
$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
File: TbOy41mbZG6fMK90pYxmePrx0rc.mft (raw, json)
Hash identifier: biLI7p50VN6DnkMjZLi/VXLMR3vksNxcbS4ebyVmVS0=
Subject key identifier: 6C:AE:7D:90:90:D2:E7:B9:68:4D:87:19:A1:D9:26:0D:66:62:DC:61
Authority key identifier: 4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7
Certificate issuer: /CN=A91698EC/serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
Manifest number: 015D
Signing time: Wed 25 Mar 2026 04:16:48 +0000
Manifest this update: Wed 25 Mar 2026 04:16:48 +0000
Manifest next update: Wed 01 Apr 2026 04:16:48 +0000
Files and hashes: 1: TbOy41mbZG6fMK90pYxmePrx0rc.crl (hash: 03JawvbcqorZmtTRCH+LSmNYePvT3RnMs2ZPSDORQFI=)
2: F2A90F6A86AE11EF999DAD2FC4F9AE02.roa (hash: vlR6KwXR8TL2mf6RJa/2FvIbd+B9HhzeWeJ+vJVsVYo=)
3: 206DB948214F11EFAB245D49C4F9AE02.roa (hash: TNEM4VNwQk6CJq6g7Tw93nqe1s3+SXsaXip/J0usQiA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl
rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:16:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91698EC, serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7
Validity
Not Before: Mar 25 04:16:48 2026 GMT
Not After : Apr 1 04:16:48 2026 GMT
Subject: CN=69c361b0-f6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d9:b7:7b:64:f1:80:f9:76:2d:25:d5:15:9b:
51:de:9a:2c:3c:b4:90:c5:bf:fd:fe:6f:90:db:ed:
0d:fd:80:22:ec:19:ec:0b:1c:a5:5a:af:24:a1:60:
3c:74:1d:88:32:63:10:be:61:37:88:5c:ae:6a:38:
f3:a0:bc:3c:62:80:59:d3:ab:da:6d:c8:be:a6:aa:
61:0c:ab:e2:f1:4b:2d:2b:23:db:a5:e7:83:4b:b4:
4b:80:a6:9c:f2:86:17:df:1c:b0:50:ab:22:6b:45:
e4:1f:17:2c:8d:71:05:17:4e:aa:02:6f:5f:c3:9c:
f1:b0:4f:a1:31:eb:06:68:1b:87:f9:84:84:06:3c:
e3:06:de:e0:da:ec:86:53:25:c5:95:71:2f:37:05:
bc:9f:5f:55:f2:99:e4:60:22:f5:6f:f7:26:be:cd:
a5:02:a3:41:3d:59:fd:93:e9:9a:54:49:2a:f5:52:
0c:10:b0:74:4f:f7:31:21:62:98:f1:32:81:dc:36:
36:96:05:fd:f5:81:c2:56:d7:fc:13:6a:1d:86:b3:
f5:42:d1:90:28:2e:38:c7:85:93:1a:74:a6:2b:c7:
09:0a:8b:ea:22:f0:72:23:da:e2:32:64:46:77:0c:
e3:a6:b3:f4:11:91:c4:c2:6a:cd:01:64:d4:23:46:
5b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AE:7D:90:90:D2:E7:B9:68:4D:87:19:A1:D9:26:0D:66:62:DC:61
X509v3 Authority Key Identifier:
keyid:4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:34:57:1e:f6:73:29:4d:15:ff:5e:93:9c:b4:76:c0:44:e8:
