
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
File: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json)
Hash identifier: 7SOuhaxWXAbS3ewnDMWZLi8etG08dVGdiu5DOQdh5WI=
Subject key identifier: C6:4E:35:D5:60:6E:3E:CF:DC:60:CD:D1:05:BD:C9:F4:12:96:D0:21
Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A
Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A
Certificate serial: 0173
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
Manifest number: 016A
Signing time: Wed 07 Oct 2026 05:30:26 +0000
Manifest this update: Wed 07 Oct 2026 05:30:25 +0000
Manifest next update: Wed 14 Oct 2026 05:30:25 +0000
Files and hashes: 1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: ggsIrMGB5ZymRqMfiUojRy7YGqxr6pogYODe5KTuKiQ=)
2: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: iXPPbRwODBTS92FzdfuvK5J3jl/IZyMATy+kQwe/++Q=)
3: 12B6D40E37C511F19788E36ABE833773.roa (hash: f5bzM7j+pO8fCnEBI50cYrv56JA2HlZHuSFXp1GJx88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl
rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 05:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDEFE, serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A
Validity
Not Before: Oct 7 05:30:25 2026 GMT
Not After : Oct 14 05:30:25 2026 GMT
Subject: CN=6ac5d8f2-3a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:9e:40:03:e1:91:9f:85:b9:b3:6d:4f:b0:
23:98:0e:50:5c:a1:20:3a:eb:d2:bd:f3:cd:c6:48:
f4:a7:0f:d8:11:80:9d:d9:43:1e:15:bd:c9:b1:c4:
bd:0d:02:81:a4:c8:ed:12:00:66:b1:7d:7f:54:30:
fb:0c:00:b7:96:69:ea:df:c0:4c:ca:94:9c:c4:77:
20:24:2e:25:f9:d4:a7:76:73:2c:96:57:6b:b3:f5:
05:f4:73:58:35:60:ca:c1:2f:a7:f6:be:e7:d9:67:
64:7c:03:7d:ea:7a:f9:f6:b9:c9:61:3a:46:4c:e4:
91:49:e5:cf:28:1b:6f:a1:04:a4:d6:25:2a:4f:6c:
b3:87:91:23:7f:e7:d8:63:e2:fb:1d:8f:85:0a:9a:
78:06:bb:42:94:b5:ca:46:e7:f9:6d:f7:8f:9d:4e:
e2:a6:3c:f8:2c:6d:54:12:7b:63:05:cc:66:8f:d7:
f7:de:1d:b5:26:d0:1a:cf:06:86:dc:57:be:12:5d:
72:a3:8e:12:db:f1:0a:6c:2b:dc:6f:5e:76:33:86:
ab:b9:a0:b5:bf:79:80:e1:0b:e8:8b:29:42:53:78:
7a:ec:d5:08:07:e1:58:f7:30:e7:2b:64:26:62:10:
ee:21:9a:98:10:f0:63:a4:67:c2:30:0b:85:43:3e:
e7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4E:35:D5:60:6E:3E:CF:DC:60:CD:D1:05:BD:C9:F4:12:96:D0:21
X509v3 Authority Key Identifier:
keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7f:c5:c9:6f:b7:a6:d6:f8:d0:c5:da:8e:59:51:e4:aa:ae:
e3:9f:71:26:95:a4:9d:c6:fb:71:ef:81:ea:68:3d:f1:d3:91:
51:e2:52:d9:fe:34:00:2e:20:3b:05:8b:6c:62:c7:e2:58:bf:
cf:51:53:4b:ba:18:e7:2f:83:00:cd:95:ac:cc:00:03:76:29:
f2:06:02:dc:fa:1a:87:01:ce:89:e4:d2:5d:fa:f6:e4:62:48:
4c:0f:94:45:2e:9f:fa:20:18:ae:b0:50:1b:02:d2:b8:ea:4a:
c5:38:c0:41:60:fa:4b:0f:08:61:8b:41:ce:b2:35:bd:b8:a6:
eb:4a:2d:08:d7:e3:a3:12:8a:9c:c1:66:84:09:2d:9e:8f:a5:
85:48:86:98:e8:83:81:8e:c4:81:60:8e:83:ca:f7:ee:47:4d:
6f:b8:38:90:c5:5e:1f:95:9a:b7:e1:ec:6b:be:a6:a3:cf:13:
4e:e1:28:02:1b:7e:fb:a7:44:4d:1d:b0:95:89:49:ac:cf:4e:
b4:cf:b3:e9:1d:50:1c:9e:1d:87:61:a1:2b:34:e3:0c:9e:a1:
5a:25:be:16:c5:33:83:20:1e:ab:f0:21:7a:5d:c5:93:ef:d1:
0c:98:92:ab:32:88:cb:44:3a:ac:c8:92:6b:31:e1:c4:9a:bc:
df:01:e6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:01:44 2026 by rpki-client