
$ rpki-client -vvf rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
File: TCISGt-uP1dSgBZRUcP9MOOq_QE.mft (raw, json)
Hash identifier: qO/A+6eMqs49UPT/zlih8/TtKHJ90R/HieOZvsBC0RE=
Subject key identifier: 64:C1:59:EE:0B:99:BE:EA:92:E4:4F:6A:F7:ED:10:F4:39:33:9E:1B
Authority key identifier: 4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01
Certificate issuer: /CN=A91466E8/serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
Manifest number: 0109
Signing time: Thu 23 Jul 2026 07:47:29 +0000
Manifest this update: Thu 23 Jul 2026 07:47:29 +0000
Manifest next update: Thu 30 Jul 2026 07:47:29 +0000
Files and hashes: 1: TCISGt-uP1dSgBZRUcP9MOOq_QE.crl (hash: WrEaX+POiUvczL5zScbB4Bd+RKAywGy72wf66UqHKV0=)
2: 02640B0CF97911EF99F9BE80C4F9AE02.roa (hash: IDMG36g3IA5yaHGoEfdRe+YwDHRm0VJaleLLtHv9jQI=)
3: 67CB5FC0629411F0B7FA070FC4F9AE02.roa (hash: OTM0h3x/rG6DzgQGl54EMsBYVfOYhG4EfKaVuusqLjw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl
rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:47:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91466E8, serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01
Validity
Not Before: Jul 23 07:47:29 2026 GMT
Not After : Jul 30 07:47:29 2026 GMT
Subject: CN=6a61c711-3ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cc:0e:68:b2:e3:aa:b1:01:88:a5:46:56:b6:
67:4c:62:9a:f2:0a:f5:e8:d2:34:87:8a:d5:55:38:
78:75:20:32:a4:e3:a7:f3:fb:df:d4:70:a4:17:28:
a0:22:5b:2e:de:eb:85:8b:fc:20:f0:2a:37:ff:e1:
8e:dc:6f:cc:7c:99:db:95:ba:2e:77:c3:1e:bc:30:
4d:3c:0e:df:98:b1:9f:00:6a:2c:40:66:ef:05:00:
c7:a9:e6:0e:c0:09:01:78:8b:c1:1e:4a:7b:80:04:
9f:cc:87:51:2d:fd:d7:e5:89:d5:a3:ec:24:87:2e:
af:45:6f:1c:0a:9d:cc:3f:46:9e:a5:e8:d1:15:48:
41:6e:cf:c7:12:ac:ee:9c:fe:ea:c7:2d:66:e8:6f:
b9:45:54:30:9d:b0:e6:2d:1b:05:bf:f9:d6:a6:5d:
08:e6:af:c9:70:87:7e:5d:4f:8d:79:64:2c:12:1f:
c2:b4:14:66:12:ae:0c:1c:4b:b8:7f:07:47:a3:07:
2b:83:90:14:f0:ae:30:42:41:70:57:60:10:1e:fb:
ea:d0:df:3f:ba:c1:44:0e:bf:13:a5:50:af:5f:6e:
f8:ff:03:5c:cb:d7:4b:11:e3:a9:ae:96:43:b8:94:
6c:3b:29:93:c5:9a:13:5a:41:ee:1d:41:92:f4:63:
54:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C1:59:EE:0B:99:BE:EA:92:E4:4F:6A:F7:ED:10:F4:39:33:9E:1B
X509v3 Authority Key Identifier:
keyid:4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f2:66:c9:dd:11:95:86:b6:b4:0d:39:73:52:16:cd:91:2f:
