
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
File: tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft (raw, json)
Hash identifier: JtabzxJcfsBNOLiDAlcy8GuXazkCG5NuGNihdTnzuv8=
Subject key identifier: D2:5B:A1:11:C6:25:2F:68:2E:7F:BF:9F:10:94:E6:6F:EB:CE:A5:C6
Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE
Certificate issuer: /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE
Certificate serial: 0D51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
Manifest number: 0D41
Signing time: Fri 02 Oct 2026 18:23:17 +0000
Manifest this update: Fri 02 Oct 2026 18:23:17 +0000
Manifest next update: Fri 09 Oct 2026 18:23:17 +0000
Files and hashes: 1: tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl (hash: qRNvqdAocOjEsBTnlJ2cslyq30KHRFSq1gxnBihYn4s=)
2: AA5D86B2381311EA998E103FC4F9AE02.roa (hash: 1fv3/pXl5lcDYoLzTz47KptyfQ/fj025AndBgH7ATRM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl
rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 18:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3409 (0xd51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE
Validity
Not Before: Oct 2 18:23:17 2026 GMT
Not After : Oct 9 18:23:17 2026 GMT
Subject: CN=6abff695-948c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:21:e2:77:9f:26:bd:3b:75:b7:5a:f1:29:
53:d5:8d:e2:1b:0a:30:fa:83:86:78:8b:21:e0:0f:
00:57:11:98:8d:01:02:d5:3c:e9:7a:20:96:31:c6:
13:be:64:59:b0:ea:b1:ab:41:86:69:14:17:28:bc:
26:2a:35:df:66:e4:ba:39:83:b0:26:ad:30:e0:00:
80:b1:72:cf:63:47:7d:c4:ec:3b:49:02:00:0e:3d:
4e:40:63:2a:f7:fc:d2:ee:56:20:47:12:41:4b:d9:
c9:bd:d5:e8:01:71:85:33:d9:a8:0d:b1:e1:84:32:
c0:93:c3:b7:5f:31:ad:df:8c:bc:de:6f:c7:49:c7:
13:fe:33:0b:5f:40:d0:aa:25:25:1d:1c:ba:df:73:
bd:3b:b4:de:01:ff:d5:99:c4:c4:37:b9:31:8e:77:
ba:76:d8:d3:82:ef:72:0c:28:9a:f3:a4:ab:4d:66:
07:12:b0:f2:30:32:b3:57:f4:05:47:1e:aa:5a:12:
a8:7a:fb:1e:ec:e7:58:ca:a0:28:68:6d:59:9e:c3:
8d:48:6b:7c:2d:00:78:87:7a:ce:b4:6a:5a:51:a9:
e3:f7:43:6a:c4:7e:dc:e6:76:01:8a:ca:43:de:c7:
4c:98:df:ef:6a:4b:d2:61:5d:0b:83:6c:22:5e:51:
dc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5B:A1:11:C6:25:2F:68:2E:7F:BF:9F:10:94:E6:6F:EB:CE:A5:C6
X509v3 Authority Key Identifier:
keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:71:ff:42:de:5f:d2:7a:38:85:2b:25:94:b9:ae:18:4f:10:
e9:09:13:68:b3:1c:d3:97:f4:ab:50:1d:36:7a:2c:b7:2e:c3:
fd:03:2c:a9:21:15:5b:8a:0b:75:66:d5:d4:2c:10:09:07:0d:
11:24:06:24:b6:13:b5:1f:ce:ad:e3:dc:62:87:64:8d:82:8b:
ba:3a:1c:76:51:13:c1:7d:48:e2:a1:d1:05:b0:43:2f:03:d0:
46:e5:45:41:de:74:91:a9:d3:39:c5:76:5a:31:3c:c4:03:50:
28:3a:26:2e:2a:c9:ea:2e:1e:24:43:b7:58:ee:a8:8e:f5:c0:
58:71:03:77:c9:76:45:9b:d5:a9:8e:a0:7c:d3:74:fb:1a:56:
46:14:55:77:46:60:f1:01:87:7b:77:0b:eb:a1:06:fd:f7:40:
eb:f8:61:a2:5e:d3:b8:c3:cc:ee:bf:94:67:9c:19:39:f0:47:
56:d3:f6:81:7e:6d:a0:08:d3:74:0e:59:12:37:53:53:ac:82:
95:5e:a5:7f:5c:86:42:23:0d:11:25:86:71:e7:6a:34:be:20:
1f:10:ba:3b:db:20:f4:38:14:01:36:e2:3d:bf:d2:f9:78:43:
ba:f1:a9:e1:ae:e5:0f:2f:57:0a:5e:e4:61:10:20:90:47:5e:
c4:97:92:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:58:09 2026 by rpki-client