
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
File: TGLx4QuIP11XhNY1dA_SMDTOv-I.mft (raw, json)
Hash identifier: AFhLHYBLMLjwiVFaRyOdavTcPx/yAzfoB+zu2OM4/y0=
Subject key identifier: 6D:4D:8D:B0:0A:95:FC:66:69:D3:3D:D1:B6:7B:5F:EE:22:14:48:E5
Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2
Certificate issuer: /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
Manifest number: 01A1
Signing time: Sun 25 Oct 2026 04:43:44 +0000
Manifest this update: Sun 25 Oct 2026 04:43:44 +0000
Manifest next update: Sun 01 Nov 2026 04:43:44 +0000
Files and hashes: 1: TGLx4QuIP11XhNY1dA_SMDTOv-I.crl (hash: WuGg7ceeOqB53CqqG4h9PrP+7reWhWvSzmGtpyoOVRI=)
2: DD015FDE639D11EFB9BDBE62C4F9AE02.roa (hash: iQY38hYAmhqJkb6ZCEBZAdClrGW6LNCJUEQ4iP8bQ6k=)
3: A98932365ED311EF9DE3E178C4F9AE02.roa (hash: jPNeK/T4iEnyu07qfGOB5hnamUYxNaGDvce1vSeeQew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl
rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 04:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F372C, serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2
Validity
Not Before: Oct 25 04:43:44 2026 GMT
Not After : Nov 1 04:43:44 2026 GMT
Subject: CN=6add8900-f8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:01:44:0a:e6:88:12:e9:eb:92:59:53:55:
f9:25:db:1c:f6:b1:db:46:96:55:d8:92:7d:42:c1:
03:60:f7:ff:18:70:31:b3:0d:32:4e:2c:5b:05:42:
12:1e:85:5e:ed:da:27:c9:da:30:0a:b1:32:59:39:
3e:19:b1:0a:fa:f8:4b:f6:ed:32:4b:c0:28:3f:d9:
b2:01:11:bb:53:39:5b:93:44:b9:cf:aa:a7:8d:94:
75:8f:d4:86:db:e7:c9:ac:12:b7:57:08:59:e6:1e:
11:29:fe:e9:c1:0b:90:3e:66:d4:c5:1f:e6:06:7c:
3a:ba:71:06:47:29:05:4e:ef:29:72:99:d8:37:34:
a8:a3:ba:6e:c2:1a:b1:4b:22:15:66:2c:8d:d1:e5:
0d:e7:45:35:0a:ec:f0:30:0e:c4:f3:55:e0:5f:49:
82:23:4f:b5:0a:b7:42:02:66:27:ca:27:75:45:74:
d2:69:8c:38:38:7c:9e:d6:0d:d0:3d:35:e1:95:18:
a9:81:21:98:c6:be:ae:df:2b:90:85:5d:f0:2e:1c:
95:62:18:bc:f2:9d:a1:03:db:5f:98:e1:7e:d2:ec:
97:93:8e:bc:ea:9b:60:3b:f8:5f:02:f4:0f:47:02:
13:de:80:dd:d6:f4:15:e4:39:d2:95:92:10:e6:2e:
e2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4D:8D:B0:0A:95:FC:66:69:D3:3D:D1:B6:7B:5F:EE:22:14:48:E5
X509v3 Authority Key Identifier:
keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8f:93:1a:10:c0:bc:df:d9:87:a5:16:a1:13:57:86:98:bf:
25:e4:69:0f:eb:a8:2d:08:8e:39:f9:69:9e:37:55:5d:54:bc:
3d:85:99:d9:7f:c9:58:88:6e:0f:9c:a5:87:88:d1:ba:f8:b2:
8a:d6:a2:d2:09:c6:d1:4d:b2:e9:6d:1d:bf:c0:ab:62:b2:77:
40:bf:df:0e:d8:b8:fd:2c:70:51:d1:58:61:f9:4f:60:fb:52:
11:47:14:33:e9:da:5f:10:56:78:71:db:bd:b9:6b:51:91:e8:
f3:85:92:0d:90:69:09:54:d9:27:b5:be:44:d6:b3:0f:4c:f4:
ff:74:3a:a6:44:f2:ce:d5:b8:50:f1:cf:e1:0d:d8:79:61:ea:
05:a4:8f:33:e8:f7:4b:2b:4f:fb:1b:99:82:35:99:28:93:ff:
19:12:64:7b:e0:fd:bb:1d:56:7c:c9:0e:25:ad:b2:a7:c9:03:
da:13:2a:8b:af:a8:bc:f9:ca:42:5b:7d:b4:06:38:39:90:e8:
47:4f:be:f1:76:e5:0e:69:63:16:b0:23:4d:2e:9f:50:6a:92:
87:94:74:bb:63:0b:6b:a4:41:c0:fd:72:4d:d4:8a:eb:f1:cf:
04:e0:e5:d5:96:99:00:c8:25:50:d3:99:13:17:6f:20:4b:0e:
c6:0a:a5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:14:13 2026 by rpki-client