c5:a0:a2:ad:36:20:c2:61:7b:c7:b9:9f:96:c3:ca:6f:9e:1d:
bc:76:ca:84:6e:a6:b5:9f:c5:e0:fe:3e:de:e9:1a:b4:dc:2d:
9b:c6:55:37:51:fa:05:b5:dd:1d:18:23:a5:2b:30:28:10:35:
39:18:14:5c:b1:20:c5:2b:e3:89:25:4a:0e:d1:67:31:ae:cf:
b0:c0:d3:94:0a:eb:cc:a2:ac:0c:45:ae:d3:f8:05:25:93:0d:
6d:8d:b3:6e:80:20:de:80:cf:d6:ba:50:5a:f2:ee:ba:dd:1b:
a9:ad:97:e3:e0:47:2f:88:44:16:3a:15:39:91:48:d7:7a:07:
42:b8:8c:b0:7a:22:42:3a:09:93:43:0e:5b:e1:96:cc:4d:3b:
8f:5c:fc:ed:6c:3d:6a:ea:37:db:06:61:17:8d:c6:8c:a2:6b:
4e:37:a5:2e:b1:fc:68:48:23:4e:5a:30:fd:76:ff:1f:d6:49:
9c:7b:38:92:2b:9f:25:28:f5:93:31:4a:82:bd:86:ea:6c:a5:
3d:0d:9c:29:5b:5a:8d:ab:c7:ba:f4:79:e2:62:1b:e6:67:db:
5e:02:18:5e:c1:7a:12:ff:50:79:90:20:fd:ed:8e:b6:a8:48:
54:53:99:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDY2RTgxMTAvBgNVBAUTKDRDMjIxMjFBREZBRTNGNTc1MjgwMTY1MTUxQzNGRDMw
RTNBQUZEMDEwHhcNMjYwNzIzMDc0NzI5WhcNMjYwNzMwMDc0NzI5WjAYMRYwFAYD
VQQDEw02YTYxYzcxMS0zZmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3swOaLLjqrEBiKVGVrZnTGKa8gr16NI0h4rVVTh4dSAypOOn8/vf1HCkFyig
Ilsu3uuFi/wg8Co3/+GO3G/MfJnblboud8MevDBNPA7fmLGfAGosQGbvBQDHqeYO
wAkBeIvBHkp7gASfzIdRLf3X5YnVo+wkhy6vRW8cCp3MP0aepejRFUhBbs/HEqzu
nP7qxy1m6G+5RVQwnbDmLRsFv/nWpl0I5q/JcId+XU+NeWQsEh/CtBRmEq4MHEu4
fwdHowcrg5AU8K4wQkFwV2AQHvvq0N8/usFEDr8TpVCvX274/wNcy9dLEeOprpZD
uJRsOymTxZoTWkHuHUGS9GNUxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGTBWe4L
mb7qkuRPavftEPQ5M54bMB8GA1UdIwQYMBaAFEwiEhrfrj9XUoAWUVHD/TDjqv0B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjZFOC9EODM4OEQzNEYz
RkMxMUVGOTI2Q0U2MzBDNEY5QUUwMi9UQ0lTR3QtdVAxZFNnQlpSVWNQOU1PT3Ff
UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RDSVNHdC11UDFkU2dCWlJVY1A5TU9PcV9RRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjZFOC9EODM4OEQzNEYzRkMxMUVGOTI2Q0U2MzBDNEY5QUUwMi9UQ0lTR3QtdVAx
ZFNnQlpSVWNQOU1PT3FfUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArfJmyd0RlYa2tA05c1IWzZEvxaCirTYgwmF7x7mflsPKb54dvHbKhG6mtZ/F
4P4+3ukatNwtm8ZVN1H6BbXdHRgjpSswKBA1ORgUXLEgxSvjiSVKDtFnMa7PsMDT
lArrzKKsDEWu0/gFJZMNbY2zboAg3oDP1rpQWvLuut0bqa2X4+BHL4hEFjoVOZFI
13oHQriMsHoiQjoJk0MOW+GWzE07j1z87Ww9auo32wZhF43GjKJrTjelLrH8aEgj
Tlow/Xb/H9ZJnHs4kiufJSj1kzFKgr2G6mylPQ2cKVtajavHuvR54mIb5mfbXgIY
XsF6Ev9QeZAg/e2OtqhIVFOZXw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:20 2026 by rpki-client