
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
File: TMGqg6KKEDdySbbqS4nZ7doGqXE.mft (raw, json)
Hash identifier: hRY7/sCaa74CmbGyvFYjhMc6H9WuPWkx5Spfolc/JCg=
Subject key identifier: 84:5B:47:98:3A:EA:0C:3C:18:40:F7:5A:42:8F:72:AF:AB:A2:CF:20
Authority key identifier: 4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71
Certificate issuer: /CN=A91EA7E3/serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971
Certificate serial: 24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
Manifest number: 22
Signing time: Tue 19 May 2026 08:43:58 +0000
Manifest this update: Tue 19 May 2026 08:43:57 +0000
Manifest next update: Tue 26 May 2026 08:43:57 +0000
Files and hashes: 1: TMGqg6KKEDdySbbqS4nZ7doGqXE.crl (hash: GxiWDNtq460HuhQPqr6Rx3NKVHvDvJQXTcFRNTM9nco=)
2: 5BB88D38245A11F18A931CD8C3833773.roa (hash: dO+a4nQRE+isJxtzRbplPM324KVyASEgu6GREHrp+RM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.crl
rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA7E3, serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971
Validity
Not Before: May 19 08:43:57 2026 GMT
Not After : May 26 08:43:57 2026 GMT
Subject: CN=6a0c22cd-6440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6e:df:f7:5c:a0:66:f3:5d:87:68:94:2f:02:
f8:fa:a4:61:93:2b:e3:d4:a8:73:30:e3:0d:3d:5a:
d0:d5:17:64:f3:b6:71:7a:06:30:12:88:11:77:39:
23:c6:34:34:d2:be:10:42:43:28:49:41:34:20:73:
47:60:29:3a:6a:9c:ce:27:b8:48:b2:b9:97:c1:ad:
bd:76:0c:4e:ad:a7:5d:b5:31:cd:af:0b:3d:67:ec:
cd:55:0b:03:62:a2:83:61:8b:02:6c:2b:60:b7:b0:
2d:b9:a6:7c:39:8a:38:99:ec:7f:ae:dd:d5:41:96:
0a:7e:90:6b:26:39:c4:51:6b:28:1b:58:85:2d:d2:
41:5f:f4:75:a5:af:49:4e:58:ff:86:39:52:ca:4c:
92:ed:92:63:8d:2f:ea:f2:8a:4b:3d:a6:2f:a7:8e:
74:a4:f1:d3:29:ad:f0:2a:b5:af:ed:1e:de:3f:51:
2b:5e:03:43:cf:4c:be:94:12:43:a6:a8:f2:56:66:
18:34:58:88:ce:90:80:c2:4d:3a:c6:41:7b:5f:ab:
fe:e3:3b:9e:d1:67:e2:9f:df:d4:67:2f:56:53:77:
3e:33:c7:27:ec:75:a3:2e:a2:91:53:e2:18:1f:3a:
0c:37:76:ae:e0:60:7c:5d:e2:a3:62:3e:bb:3c:e3:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5B:47:98:3A:EA:0C:3C:18:40:F7:5A:42:8F:72:AF:AB:A2:CF:20
X509v3 Authority Key Identifier:
keyid:4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:70:90:ff:16:a6:1f:76:90:3c:75:04:d0:c8:d2:1c:35:6f:
15:72:03:e2:73:73:62:84:df:b1:9c:bd:dd:b9:63:82:ea:41:
f7:d7:62:8c:48:9c:4b:d0:ca:c0:e8:89:df:ee:b4:92:f8:a3:
58:b1:d7:4b:3d:27:22:ee:6f:52:c1:c8:6f:20:cb:13:45:a0:
fc:68:63:9b:b6:4f:35:d4:8d:f6:fd:2b:5d:38:6a:ed:db:5f:
ff:94:d0:95:69:a7:5b:d2:cc:ec:fd:a4:c7:a5:73:23:f8:b8:
26:2e:3f:5a:7e:a4:ce:ce:69:2f:aa:68:25:49:5c:24:da:dd:
e5:76:76:bc:1c:e4:fd:88:98:85:b3:8a:79:4b:b4:fc:d0:b5:
5b:57:d3:bf:5e:e6:e2:25:a5:a8:44:08:fb:50:97:d8:fb:36:
7b:fc:7c:a4:f1:c6:fd:43:b8:ed:8b:e8:0c:45:0d:ff:2e:51:
23:71:02:ea:de:53:7e:99:7c:62:fa:68:4f:9b:d3:46:e3:db:
28:3d:22:91:8d:cc:db:dc:b5:ae:fc:32:ff:e1:f1:58:6b:d6:
eb:1a:52:bc:3f:c7:28:23:81:42:c2:83:74:b4:cf:52:64:de:
89:ab:17:16:80:5a:59:aa:c1:01:58:52:76:b5:5f:6e:2d:11:
05:6e:de:f8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
QTdFMzExMC8GA1UEBRMoNENDMUFBODNBMjhBMTAzNzcyNDlCNkVBNEI4OUQ5RURE
QTA2QTk3MTAeFw0yNjA1MTkwODQzNTdaFw0yNjA1MjYwODQzNTdaMBgxFjAUBgNV
BAMTDTZhMGMyMmNkLTY0NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNbt/3XKBm812HaJQvAvj6pGGTK+PUqHMw4w09WtDVF2TztnF6BjASiBF3OSPG
NDTSvhBCQyhJQTQgc0dgKTpqnM4nuEiyuZfBrb12DE6tp121Mc2vCz1n7M1VCwNi
ooNhiwJsK2C3sC25pnw5ijiZ7H+u3dVBlgp+kGsmOcRRaygbWIUt0kFf9HWlr0lO
WP+GOVLKTJLtkmONL+ryiks9pi+njnSk8dMprfAqta/tHt4/USteA0PPTL6UEkOm
qPJWZhg0WIjOkIDCTTrGQXtfq/7jO57RZ+Kf39RnL1ZTdz4zxyfsdaMuopFT4hgf
Ogw3dq7gYHxd4qNiPrs84wNdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhFtHmDrq
DDwYQPdaQo9yr6uizyAwHwYDVR0jBBgwFoAUTMGqg6KKEDdySbbqS4nZ7doGqXEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBN0UzL0VBREMwMTlBMjQ1
ODExRjE5M0UwRTE4QkMzODMzNzczL1RNR3FnNktLRURkeVNiYnFTNG5aN2RvR3FY
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVE1HcWc2S0tFRGR5U2JicVM0blo3ZG9HcVhFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB
N0UzL0VBREMwMTlBMjQ1ODExRjE5M0UwRTE4QkMzODMzNzczL1RNR3FnNktLRURk
eVNiYnFTNG5aN2RvR3FYRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCecJD/FqYfdpA8dQTQyNIcNW8VcgPic3NihN+xnL3duWOC6kH312KMSJxL0MrA
6Inf7rSS+KNYsddLPSci7m9SwchvIMsTRaD8aGObtk811I32/StdOGrt21//lNCV
aadb0szs/aTHpXMj+LgmLj9afqTOzmkvqmglSVwk2t3ldna8HOT9iJiFs4p5S7T8
0LVbV9O/XubiJaWoRAj7UJfY+zZ7/Hyk8cb9Q7jti+gMRQ3/LlEjcQLq3lN+mXxi
+mhPm9NG49soPSKRjczb3LWu/DL/4fFYa9brGlK8P8coI4FCwoN0tM9SZN6JqxcW
gFpZqsEBWFJ2tV9uLREFbt74
-----END CERTIFICATE-----
Generated at Thu May 21 10:29:04 2026 by rpki-client