
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
File: TihN8oxlIKdxEwQV85PINH1ubek.mft (raw, json)
Hash identifier: Bu6aXcEbde5sXaOJr8pnwpbRDKbsJEvCfdD6/T+ogaw=
Subject key identifier: 72:DD:00:5D:25:40:E4:A4:B2:98:0B:AA:46:82:8A:B7:8E:E1:B8:44
Authority key identifier: 4E:28:4D:F2:8C:65:20:A7:71:13:04:15:F3:93:C8:34:7D:6E:6D:E9
Certificate issuer: /CN=A91FC765/serialNumber=4E284DF28C6520A771130415F393C8347D6E6DE9
Certificate serial: 1F43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
Manifest number: 1F37
Signing time: Sun 04 Oct 2026 16:01:17 +0000
Manifest this update: Sun 04 Oct 2026 16:01:16 +0000
Manifest next update: Sun 11 Oct 2026 16:01:16 +0000
Files and hashes: 1: TihN8oxlIKdxEwQV85PINH1ubek.crl (hash: Pndfg4Lw1DvUIN16QKG9td2L2qkeY0yVE2spCrbJgHg=)
2: 9071A5E690CB11E6A804EF84C4F9AE02.roa (hash: BCoqh3XwiuOYuTN55f/bRuAb674C9ONaqrljAIYqfbg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.crl
rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8003 (0x1f43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC765, serialNumber=4E284DF28C6520A771130415F393C8347D6E6DE9
Validity
Not Before: Oct 4 16:01:16 2026 GMT
Not After : Oct 11 16:01:16 2026 GMT
Subject: CN=6ac2784d-1eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:76:83:80:b9:d3:6a:51:90:da:fc:8e:d8:
79:88:54:b6:ed:e3:27:a8:fa:a1:a7:0b:33:f9:06:
de:a7:42:33:7d:43:9d:8c:0e:dc:35:7b:8e:c2:7a:
b6:76:07:fb:f0:87:1e:81:cd:30:1f:02:58:7e:2f:
a1:77:59:c9:f8:6d:73:3f:0f:c2:ef:56:32:c9:15:
52:a4:35:3a:f6:5b:5b:12:1a:3a:08:68:b6:e8:a9:
c4:07:d3:36:24:f4:0e:38:6d:b5:e1:30:d9:d6:54:
41:a8:9c:5e:e9:d8:24:c9:37:00:99:c3:b0:4d:0c:
ec:a7:7b:1a:c2:ef:c7:8f:01:e7:80:76:ec:70:3f:
52:14:b3:45:46:7a:d4:d4:d2:05:e0:f8:d2:0c:f0:
a3:55:f6:10:ec:70:93:b6:be:dd:83:22:38:d8:9c:
5c:5a:d5:fe:43:36:27:a2:7d:0c:0c:12:99:57:90:
62:c4:2f:92:44:47:70:fa:c6:ee:a1:7e:eb:0c:f1:
d1:d9:b1:e9:84:72:0a:51:e3:fd:f2:cd:68:c2:73:
ca:48:bb:eb:1c:c7:d5:77:b9:f2:96:8f:b2:13:c2:
35:57:c8:64:eb:f3:c0:fe:a0:da:b3:42:42:72:03:
f3:2a:a5:14:1f:78:72:db:b8:f9:92:42:08:96:54:
41:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DD:00:5D:25:40:E4:A4:B2:98:0B:AA:46:82:8A:B7:8E:E1:B8:44
X509v3 Authority Key Identifier:
keyid:4E:28:4D:F2:8C:65:20:A7:71:13:04:15:F3:93:C8:34:7D:6E:6D:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fb:a3:2b:66:ee:31:b8:57:ff:5a:fb:5d:1b:6c:ce:8e:ae:
05:b0:33:a2:34:b5:23:f3:6a:89:d2:df:1b:6d:25:99:72:84:
0e:3e:3c:e0:a7:71:e5:da:fd:c2:df:23:49:d5:29:10:87:29:
4a:5d:65:17:da:f7:3d:78:2a:97:b2:85:1a:3c:97:41:09:bd:
c6:2d:dc:0f:d0:21:a4:2c:25:56:3c:15:7e:8e:82:41:06:71:
6a:69:e7:7b:e4:be:20:39:a6:d0:0a:d3:ec:c1:5b:43:e8:88:
79:43:f7:d1:2f:17:fa:5c:86:2e:74:fe:f1:b1:7e:82:1d:de:
bb:f8:82:e5:2b:19:b2:18:25:ca:e9:0a:d9:22:5e:cc:5e:4f:
ff:d7:7b:0b:17:a1:50:e1:2b:ed:e9:6d:c7:a5:57:d0:2d:a6:
7a:69:d3:68:f6:80:18:cb:a5:cb:fa:19:0b:ee:1e:34:23:ae:
ed:eb:f6:b7:95:2f:96:47:b9:92:9a:9d:80:d0:ac:eb:10:6a:
90:18:7d:dd:6d:e6:c0:68:f9:40:f9:a2:a0:e3:fc:85:74:8f:
f5:22:40:42:00:db:40:13:df:06:17:db:89:a4:f0:57:58:95:
a9:6c:15:94:89:c0:d8:6b:46:93:73:2b:6c:64:9e:a0:1d:df:
43:40:e5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:42:46 2026 by rpki-client