:38:20:02:
f2:32:7c:cf:12:b3:bc:a4:47:a0:32:57:cc:ea:3e:
d7:db:9c:74:83:d5:ce:4a:4f:b7:6b:d2:32:fa:f9:
45:6e:eb:07:8e:bd:f1:7c:d0:7d:3a:e2:ba:bd:5f:
f9:83:b7:59:f2:28:10:8c:47:96:e1:80:22:99:6d:
b8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:07:FD:A1:47:1C:47:81:88:6F:D5:5A:F2:C0:79:10:01:72:A1:E0
X509v3 Authority Key Identifier:
keyid:4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:b8:02:e0:bf:fc:2c:36:3a:7f:26:fd:ef:b2:78:e3:cc:16:
dd:77:d0:31:c3:a1:87:26:21:61:f7:ed:bc:b9:8c:45:54:62:
50:95:d9:48:18:52:93:7a:17:2e:74:fd:31:6b:4d:9a:c5:6c:
25:13:00:f2:be:90:c4:3e:d7:f0:6e:ab:a0:d0:e6:58:50:84:
5d:e8:7c:35:f9:6b:16:ea:14:7b:59:6d:d1:f1:51:e0:54:ba:
4c:d4:4a:8e:42:88:b8:84:4d:cd:2d:df:11:62:54:2e:15:cd:
32:1d:16:29:16:ce:ba:1e:a2:8d:e2:9f:79:dc:f8:d3:0b:dd:
c4:73:b6:47:7a:f8:d1:4b:65:de:ee:49:5d:90:c7:f5:49:7c:
40:05:5e:ca:87:07:be:10:d8:98:42:ce:a2:10:cc:04:ee:31:
14:5a:a2:95:72:e0:48:9b:32:94:8b:5d:a0:53:69:b8:1d:3b:
86:bf:38:48:be:3e:fd:8e:a7:52:54:db:91:28:ca:a2:36:31:
f4:32:07:fd:cd:a9:2f:b8:47:f5:57:17:8a:4c:7c:ca:7e:f3:
36:67:b2:dc:d8:c9:c1:47:f7:9f:f9:6b:5e:3c:fb:ff:84:ef:
65:24:2a:38:4f:d8:86:06:e9:1b:40:51:42:97:68:c4:cc:de:
ef:1c:17:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:04:36 2026 by rpki-client