
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
File: tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft (raw, json)
Hash identifier: hOWH7yDqQHRZXH4kuYaHVsydpXKxPecdRPe9zYIUOns=
Subject key identifier: 50:63:9C:81:A7:D3:A5:17:D9:12:93:B8:6D:51:92:D7:D0:F6:99:8D
Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE
Certificate issuer: /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE
Certificate serial: 0D3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
Manifest number: 0D2A
Signing time: Tue 18 Aug 2026 18:26:48 +0000
Manifest this update: Tue 18 Aug 2026 18:26:47 +0000
Manifest next update: Tue 25 Aug 2026 18:26:47 +0000
Files and hashes: 1: tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl (hash: dHCjqMdSBZXRuCUJ2l9G+YlLg83BV0igyHoc1k2VWDA=)
2: AA5D86B2381311EA998E103FC4F9AE02.roa (hash: 1fv3/pXl5lcDYoLzTz47KptyfQ/fj025AndBgH7ATRM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl
rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3386 (0xd3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE
Validity
Not Before: Aug 18 18:26:47 2026 GMT
Not After : Aug 25 18:26:47 2026 GMT
Subject: CN=6a84a3e7-00d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8c:f1:55:9f:09:24:b3:8c:a7:44:dd:66:ad:
16:67:29:60:5a:a7:d7:aa:7c:5f:41:e9:0e:af:1e:
c8:e0:5b:5a:5a:7b:c9:80:f2:8a:9e:65:8f:c8:d2:
ac:d3:ba:66:af:71:ce:6b:a6:01:6b:d8:51:1d:08:
77:d0:04:01:c7:a3:78:05:57:85:df:d5:44:64:01:
6d:9d:d4:c5:d7:75:c7:d7:be:09:78:09:ec:54:87:
8a:18:ca:a8:7d:91:e3:4f:3d:30:1d:53:84:8f:83:
48:59:a3:3f:40:c2:83:36:05:29:c3:da:dd:f7:3f:
34:78:4b:2d:78:a2:12:ba:d8:dc:08:29:6e:f1:d3:
8e:4b:b9:37:fe:f0:70:c7:49:c3:52:7d:d0:36:5a:
75:a1:b7:80:44:05:f0:ad:48:6c:01:35:4e:de:ef:
be:2b:1f:09:5a:54:b8:de:4c:3d:94:96:b0:de:8e:
ca:5f:21:52:4f:e5:1e:50:16:1e:73:8b:f5:f9:cd:
b5:22:d2:93:1d:8d:eb:51:73:2c:23:38:14:d1:09:
79:bc:8e:d2:2b:af:c8:a6:aa:8e:3a:98:cf:aa:50:
f9:14:4f:6d:af:99:0e:77:1f:78:f4:94:09:ae:4c:
a2:f3:11:c8:85:69:2d:f0:75:bf:05:65:49:b4:d0:
1f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:63:9C:81:A7:D3:A5:17:D9:12:93:B8:6D:51:92:D7:D0:F6:99:8D
X509v3 Authority Key Identifier:
keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:0b:9e:2f:b6:2f:66:7b:88:44:54:16:00:93:d5:e3:10:33:
cd:95:e9:36:a3:ee:4c:6e:32:d0:22:3b:e7:83:63:c7:16:fc:
4e:e9:ba:97:6f:6c:b1:53:d2:ca:c3:c7:80:5c:12:5b:18:e3:
81:89:13:77:a6:d3:f8:85:c6:dc:0a:e0:9f:e4:ad:2a:89:5b:
bc:77:70:f3:91:aa:a7:d5:95:b6:fc:54:ad:79:80:61:46:78:
56:fc:45:72:df:e3:6e:df:ec:ba:ba:6c:eb:2f:b3:46:77:3f:
97:c1:22:32:57:2f:8c:45:f5:04:57:39:77:d1:b4:87:3d:c8:
da:13:d7:b2:9c:15:c8:31:a4:ab:fa:4a:88:d3:fb:bd:1a:2a:
64:89:f4:41:a9:fb:bb:a9:16:98:d5:ff:26:3a:8c:03:cb:50:
49:34:50:f1:12:aa:f2:3c:ab:61:aa:ee:4a:27:0d:33:c7:0a:
f4:01:c4:74:51:e4:cb:64:51:aa:39:0d:24:72:45:19:d0:f1:
cd:25:50:db:a5:8d:3d:8b:7f:08:9e:e6:c5:8d:a4:0d:40:fa:
b4:5e:2a:f4:66:2e:67:20:79:c4:f6:7d:c0:7e:b2:70:70:a5:
6a:c6:f0:69:f2:88:04:cc:4b:30:61:09:47:53:95:0b:49:81:
b9:54:8d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:38 2026 by rpki-client