
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
File: -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json)
Hash identifier: Pr4OqI/nhRrA7ZIGCWASUm0hk5yB5X15ZaRnpdcQVxs=
Subject key identifier: 9F:16:EC:4F:6A:7E:53:C2:5F:62:52:69:C2:50:06:B5:13:33:02:CE
Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1
Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1
Certificate serial: 0D42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
Manifest number: 0D29
Signing time: Tue 06 Oct 2026 18:22:24 +0000
Manifest this update: Tue 06 Oct 2026 18:22:24 +0000
Manifest next update: Tue 13 Oct 2026 18:22:24 +0000
Files and hashes: 1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: FyGr9jsGpOxVijQjSgMMaNxBvUMC11A8qzv2xlYWPq4=)
2: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: liqudEt944TPxlO6q13NxIFzhm26td/UszwH+GlqOU0=)
3: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: JgU3uHMLD1/j7W/OT0+XPxyyEVVhRjsVefR9u0vp7DA=)
4: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: APn+F9xRovOSeD45jGA8svXtlMxctUkywPcao3lKdl4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl
rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3394 (0xd42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1
Validity
Not Before: Oct 6 18:22:24 2026 GMT
Not After : Oct 13 18:22:24 2026 GMT
Subject: CN=6ac53c60-7c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:f3:02:5a:24:7a:c9:38:5c:b1:24:06:db:
b4:31:86:26:24:e2:3d:f3:f8:ce:c7:51:b2:d6:13:
59:19:e0:ec:2a:61:06:c0:c5:2c:02:24:b5:bb:25:
e5:c4:2f:b2:a7:57:0f:95:9b:f0:8c:6c:97:27:3b:
36:72:93:23:a9:9f:b7:7c:bb:cd:34:a5:a6:15:97:
39:a3:33:e0:ac:8c:4d:7c:e5:f2:e8:61:57:73:2f:
a4:08:a6:de:b8:80:3b:21:31:33:c8:da:28:6e:15:
77:16:89:41:06:6d:e5:f5:60:74:73:5c:d3:15:6d:
a8:87:27:a4:7d:6a:0c:1b:ed:51:a0:de:dc:26:ba:
40:ee:28:a2:fc:2a:cd:c4:14:4a:0e:1c:d6:6e:ae:
4d:61:e4:b7:cc:ae:98:18:f0:0a:23:fb:ec:76:a7:
6f:2b:39:c1:2a:a9:57:97:2d:dc:09:61:7c:af:bf:
5a:09:48:e9:5d:db:99:c6:55:23:ee:b9:96:2a:80:
7a:0a:79:72:ff:b5:65:34:e1:ed:49:a7:63:56:41:
ab:0c:93:cb:e2:03:ce:8c:28:90:5b:66:5d:a8:e0:
29:c6:1e:80:20:ad:42:69:72:b3:4d:a1:64:5a:42:
85:71:9c:be:86:5d:7c:55:f1:4b:47:ad:96:d2:14:
4c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:16:EC:4F:6A:7E:53:C2:5F:62:52:69:C2:50:06:B5:13:33:02:CE
X509v3 Authority Key Identifier:
keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:fe:a3:01:eb:7b:d6:11:97:5b:03:3a:4a:d8:6a:b0:d1:82:
47:55:aa:88:6b:2e:de:bf:50:20:8b:48:06:23:2f:46:ef:18:
ef:d0:5a:11:5b:eb:7e:04:be:fb:0d:b6:73:03:1f:c6:c3:40:
09:98:11:57:9e:72:f6:e0:87:6c:47:6f:73:c3:61:94:3f:93:
ef:cb:59:72:ef:59:b8:34:e2:55:8e:54:c3:a2:44:6c:dd:7a:
60:3a:fb:e5:70:b5:10:6c:51:f7:53:9d:61:dd:a5:90:02:c8:
73:eb:37:5d:e2:91:70:ec:ac:07:7e:c0:db:03:33:95:47:a7:
29:08:da:a1:3a:73:41:04:10:80:e8:ff:8c:c4:b5:4a:28:a8:
ee:37:a1:7f:81:07:ff:a0:76:2f:c5:4e:e8:f8:83:7e:56:6b:
8c:42:4f:ba:d6:35:95:12:33:32:8e:7c:f9:fc:b9:21:0c:b3:
22:6a:f1:5f:e6:19:bf:61:0f:c6:a6:36:e9:7b:af:31:3a:6b:
cc:8b:a3:ba:ff:b0:59:14:04:ee:09:19:76:10:45:58:70:20:
c2:1e:2a:20:44:70:80:84:e6:dc:6f:aa:03:37:65:36:ec:5b:
90:be:82:2c:95:93:db:8e:59:0c:de:2b:96:f2:21:01:9d:d6:
ce:88:8d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:41:20 2026 by rpki-client