
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft
File: tCmPyy2EnY1NcSomJyvLHJbb_l4.mft (raw, json)
Hash identifier: bx5KCgdQ2uXZApzhCR6SVPN8q3WOfPxiG4BpDlO1mgo=
Subject key identifier: 27:25:FF:4E:C4:26:6C:76:F0:9A:F5:AD:05:F7:A7:C4:26:74:2D:E0
Authority key identifier: B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E
Certificate issuer: /CN=A91EC93E/serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E
Certificate serial: 0495
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft
Manifest number: 048E
Signing time: Sat 03 Oct 2026 00:18:32 +0000
Manifest this update: Sat 03 Oct 2026 00:18:31 +0000
Manifest next update: Sat 10 Oct 2026 00:18:31 +0000
Files and hashes: 1: tCmPyy2EnY1NcSomJyvLHJbb_l4.crl (hash: W+rLqdogb706HtBJVkdgFT9NWwLDX3uUup5YQIxvr3M=)
2: 113047A69F2A11ECACE41C82C4F9AE02.roa (hash: xpRfyiF/Cwbm/S2d07PVYILgag6XLAeF1LTYw+95K4o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl
rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1173 (0x495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC93E, serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E
Validity
Not Before: Oct 3 00:18:31 2026 GMT
Not After : Oct 10 00:18:31 2026 GMT
Subject: CN=6ac049d8-9e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:03:e4:1f:5f:41:b4:0a:40:e4:65:04:51:fd:
b4:24:05:ab:da:91:d0:46:24:c9:7f:f5:7c:8a:a8:
ce:27:73:b4:00:55:a9:60:01:ca:69:ed:4c:66:fc:
35:76:87:b5:eb:cb:b9:61:3c:f2:29:a7:e2:8a:72:
6a:25:ba:2d:5e:85:39:07:37:3d:be:3e:ba:b5:aa:
b7:db:a5:e3:3e:49:7f:bb:d1:89:cf:f8:dc:81:d3:
7c:df:7a:db:64:4d:97:4e:2f:46:7e:c5:90:b4:e5:
ff:aa:52:36:cb:4e:6d:22:8e:43:ba:86:8a:8d:2e:
cf:1b:56:d6:fa:8b:e1:6f:0e:c0:45:94:56:a7:3f:
3b:9d:e7:68:b0:ae:23:85:9e:1e:b9:ad:f7:f5:60:
3e:5a:de:df:cd:f7:d1:71:be:e7:ba:23:25:75:7a:
88:48:f9:d4:e1:40:4a:c2:92:de:70:0e:93:10:a7:
b4:ce:8e:1e:4c:8c:d3:44:da:04:21:da:40:c5:c2:
e3:fd:4f:36:c4:0d:86:ce:eb:8b:d7:b5:aa:a0:0d:
89:a6:47:84:e5:a4:2a:ff:6d:9f:bc:0c:27:fd:1e:
f3:4b:12:ec:c6:59:0a:bb:2e:30:55:9e:4e:2c:5f:
6d:ad:38:b5:a2:21:a0:e3:10:69:cd:f5:4a:3a:62:
01:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:25:FF:4E:C4:26:6C:76:F0:9A:F5:AD:05:F7:A7:C4:26:74:2D:E0
X509v3 Authority Key Identifier:
keyid:B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a8:3a:79:55:fb:07:87:6a:66:f6:f2:32:1b:31:07:b8:50:
3b:f2:fc:4d:25:5d:82:72:20:60:84:7e:ce:a3:e1:28:46:99:
e3:ff:2d:fa:76:8e:17:ed:26:a9:83:e3:b2:c6:66:d4:32:01:
b3:e3:51:05:b8:be:74:af:23:69:38:ae:3d:1d:bb:d9:fd:9a:
e4:d5:c9:a9:fc:80:4c:fd:00:a9:60:88:fb:60:1d:4f:b0:60:
39:fa:a3:51:63:bc:f3:35:68:1b:11:94:3f:4d:f6:b6:f5:b7:
5b:4e:fc:27:55:7c:70:5a:e1:0b:54:fe:60:90:43:51:20:a0:
52:d4:c7:36:a4:70:dc:f0:0e:82:ae:8d:de:a6:d6:27:61:eb:
73:6d:02:96:37:a8:25:2c:64:c8:01:c6:40:f7:89:04:e6:f6:
ed:c3:22:10:4d:e3:3d:70:3f:41:94:39:85:26:b9:f0:c6:58:
15:8c:f3:ea:9c:fc:5b:d9:24:df:51:63:7f:51:47:4f:35:e9:
1c:e2:a2:1d:98:40:91:c2:57:c2:9c:dd:23:e8:a8:6f:50:89:
5c:c7:8e:b5:05:71:e5:03:8d:1a:5e:44:b5:66:3a:ca:38:00:
1b:00:8a:81:33:e5:15:7b:74:00:da:53:d1:7c:6b:60:45:11:
aa:45:d4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:49:32 2026 by rpki-client