
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
File: TzFe71rLLtp6NynnnhNZkMAecHQ.mft (raw, json)
Hash identifier: Lb4rRVOruh06YyEOaU1iQ3HmSSwyvAegF9CFM3SKzgU=
Subject key identifier: 46:B1:D0:AB:1E:0E:0C:04:E1:14:56:8F:63:43:9C:4D:60:71:AE:FA
Authority key identifier: 4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74
Certificate issuer: /CN=A91957C9/serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074
Certificate serial: 0F1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
Manifest number: 0F07
Signing time: Thu 24 Sep 2026 17:35:11 +0000
Manifest this update: Thu 24 Sep 2026 17:35:10 +0000
Manifest next update: Thu 01 Oct 2026 17:35:10 +0000
Files and hashes: 1: TzFe71rLLtp6NynnnhNZkMAecHQ.crl (hash: 7UdEmVqVNUNOsEsk8axwj5BW6Ha0JhbpTCJWYY/zeRY=)
2: z7xZp6bAbB1jFkmDLpSFxsfCZ5Y.asa (hash: 86kpuEsPKdwvWESC1iQhBWUL9NuOHbb1fR3yGidmVPk=)
3: B55EC19EAC2B11E996F6E511C4F9AE02.roa (hash: al3fqRaFbz5Gytb2uWt5SUlVpJ/tTLDhToYHkT3GYkw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl
rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3867 (0xf1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91957C9, serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074
Validity
Not Before: Sep 24 17:35:10 2026 GMT
Not After : Oct 1 17:35:10 2026 GMT
Subject: CN=6ab55f4f-696f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:a8:e0:98:d7:18:5b:33:f1:5c:90:3f:67:
52:f1:a8:cd:be:40:c0:d1:15:d9:ac:11:63:50:51:
13:1e:32:73:82:5f:3c:96:94:1e:83:8e:d2:e5:2c:
d1:e6:01:a2:4f:f5:c6:d2:64:26:a6:35:3a:91:1e:
29:ac:d8:dd:91:9a:d4:16:39:5c:11:b0:06:b7:09:
65:5d:20:14:fd:0f:9c:82:85:68:28:b9:4d:a1:60:
b8:81:9a:1b:66:11:03:0d:38:17:d6:f4:7a:e5:67:
db:6d:aa:60:95:c9:2a:df:51:da:f6:f5:80:51:e8:
74:9e:05:78:0e:73:14:9b:21:25:0f:19:6d:ef:78:
b8:ed:0c:9a:84:0d:a5:da:c1:47:88:08:20:dd:78:
31:dc:86:ec:a9:58:6a:d2:9c:56:68:8a:4e:49:ac:
8d:90:98:1e:b9:5b:ef:d0:76:f1:7a:f4:40:75:37:
62:1d:72:7d:31:3b:b1:bc:60:60:c0:4f:b3:46:af:
25:07:af:58:58:f6:d7:30:87:f7:29:11:9a:3d:c0:
2a:5e:f4:88:01:ae:f0:81:ea:b0:8d:55:bb:a6:c2:
5b:45:32:42:7d:cc:71:22:80:b5:27:39:c2:03:60:
3b:ee:c8:ce:b5:fd:0c:ab:73:31:b1:aa:f7:09:d2:
50:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B1:D0:AB:1E:0E:0C:04:E1:14:56:8F:63:43:9C:4D:60:71:AE:FA
X509v3 Authority Key Identifier:
keyid:4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:cc:b2:4f:3c:25:d4:f4:a3:1b:cd:df:4a:3f:15:bc:65:2b:
c0:1b:f8:23:86:f5:b8:e2:b6:7f:d7:47:e3:79:cb:d9:82:8e:
1d:ec:e7:19:5a:66:53:5d:75:19:a6:9c:dc:bc:07:f9:0d:10:
26:45:dd:7a:6a:16:92:48:54:5f:5c:e3:ce:fd:93:0a:84:35:
79:82:6e:7c:98:c6:b5:74:19:7b:c0:ad:14:01:cb:33:fe:de:
34:13:dd:b7:db:c4:03:44:c5:f1:3f:7e:6f:27:b9:41:67:eb:
d2:1e:01:1a:58:c5:09:88:97:97:6c:da:6b:d3:4a:3f:5f:63:
78:0a:69:72:a0:b8:e4:13:aa:86:15:d2:a9:30:15:fd:f4:a3:
ea:96:e1:1e:c7:49:9f:cf:ed:4b:38:19:86:15:bf:45:33:22:
aa:55:75:17:e5:ac:34:13:e8:d4:b9:2e:84:bf:7e:c8:ee:ba:
d9:45:7d:18:e2:93:4f:32:dd:e0:3c:57:38:e2:71:ba:f6:fd:
2a:25:f1:bd:35:e9:de:d5:b9:84:43:d3:80:87:ac:3e:be:71:
65:1d:a2:7e:ca:0c:9a:00:9f:21:bd:a1:94:6a:d5:58:48:f5:
de:09:11:ae:93:06:4d:b9:0c:d0:0a:1a:49:c4:b0:0d:d6:f7:
4f:92:d8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:25:29 2026 by rpki-client