
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
File: TmiwSN0926X0ePH9KIqGGLqfq6o.mft (raw, json)
Hash identifier: 8EjbhjETKm4WsaNwnKTYZhq/MdQ4hbATLtzcx8JGLc0=
Subject key identifier: 10:30:DA:12:22:CB:9A:78:A0:54:39:02:EA:53:C2:5E:F1:F5:E6:B6
Authority key identifier: 4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
Certificate issuer: /CN=A91FEB37/serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
Manifest number: 013B
Signing time: Mon 19 Oct 2026 06:15:02 +0000
Manifest this update: Mon 19 Oct 2026 06:15:01 +0000
Manifest next update: Mon 26 Oct 2026 06:15:01 +0000
Files and hashes: 1: TmiwSN0926X0ePH9KIqGGLqfq6o.crl (hash: K++uyaXqaw6T302gEELkbLskZ+CmyO2ir/v6CgGi41k=)
2: 0FED0338F66C11EFA1F5216AC4F9AE02.roa (hash: QELUJCqdGaWJJ9WqA0a4XotSJPr5/ZmoQUlhz9HUAP4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl
rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 06:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEB37, serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
Validity
Not Before: Oct 19 06:15:01 2026 GMT
Not After : Oct 26 06:15:01 2026 GMT
Subject: CN=6ad5b566-316a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:7e:1c:4c:d7:b1:53:56:29:81:5b:46:0e:
60:6c:cd:0f:3e:22:7a:e5:d9:e8:80:c9:cd:5c:9a:
fc:02:06:33:91:5f:55:a3:e1:7e:f5:66:9a:31:02:
41:3a:b4:8c:26:4a:2d:2f:1d:cf:81:54:b4:c6:5a:
7a:44:53:5e:32:cc:e6:dc:44:ac:7e:c2:ba:c6:99:
bc:86:aa:b6:21:5f:82:1e:db:58:f0:06:d6:df:3d:
7a:b7:64:ff:ea:15:96:b2:11:1c:77:b7:89:02:bc:
24:d0:40:af:f0:b5:e6:e8:f6:d0:3c:1d:96:ab:6e:
53:51:2a:5d:e6:42:4e:27:8c:cb:7e:69:10:eb:75:
af:e5:aa:d8:2c:09:e6:7d:1a:2d:f3:2c:52:32:d5:
94:d8:4b:93:25:b7:52:f8:9f:b7:2f:d1:71:a5:99:
83:3d:1b:d0:d4:da:0f:15:aa:0f:3d:9d:e8:f4:40:
87:37:b0:48:9f:de:c2:57:cb:92:af:19:0b:19:fe:
e1:4b:7a:74:a2:e4:6a:f8:96:eb:1f:06:7b:7c:0d:
47:7e:c9:50:c3:cd:7a:1f:0d:7d:14:98:f9:7e:59:
aa:28:fd:fa:fd:ae:50:3f:06:5c:2a:64:15:d1:0d:
b0:29:6f:0d:ff:05:a5:ec:ba:36:aa:f7:dc:69:68:
36:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:30:DA:12:22:CB:9A:78:A0:54:39:02:EA:53:C2:5E:F1:F5:E6:B6
X509v3 Authority Key Identifier:
keyid:4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:f2:9f:84:bd:99:3b:03:51:a1:e3:af:4c:91:4a:f6:4e:03:
6b:c4:2c:0e:f5:15:c2:d8:b8:f1:b1:23:b1:8c:8a:8d:7b:61:
