
$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
File: _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json)
Hash identifier: 3WLLfdC9/p8kmTWIBquvMQOgxV0NVwvKCSky2B+uvVg=
Subject key identifier: 9E:C7:58:2A:03:35:1A:6D:6C:E9:02:42:BD:58:56:32:65:8D:52:75
Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80
Certificate issuer: /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880
Certificate serial: 11D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
Manifest number: 0F6A
Signing time: Tue 12 May 2026 18:51:14 +0000
Manifest this update: Tue 12 May 2026 18:51:13 +0000
Manifest next update: Tue 19 May 2026 18:51:13 +0000
Files and hashes: 1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: IMPTshNHITF+amLJhJq+Z6dXTT0U/OSuGHjZZKrcq6E=)
2: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: 3wvmSVm24Be4PT+QoB6fmiVi8khIAb17IJdvXSMd/Sk=)
3: 52DDE6AEB97F11F085A49519C4F9AE02.roa (hash: bnegwZlpwrUjpNt+bkfeBbC7neEcLC/n9ASWauGsONI=)
4: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: FjzFovZu6aXM8z/dlqSuAPqXLgKsrC/1lTjiwdyZmIg=)
5: A547705AF34A11EFA7A4C071C4F9AE02.roa (hash: BkPr25yKFO4OSu24mLv1IXHgIlBp7q8A5b/1fep419U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl
rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:51:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4567 (0x11d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91620E0, serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880
Validity
Not Before: May 12 18:51:13 2026 GMT
Not After : May 19 18:51:13 2026 GMT
Subject: CN=6a0376a2-59be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:bf:ef:e4:4c:0b:5b:d3:7a:ad:d8:25:4f:
8e:77:23:53:23:7e:ba:2f:0f:28:2a:03:bc:1c:b9:
f6:b9:62:1f:f8:39:80:41:0f:ca:08:55:6d:84:49:
ba:06:3f:8c:fc:f9:eb:36:39:a4:e9:1e:bb:04:e9:
0e:c2:28:d0:83:6d:e5:64:a9:d1:f6:4a:35:69:98:
96:80:34:df:0c:63:c8:18:76:e2:9e:61:03:91:23:
f9:b6:a6:9c:8f:82:77:a7:08:33:07:78:ad:a7:88:
38:10:f9:d0:99:1b:a2:52:e7:33:94:a3:23:1a:b3:
21:54:22:08:f2:4a:b7:02:ef:a3:31:77:b2:2c:a2:
49:a2:45:69:3a:36:d3:9d:20:ef:c2:cd:d5:a8:a2:
37:51:34:7f:0e:0b:32:33:83:b0:69:97:73:d9:64:
d9:ac:f7:32:c6:81:51:bc:f7:b7:89:c7:53:4d:d6:
83:47:1c:4c:0c:be:1e:ad:7b:fc:aa:5e:54:d5:e2:
85:a3:eb:c1:6d:7e:60:7b:79:a8:a0:3c:10:0a:38:
15:0b:4b:19:a2:dc:8e:e1:a4:a0:ff:ee:d5:0c:99:
3a:96:3a:41:29:46:1d:37:1d:cf:08:4e:a3:ca:bd:
f9:14:91:94:37:87:32:05:26:9b:2d:a2:fb:3c:87:
80:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C7:58:2A:03:35:1A:6D:6C:E9:02:42:BD:58:56:32:65:8D:52:75
X509v3 Authority Key Identifier:
keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:78:51:44:4a:ad:ca:72:ef:73:b2:fc:ae:3c:91:79:7b:8f:
e9:4b:f7:aa:2c:8c:d1:98:b9:d4:0d:33:f9:fe:4a:76:40:b4:
38:86:4c:07:74:f6:f4:00:3e:77:42:46:de:64:64:86:05:64:
20:5f:d0:a2:f7:5f:57:1f:90:53:20:56:d4:d3:b9:b6:af:96:
1c:75:cc:d9:e1:78:07:7c:d1:5d:2f:8b:d9:c3:d7:24:9b:dc:
af:58:46:7c:e6:f6:8b:ba:6a:08:d2:a5:90:90:37:40:18:8a:
86:30:a3:0a:18:28:ab:9a:2a:a8:18:a9:e7:dc:8a:fc:c2:62:
c4:d8:a7:e4:90:56:b6:99:a6:cc:72:a1:ae:2c:2a:3a:de:00:
1f:cc:b2:12:59:10:a1:5f:a1:e7:ed:fb:df:0e:9d:4c:be:99:
a4:85:c2:93:c6:52:5f:66:ea:15:c2:28:50:5f:6c:c1:d8:61:
f7:69:2e:51:bf:46:4f:7d:f6:4c:f0:39:5f:0f:31:bf:7c:fa:
cb:6a:7f:5f:c4:9f:91:35:61:48:a9:02:ea:e1:3c:fe:a2:44:
61:b3:a9:f8:5d:92:08:83:bc:80:0a:93:1f:84:49:0d:94:1e:
c6:ee:4e:ec:47:d8:34:13:49:14:e3:8c:e5:96:6c:77:ae:3b:
c6:21:de:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:11 2026 by rpki-client