
$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
File: _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json)
Hash identifier: ap4ab6aJBblhwe5+HtjIVTSwEbRN2jY465ybItltFb8=
Subject key identifier: 2A:5C:B1:B4:94:FB:15:45:56:E8:0E:8D:82:7C:B3:F7:F9:68:D1:CB
Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80
Certificate issuer: /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880
Certificate serial: 11BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
Manifest number: 0F4F
Signing time: Tue 24 Mar 2026 18:40:04 +0000
Manifest this update: Tue 24 Mar 2026 18:40:03 +0000
Manifest next update: Tue 31 Mar 2026 18:40:03 +0000
Files and hashes: 1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: QggcwZ0nF6cW49OwH+p2mhL3JX2oG1n+yVhyOckzWuU=)
2: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: 3wvmSVm24Be4PT+QoB6fmiVi8khIAb17IJdvXSMd/Sk=)
3: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: FjzFovZu6aXM8z/dlqSuAPqXLgKsrC/1lTjiwdyZmIg=)
4: A547705AF34A11EFA7A4C071C4F9AE02.roa (hash: BkPr25yKFO4OSu24mLv1IXHgIlBp7q8A5b/1fep419U=)
5: 52DDE6AEB97F11F085A49519C4F9AE02.roa (hash: qTFeOzYu3sHI5POCswhDgzUPMPyu3oSJj2Wq6+dRgGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl
rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:40:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4538 (0x11ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91620E0, serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880
Validity
Not Before: Mar 24 18:40:03 2026 GMT
Not After : Mar 31 18:40:03 2026 GMT
Subject: CN=69c2da84-3b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:aa:49:0a:ed:07:e3:bd:22:14:56:18:c7:60:
19:5d:c3:d1:b8:d8:a1:b6:64:cc:0a:e5:4c:13:0d:
d2:c0:e9:59:d1:21:b4:33:a8:b1:b8:4f:3c:0a:de:
da:a1:3e:d9:97:15:b9:81:d9:9b:2b:b1:80:61:07:
56:e9:24:25:82:79:0a:6d:e4:3a:1a:4c:53:55:b1:
3f:ab:a4:44:d4:3e:af:53:ca:e9:d7:9a:e2:d9:e9:
fe:b4:c0:f2:2d:82:5d:17:cd:8b:92:b0:d1:1f:00:
30:21:30:b8:ec:00:b0:77:60:6d:c4:1e:83:34:60:
cb:5a:3e:19:ac:28:78:6f:00:d8:cf:d7:e4:ca:d1:
cb:69:ba:a1:6e:c7:59:17:13:f4:bc:70:22:64:c4:
08:ce:f2:23:19:59:c9:29:ba:c7:6f:9c:21:a5:b6:
62:62:c9:39:ec:ef:35:83:8d:1c:9a:7a:cf:d1:07:
9d:60:e9:35:fc:b1:ec:f4:46:e5:9d:8f:42:64:4b:
9c:5b:ef:60:0b:57:6b:ce:4b:26:d1:fd:26:39:72:
a8:1d:6c:b2:c3:d1:e8:41:7c:f3:82:5c:7d:3c:2f:
7e:cf:89:f7:55:b6:9f:14:3a:0a:af:5b:fc:85:ef:
63:97:d7:03:ef:bc:a0:dd:b7:39:80:26:a9:10:2f:
c4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5C:B1:B4:94:FB:15:45:56:E8:0E:8D:82:7C:B3:F7:F9:68:D1:CB
X509v3 Authority Key Identifier:
keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:89:2d:ea:15:f1:e3:57:94:44:39:2d:12:36:cd:c8:7c:31:
5b:b4:e4:2b:fa:a2:bc:20:6a:1e:c3:cb:1e:46:a1:ff:ca:24:
cd:e8:3d:b3:5a:84:78:99:61:e9:45:b3:17:8d:68:5d:34:17:
13:37:a1:c8:dd:42:e3:41:83:e7:9f:a3:d4:0e:e5:61:1f:f7:
9c:e0:3e:aa:06:71:42:9e:91:31:52:1b:47:44:7e:bb:a4:40:
f3:df:e2:05:93:fe:65:b5:72:b9:29:c6:1d:ee:f9:20:7d:58:
be:72:2c:6e:01:3d:ca:a0:a9:cf:55:2c:ea:99:72:0e:cf:2b:
e9:14:81:8e:75:b0:68:bc:1c:40:df:d9:b6:3b:77:f2:c4:db:
c8:f7:e2:1e:99:d9:28:7b:78:8e:cc:17:14:dc:4b:94:54:5b:
6b:66:77:2e:90:86:a8:e9:0c:75:c7:75:c6:93:ad:60:42:6c:
d9:28:77:21:aa:b9:b0:20:d2:8f:46:ea:b6:3d:53:ef:54:ba:
31:7a:32:c5:ac:d9:24:82:25:c7:d4:92:ab:7d:4f:a0:77:07:
ac:f4:d1:e4:32:86:7a:ae:39:63:4f:01:a6:1f:ce:63:16:34:
51:aa:92:9b:bd:7a:45:9b:a4:93:46:de:c2:f0:40:51:40:3e:
95:88:b1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:47 2026 by rpki-client