83:de:44:0f:f5:fe:8c:29:82:56:37:a9:9e:8d:f9:7c:3c:67:
fb:20:43:1d:cd:1c:91:64:c4:dd:08:96:1d:fb:57:48:1c:1f:
2e:e3:0f:9a:ae:d7:18:f3:ba:8d:30:0c:2b:f8:ae:0d:e6:13:
5d:0b:29:e8:dd:a7:10:ad:02:bd:78:36:50:b9:72:9a:c6:65:
db:fb:39:c2:4d:ca:ea:12:5d:e8:b1:c3:d3:0e:5e:92:ba:dc:
e0:ac:ab:99:b5:02:fe:ee:00:a5:79:1b:68:84:4e:28:da:d6:
92:5d:f7:ad:3a:a4:6c:7c:c4:f3:de:46:f3:75:92:c5:a0:9c:
e2:44:85:5e:d6:4d:bd:d5:74:cb:d5:6e:e9:d7:d1:26:29:f2:
e8:c4:d0:77:66:f5:65:24:d4:e3:5a:63:07:c6:91:7e:ab:32:
62:1c:ca:a1:a8:15:36:91:c3:11:fb:f0:a4:06:fc:6e:41:93:
e9:cc:c6:a4:0b:47:52:b2:c1:ae:01:11:53:43:0d:32:f4:8f:
48:6d:f7:d7:e9:59:53:4c:8b:23:9a:7c:67:5a:f5:0b:c4:74:
57:4e:52:1d:59:42:e3:d3:d4:73:12:45:0a:2b:f1:81:dc:83:
c4:2d:ef:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk4RUMxMTAvBgNVBAUTKDREQjNCMkUzNTk5QjY0NkU5RjMwQUY3NEE1OEM2Njc4
RkFGMUQyQjcwHhcNMjYwMzI1MDQxNjQ4WhcNMjYwNDAxMDQxNjQ4WjAYMRYwFAYD
VQQDEw02OWMzNjFiMC1mNmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwNm3e2TxgPl2LSXVFZtR3posPLSQxb/9/m+Q2+0N/YAi7BnsCxylWq8koWA8
dB2IMmMQvmE3iFyuajjzoLw8YoBZ06vabci+pqphDKvi8UstKyPbpeeDS7RLgKac
8oYX3xywUKsia0XkHxcsjXEFF06qAm9fw5zxsE+hMesGaBuH+YSEBjzjBt7g2uyG
UyXFlXEvNwW8n19V8pnkYCL1b/cmvs2lAqNBPVn9k+maVEkq9VIMELB0T/cxIWKY
8TKB3DY2lgX99YHCVtf8E2odhrP1QtGQKC44x4WTGnSmK8cJCovqIvByI9riMmRG
dwzjprP0EZHEwmrNAWTUI0Zb+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGyufZCQ
0ue5aE2HGaHZJg1mYtxhMB8GA1UdIwQYMBaAFE2zsuNZm2RunzCvdKWMZnj68dK3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8zQThGODQxMDIx
NDkxMUVGQkU4OENGMjlDNEY5QUUwMi9UYk95NDFtYlpHNmZNSzkwcFl4bWVQcngw
cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RiT3k0MW1iWkc2Zk1LOTBwWXhtZVByeDByYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OThFQy8zQThGODQxMDIxNDkxMUVGQkU4OENGMjlDNEY5QUUwMi9UYk95NDFtYlpH
NmZNSzkwcFl4bWVQcngwcmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkDRXHvZzKU0V/16TnLR2wETog95ED/X+jCmCVjepno35fDxn+yBDHc0ckWTE
3QiWHftXSBwfLuMPmq7XGPO6jTAMK/iuDeYTXQsp6N2nEK0CvXg2ULlymsZl2/s5
wk3K6hJd6LHD0w5ekrrc4KyrmbUC/u4ApXkbaIROKNrWkl33rTqkbHzE895G83WS
xaCc4kSFXtZNvdV0y9Vu6dfRJiny6MTQd2b1ZSTU41pjB8aRfqsyYhzKoagVNpHD
EfvwpAb8bkGT6czGpAtHUrLBrgERU0MNMvSPSG331+lZU0yLI5p8Z1r1C8R0V05S
HVlC49PUcxJFCivxgdyDxC3viQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:44 2026 by rpki-client