
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json)
Hash identifier: WV/AZWGyYQWVKxAsWfjpaKf8vfOT3lHB0Kqx1/l4IGM=
Subject key identifier: B9:FF:22:21:51:D3:87:DF:18:CC:62:38:43:46:BD:94:90:DA:32:CA
Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76
Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276
Certificate serial: 0435
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
Manifest number: 041C
Signing time: Wed 19 Aug 2026 00:41:52 +0000
Manifest this update: Wed 19 Aug 2026 00:41:51 +0000
Manifest next update: Wed 26 Aug 2026 00:41:51 +0000
Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: 4bxe9+gluAjlH+Jg2OYTGHbyD/ZVct3/on7bMwwDLTM=)
2: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: jSMX3ABEtZSpyQCFX5+dmu6REmnL6WokXfamqru1uKo=)
3: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: JsxVCM2jhz9Lx7VvZgXYGsgvn7pvcdkyEVtE+jYL+ow=)
4: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: GdMrJQOmwecU85NbmUFnrqBWRHWEAMkwnRXidf68flk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl
rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:41:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1077 (0x435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276
Validity
Not Before: Aug 19 00:41:51 2026 GMT
Not After : Aug 26 00:41:51 2026 GMT
Subject: CN=6a84fbd0-504f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2d:dc:c6:06:95:f6:53:f8:63:ce:a6:75:34:
aa:24:d8:30:7b:f5:d0:f6:b2:20:56:8a:72:93:7a:
9a:1d:dc:37:a2:c7:31:8e:bf:e4:a4:96:87:db:df:
1b:6c:bd:59:6b:d0:4a:d4:8d:f5:74:bb:17:8a:f2:
a0:b1:ad:23:24:e3:cf:1f:82:ec:b5:be:a4:18:ff:
30:1d:06:68:b7:d0:b9:df:9f:77:5c:05:6b:2e:75:
cf:95:a3:40:14:36:d1:e3:6a:ae:8b:21:eb:39:3b:
48:4a:f2:60:0a:be:b5:93:8f:94:88:4d:7d:80:f4:
8c:3a:dd:d2:cf:f1:1c:d3:5c:4e:d6:4c:6b:f8:fe:
e4:90:77:30:b4:4b:84:20:24:c3:0c:6c:0d:fc:4e:
51:48:b5:64:7b:20:33:f9:ca:e3:01:6b:40:2e:67:
98:81:be:50:65:b6:1b:f2:3a:b9:08:3f:c4:9e:c4:
12:61:a2:a7:1a:15:87:9e:ac:5b:63:6c:cb:8d:c1:
66:25:23:ee:bf:b6:49:b5:e8:de:26:95:75:c8:b3:
a1:31:9b:b8:6a:b0:10:31:d7:d2:43:d5:c4:16:b1:
e5:74:09:98:94:8c:47:e6:b7:e0:c0:d2:d7:c6:c0:
c4:02:c3:2a:f7:e7:2f:63:52:64:a0:2b:e5:38:77:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FF:22:21:51:D3:87:DF:18:CC:62:38:43:46:BD:94:90:DA:32:CA
X509v3 Authority Key Identifier:
keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:1a:d0:d3:63:54:1d:e5:2a:77:75:4c:f4:09:2c:c2:a4:a9:
a3:b2:0b:a1:ba:e3:18:00:47:50:28:ce:b8:80:e4:2c:ad:30:
73:23:b8:4c:19:ff:56:66:35:92:73:aa:9a:4c:2c:d5:6f:d1:
9c:b7:a7:6a:64:9c:0e:98:c4:2a:ab:08:78:79:7a:10:96:1b:
20:39:49:70:a8:9b:db:c0:5f:60:ed:ca:7c:b4:02:67:a2:65:
e4:e1:96:0b:24:73:4e:9b:cc:b5:ef:2c:f0:23:31:ef:b5:52:
5e:47:1e:5a:48:8f:a7:d5:61:bf:cf:8b:cd:f6:65:d0:e6:43:
a4:85:dc:bf:51:d7:54:69:d5:cf:a6:24:be:80:73:94:87:cb:
bf:f3:4f:e5:e7:23:4b:b1:be:88:6e:57:47:ef:98:96:a3:bb:
f6:c5:22:d7:cb:c9:89:22:44:7e:e5:02:1e:85:f5:12:c1:fd:
66:a0:ad:15:64:32:4d:72:36:0e:18:57:71:6e:71:09:78:69:
41:e1:5b:f5:81:d0:57:2b:cf:01:87:76:b9:c4:23:65:29:82:
8e:de:4d:19:7f:16:b3:ba:61:90:e3:56:46:cc:e1:f7:58:d0:
f2:6e:69:89:ce:e1:49:4a:30:88:bf:55:5f:f1:5c:45:6f:3b:
cb:c3:03:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:02:08 2026 by rpki-client