
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
File: TmiwSN0926X0ePH9KIqGGLqfq6o.mft (raw, json)
Hash identifier: ai7nY+yMnw5jEM60OF1YLmQ9z6C9XLBvorJsvpi2eYs=
Subject key identifier: 89:6D:2B:74:0C:5E:DE:FC:CB:0C:66:93:92:73:63:3D:CD:C0:B6:2B
Authority key identifier: 4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
Certificate issuer: /CN=A91FEB37/serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
Manifest number: F3
Signing time: Mon 01 Jun 2026 07:10:33 +0000
Manifest this update: Mon 01 Jun 2026 07:10:33 +0000
Manifest next update: Mon 08 Jun 2026 07:10:33 +0000
Files and hashes: 1: TmiwSN0926X0ePH9KIqGGLqfq6o.crl (hash: XJRkhDf1PzOwjvFVUpgkzbGo9N8TGh7o49KAEw+fBE4=)
2: 0FED0338F66C11EFA1F5216AC4F9AE02.roa (hash: K23nd/kWZIRhx+EHPAWrN5QOqlO2JE82qzLKgY/VNqI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl
rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:10:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEB37, serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
Validity
Not Before: Jun 1 07:10:33 2026 GMT
Not After : Jun 8 07:10:33 2026 GMT
Subject: CN=6a1d3069-70ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:3f:6f:92:17:15:b9:6c:66:6a:8b:c3:21:
a1:84:54:ce:65:f2:a3:6d:98:45:91:47:34:d5:2a:
8e:42:d9:50:c9:f0:c8:b8:fe:57:09:d0:d5:53:38:
17:01:c4:bd:a6:80:86:c3:da:1c:1b:4a:39:3e:84:
32:8a:0f:7e:92:fe:7f:a5:7d:9c:ed:57:34:f2:8c:
1c:d2:90:34:07:9c:9e:d5:84:69:a0:ae:18:f7:8a:
5e:05:18:34:92:66:19:f8:85:52:5c:29:78:80:6b:
30:7b:ea:21:13:c7:ec:bb:93:c4:6b:70:1d:9d:ed:
c7:f9:29:07:e6:aa:74:42:f3:7e:94:ec:85:c3:dc:
03:8c:8e:db:5c:51:6b:92:4a:a5:71:1b:db:d5:13:
25:53:f4:2c:46:38:0f:c8:b8:e7:a3:d7:57:e3:f5:
54:1e:59:c6:17:3e:b5:bf:09:cd:93:c8:b9:d4:bc:
db:5d:a9:fb:fa:94:d2:29:f0:eb:e9:a0:5d:88:64:
e9:f9:53:f6:48:f3:54:11:8a:62:21:4e:36:99:94:
eb:5b:05:d4:23:34:12:d9:24:2e:2f:5f:42:4d:c8:
e1:6f:ff:73:d5:e0:10:53:49:d3:14:e6:33:69:3f:
4e:c2:87:84:7f:7b:aa:f7:23:58:ac:ad:9f:bc:1c:
af:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6D:2B:74:0C:5E:DE:FC:CB:0C:66:93:92:73:63:3D:CD:C0:B6:2B
X509v3 Authority Key Identifier:
keyid:4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:b4:5d:37:34:73:ed:d9:bf:90:34:cf:d4:d6:3e:17:d5:f5:
ad:8d:91:e0:d4:70:1e:fb:b4:26:9d:b2:9c:07:ab:6f:05:9e:
01:9c:74:6e:4f:07:fe:59:ba:f5:d4:91:f2:85:57:a5:a3:ea:
11:0e:24:3d:c1:49:06:c0:9d:29:ac:e0:9e:8d:df:48:04:05:
8b:29:f7:c8:7d:05:b2:b2:97:42:8f:ad:1a:05:96:7f:96:cf:
cc:e0:e2:0b:df:85:6b:d9:dd:d9:95:f1:88:59:69:83:b2:45:
79:ba:0c:23:75:49:12:a3:e4:ec:c8:f2:c4:40:18:35:87:69:
17:9e:51:51:2c:87:d6:9b:b5:f0:1c:be:fc:78:d2:78:06:a0:
9f:50:56:21:de:d3:b6:ff:6b:5f:78:a6:e2:cd:aa:94:e1:d5:
1b:0b:9e:bd:ed:6e:9d:c8:aa:a0:58:ea:09:8f:a2:87:59:37:
42:75:18:f7:2c:77:b2:7e:80:f2:61:4d:da:79:54:45:00:cd:
dd:d5:df:28:78:30:d5:53:07:ac:11:49:3e:35:38:80:64:5f:
e1:09:93:d3:d6:3f:9b:3c:95:8f:04:e6:a2:7c:96:37:ec:af:
22:d8:4d:6c:fb:2e:79:55:b9:cb:f8:c2:c1:2c:26:7a:b7:7c:
8d:ae:50:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:27 2026 by rpki-client