
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft
File: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft (raw, json)
Hash identifier: DdaBMphVaN+GTmEmtqgqNs8sz/cC/HMvjehOh9ddQsA=
Subject key identifier: 9E:92:9F:6C:9D:AD:35:CF:F3:6F:41:87:4B:4E:2C:D2:78:21:32:B7
Authority key identifier: 4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB
Certificate issuer: /CN=A91F1962/serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft
Manifest number: D7
Signing time: Fri 17 Jul 2026 07:51:07 +0000
Manifest this update: Fri 17 Jul 2026 07:51:07 +0000
Manifest next update: Fri 24 Jul 2026 07:51:07 +0000
Files and hashes: 1: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl (hash: Ys1n3FPWxxhvW5JUoZfda0EqKfwZnppkXsewBdHq9DQ=)
2: 6AD3BE8A38DF11F09B694578C4F9AE02.roa (hash: U6Gj26V+i3lpK2v7qmDyat8zRdsmA3qG+phGuDugByw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl
rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1962, serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB
Validity
Not Before: Jul 17 07:51:07 2026 GMT
Not After : Jul 24 07:51:07 2026 GMT
Subject: CN=6a59deeb-e739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:2a:8a:69:55:d4:14:a7:1f:8a:96:2a:50:
3c:b1:e0:6e:ce:92:c9:79:d3:40:53:2e:cb:1c:12:
52:7c:0d:75:8d:77:6d:71:d8:da:e1:24:3c:35:9c:
38:03:dc:29:d7:b3:52:f8:41:e8:f6:31:d5:4b:1d:
5c:19:bc:a5:95:ac:83:1f:01:52:0f:cc:b2:05:b4:
91:a9:c6:58:8c:b7:52:9c:ff:bf:66:28:f2:60:7b:
71:59:70:49:4c:d9:47:a7:ca:58:14:d0:e6:3c:c1:
bb:34:31:d2:ca:e0:a5:22:d3:13:ba:0f:d7:bb:9f:
b1:23:38:84:8a:79:0e:97:c7:4a:40:a0:12:44:fe:
e1:33:f4:41:a5:13:57:e3:89:ea:d7:0f:1b:62:8f:
66:f8:10:ec:44:6f:43:ef:9e:6e:43:3d:79:60:f8:
60:0f:72:ad:ca:32:78:78:43:d8:b7:b3:f1:26:08:
50:22:d4:21:1c:5a:57:69:1c:d9:2f:9e:33:f6:3a:
c5:29:80:9f:b6:7a:e1:18:b4:69:e6:23:6d:d2:57:
05:92:ae:2e:84:9d:06:ac:44:63:7a:88:03:9f:5a:
dc:6a:3e:0a:5d:85:e4:47:78:5f:82:bd:36:ad:22:
e6:33:b0:83:c6:69:52:0d:7b:a2:f5:c4:dc:7e:7b:
c0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:92:9F:6C:9D:AD:35:CF:F3:6F:41:87:4B:4E:2C:D2:78:21:32:B7
X509v3 Authority Key Identifier:
keyid:4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:5d:ed:d0:1f:ca:03:b5:e2:8c:3c:55:1f:95:d9:31:90:4b:
a5:ad:85:a8:7c:20:11:f1:7e:8b:4f:bd:10:31:35:3c:48:22:
fb:15:eb:6f:2f:c4:5a:03:49:2e:c2:bf:dd:5a:1b:79:48:88:
57:d3:33:5b:a2:9d:cf:b6:c3:74:73:91:67:76:8a:c8:fc:60:
67:16:9a:b2:84:4d:a1:3d:05:c4:05:8f:7a:21:15:e3:fa:de:
f9:9c:5f:47:29:a7:98:97:29:fe:df:0b:bf:d1:05:c9:ff:01:
09:68:0b:92:11:71:65:c3:8f:bc:ea:78:22:38:9e:52:e2:f3:
7b:12:ef:ad:b8:18:4c:fa:9e:c6:e8:b2:43:7a:f2:21:ff:dd:
f6:38:a1:de:ee:50:31:e9:75:0f:c5:aa:6f:5f:03:ef:0a:c0:
3e:85:bc:2f:b5:0f:cb:dc:ef:61:44:21:82:cd:c3:d5:06:bf:
c5:7d:a0:98:14:70:19:12:02:39:a7:60:52:e9:f0:c7:44:cb:
2f:32:05:7a:84:aa:9c:e2:6d:a5:d0:7c:d4:3f:23:17:f2:ed:
75:be:de:f7:58:d7:c0:2e:66:b9:5a:49:46:97:07:c3:89:38:
73:5b:d6:79:91:a6:f4:f5:19:a4:98:88:46:23:7c:32:aa:d3:
d3:7e:5c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:15:28 2026 by rpki-client