f9:94:c9:4a:1f:36:65:b0:2c:87:3c:69:52:0c:11:e4:66:55:
14:dc:d7:d1:e4:a0:6b:b8:d6:53:64:43:65:ab:3a:38:3c:0b:
07:16:b2:58:a2:5b:5f:a8:0e:56:28:3b:56:d3:9a:2a:1e:08:
d6:0f:48:4d:c3:b0:0a:4c:44:19:5c:52:75:a9:c7:44:0e:39:
38:d4:dd:9d:c8:0a:12:9d:20:18:f3:55:07:1b:86:5b:58:40:
fa:0e:09:f1:2f:a6:98:39:ae:b6:c2:4b:73:1f:92:8d:86:c8:
7c:46:10:e8:2f:49:20:fe:f5:c9:62:be:c7:65:ac:c3:c9:05:
10:0a:78:b5:e0:70:09:b4:7f:ac:0a:82:cf:ff:69:3e:70:bb:
bd:b0:2a:3a:b9:15:fd:4c:6c:fa:aa:78:39:21:cc:1b:54:93:
92:62:30:de:2f:ac:be:a8:a2:2e:bc:81:4e:82:f8:ce:aa:a8:
31:10:5d:11:ad:2e:1f:86:04:1d:71:50:75:3a:43:c4:0e:e4:
db:ef:31:26:63:8e:09:24:26:65:d3:63:03:07:8f:fc:88:db:
50:36:c5:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkVCMzcxMTAvBgNVBAUTKDRFNjhCMDQ4REQzRERCQTVGNDc4RjFGRDI4OEE4NjE4
QkE5RkFCQUEwHhcNMjYxMDE5MDYxNTAxWhcNMjYxMDI2MDYxNTAxWjAYMRYwFAYD
VQQDEw02YWQ1YjU2Ni0zMTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArEZ+HEzXsVNWKYFbRg5gbM0PPiJ65dnogMnNXJr8AgYzkV9Vo+F+9WaaMQJB
OrSMJkotLx3PgVS0xlp6RFNeMszm3ESsfsK6xpm8hqq2IV+CHttY8AbW3z16t2T/
6hWWshEcd7eJArwk0ECv8LXm6PbQPB2Wq25TUSpd5kJOJ4zLfmkQ63Wv5arYLAnm
fRot8yxSMtWU2EuTJbdS+J+3L9FxpZmDPRvQ1NoPFaoPPZ3o9ECHN7BIn97CV8uS
rxkLGf7hS3p0ouRq+JbrHwZ7fA1HfslQw816Hw19FJj5flmqKP36/a5QPwZcKmQV
0Q2wKW8N/wWl7Lo2qvfcaWg2cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBAw2hIi
y5p4oFQ5AupTwl7x9ea2MB8GA1UdIwQYMBaAFE5osEjdPdul9Hjx/SiKhhi6n6uq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIzNy8zQ0I3NzlFMEY1
RjcxMUVGQjgyRUZENkJDNEY5QUUwMi9UbWl3U04wOTI2WDBlUEg5S0lxR0dMcWZx
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RtaXdTTjA5MjZYMGVQSDlLSXFHR0xxZnE2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RUIzNy8zQ0I3NzlFMEY1RjcxMUVGQjgyRUZENkJDNEY5QUUwMi9UbWl3U04wOTI2
WDBlUEg5S0lxR0dMcWZxNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ/KfhL2ZOwNRoeOvTJFK9k4Da8QsDvUVwti48bEjsYyKjXth+ZTJSh82ZbAs
hzxpUgwR5GZVFNzX0eSga7jWU2RDZas6ODwLBxayWKJbX6gOVig7VtOaKh4I1g9I
TcOwCkxEGVxSdanHRA45ONTdncgKEp0gGPNVBxuGW1hA+g4J8S+mmDmutsJLcx+S
jYbIfEYQ6C9JIP71yWK+x2Wsw8kFEAp4teBwCbR/rAqCz/9pPnC7vbAqOrkV/Uxs
+qp4OSHMG1STkmIw3i+svqiiLryBToL4zqqoMRBdEa0uH4YEHXFQdTpDxA7k2+8x
JmOOCSQmZdNjAweP/IjbUDbFmw==
-----END CERTIFICATE-----
Generated at Wed Oct 21 05:09:24 2026 by rpki-client