
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
File: TSeJUeK9itKFuUCo6p5X43lxHms.mft (raw, json)
Hash identifier: u6oKtDQ/rRjCC8c+OnImrGOhP5RHgpXwL2WYeaGsRtM=
Subject key identifier: F9:9D:FE:E7:AC:05:D8:40:DF:E0:9F:5B:81:C5:4E:33:D7:18:74:89
Authority key identifier: 4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
Certificate issuer: /CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Certificate serial: 04A5
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
Manifest number: 049C
Signing time: Thu 12 Nov 2026 23:45:07 +0000
Manifest this update: Thu 12 Nov 2026 23:45:07 +0000
Manifest next update: Thu 19 Nov 2026 23:45:07 +0000
Files and hashes: 1: TSeJUeK9itKFuUCo6p5X43lxHms.crl (hash: 7uFY3b4Y1QXMpKI0rIMBPnIs7sO3hdY1ekMDWX0NNfU=)
2: E8E194B8A5CC11EC85A86A1FC4F9AE02.roa (hash: bD2C5/DgW70VY50hOjBpLKvWt5B7bnvlv0UfjlxEnfk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Nov 2026 23:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1189 (0x4a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91342C5, serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Validity
Not Before: Nov 12 23:45:07 2026 GMT
Not After : Nov 19 23:45:07 2026 GMT
Subject: CN=6af64f83-5f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:28:54:88:37:5d:3d:10:5f:6d:88:77:14:8a:
38:2c:65:36:b6:8f:10:6b:1a:28:4e:c7:64:9e:5a:
65:fe:31:3d:c0:0a:94:f6:61:46:44:71:75:da:d4:
76:ed:6a:59:63:42:01:ec:7a:82:19:a2:8a:f9:f5:
b6:4b:e7:7e:61:a3:09:e5:18:5d:44:cd:94:aa:8b:
ab:79:b2:de:a3:83:19:fc:cc:20:3d:11:6f:5b:55:
be:8f:80:f8:7e:03:ab:b1:3b:a4:4e:38:9c:44:04:
3a:94:a0:17:43:7b:bf:db:83:7a:09:b9:40:88:75:
94:54:d0:3b:a8:fc:d0:c9:65:58:dd:5a:99:4a:89:
ee:7b:ec:22:d6:1a:14:36:43:40:37:6a:44:c0:81:
e9:d1:38:16:3d:a1:54:fa:ac:b0:48:f7:43:92:67:
11:7e:09:89:8b:9c:56:51:c3:bd:33:9c:16:ec:c3:
e4:14:60:ee:a0:9e:6c:92:5b:18:1f:39:56:6d:fc:
78:c1:5b:23:83:5b:d6:8e:d4:67:97:ed:4b:a9:88:
a7:33:01:88:73:12:9a:ed:01:d8:0d:ea:d7:75:b2:
ff:02:14:e2:a8:22:b9:d9:0a:99:0a:e8:a6:ee:48:
c6:db:1b:6c:a2:ec:a5:a9:d0:4f:26:d0:a0:f3:88:
e6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9D:FE:E7:AC:05:D8:40:DF:E0:9F:5B:81:C5:4E:33:D7:18:74:89
X509v3 Authority Key Identifier:
keyid:4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1c:f2:32:d1:22:30:7c:cd:d9:cc:6d:95:0b:82:f0:0c:d0:
a9:18:a7:89:91:ad:71:b2:e6:cc:07:24:68:b0:a3:6b:b3:e9:
9b:35:a6:f9:99:b0:cf:96:c5:80:5d:3c:a7:cb:d7:94:29:07:
0f:37:17:85:f8:53:ab:ab:0b:81:9c:f3:73:e9:c9:b6:af:29:
49:6e:39:80:02:8a:68:7c:ff:86:94:8f:05:80:e4:d1:f2:05:
1a:14:ac:54:dd:8b:7e:e9:04:be:a2:be:9d:79:a4:59:b6:5a:
e1:89:d9:5c:f3:7c:6b:27:48:d4:65:d3:48:68:65:15:6b:27:
ba:8b:a1:c7:22:6a:42:c9:e2:d4:d4:a1:0d:bb:0e:6a:d3:16:
29:4b:be:2e:3a:9c:e9:c2:18:d5:a4:d5:ff:14:6d:fe:0a:ce:
c7:8d:41:57:fa:96:ae:33:54:be:57:6e:10:7c:23:f0:f6:35:
88:7b:ba:08:37:12:38:73:34:12:36:cf:2b:4c:2b:8b:59:a4:
7a:ba:91:d5:26:90:b2:c6:34:df:53:9b:c4:cd:a5:b4:fc:6d:
38:d2:10:5a:09:9c:1d:9f:10:f9:a5:78:3c:2c:72:4b:00:b3:
d7:9f:d0:8e:56:e8:23:94:7c:dc:0c:7e:08:f3:7f:31:d5:42:
bf:b3:48:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:55:14 2026 by rpki-client