
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File: tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier: qeP51ZYyTFHZOjSGhNF+QrFhN18kM1DzWg6m+o4n+1g=
Subject key identifier: 0A:31:1A:E8:8E:1E:0F:D4:2B:14:CA:30:5E:48:1F:12:25:39:07:6F
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0E0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number: 0D09
Signing time: Wed 23 Sep 2026 12:20:21 +0000
Manifest this update: Wed 23 Sep 2026 12:20:21 +0000
Manifest next update: Wed 30 Sep 2026 12:20:21 +0000
Files and hashes: 1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: Q1JOX9qsun9c0Ud4G5/GhUY2o0Qw3Xhgr/T61Q2sZYE=)
2: 1F379CE69D2211F1A2D31D4A4411F970.roa (hash: hHqfaMqHudinN58Q6SY+uw71820GehKW91mX6AroNpg=)
3: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: 0R8aUOkuvkxBptQCqK8x5AV36AA1pHonSA2IeVHkDK4=)
4: D9D9DEF8A69911F182359F0F3411F970.roa (hash: kSMdikhUB64TDDAQf33yJf5KmpRLoHxtdZFPCRUfWx0=)
5: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: rfIVMs6AUfnF9P9/mHach4AIencfTT3AboN2vIjJlGQ=)
6: 60A1565CA1F211F1993DFC693F11F970.roa (hash: RFHpBcGzcu8zc3vv4bbihIv1/WTO6k7Pot6Tojz87xo=)
7: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: aEhA9+ssD2dfx+1WtFOaw2FrI9zywwb1i6+vFoIN8fo=)
8: F04C908AA85711F18FFCAC0D4011F970.roa (hash: XQT6focf8duOylg1ZZ3HUJmMwp7Rdw/KmIis9QJeUpg=)
9: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: X5kHDpuuQNfIGRpaueB+R7zUfzuivixJGb6q6/nzsAU=)
10: D36559D68D7511F1A94DC67B3211F970.roa (hash: Fy8jBtvRVu9jhps9hbfZRQWKRAOfiyIIynpps0EdNs4=)
11: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: lZKpR1VVIPheOf685hGoxyJuXh0TJ+bcZ5UNcYowwXY=)
12: 7B0202308D7511F1B81A5A6E3211F970.roa (hash: cLjdhUjlRnZ/CysDyvE5WxC4HuYKkSjsastV+5g0hOA=)
13: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tLlrYfQgXxnaToikebv9ZSOJv+09BIPvjOuMTXnI+m0=)
14: C7BD7A22908211F1B42CEF406511F970.roa (hash: URZ1HAVsZ8gDNHs/f+Mvco7+rFhBUEkt2pK3T1DSEzw=)
15: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: A4zYqw73DHHyadBQLcyhIlD6IDAEqxDy3foGsjv4EZ8=)
16: F894F5B0E09411F0B3B2B389426F56BC.roa (hash: ECJMyzNQQdPVr4eVezuJlY7AiD6IT4ky/xg4cQ7ishs=)
17: 4A7E2898A5C411F19C8FF2B67011F970.roa (hash: FjThLBw2H1Vgo2XVwexsW1c+HATo1/D1xZQEZgYo2F0=)
18: 7CDB77C68D7511F1B81A5A6E3211F970.roa (hash: qV41HhWJkk9bGNMXnKLZx7jPUgw0pOayrAqVgkbP6uY=)
19: BFF3DC6A8D7511F1984B69733211F970.roa (hash: f289QnqNyHbHfv+02sdYQZ3fZtIcF9r7+WPKnhUBFuI=)
20: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 6JLMteJnja7+tiZnKdI5bf0UkqKb/Uh5AX2ANHa//84=)
21: 6ACD5ACC227711F1A91DCF18A4833773.roa (hash: TJMnHoqNrDu0s7s8nY8tdFhEqoWxtnw6hx5yIb/HoEo=)
22: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: 4C096ArVcesRWHBQTftG7NRJZ0QLoRJXsJlu3Awv0GU=)
23: 3486A02AA5C311F19BC95E547011F970.roa (hash: vs7sa5NS68Qk8KNYKrQf+y7MRMvUgeeC0OfnYx4e6O4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 12:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3597 (0xe0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Sep 23 12:20:21 2026 GMT
Not After : Sep 30 12:20:21 2026 GMT
Subject: CN=6ab3c405-7457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:ca:18:91:6e:05:0b:f6:bc:fb:c5:8a:38:
c3:de:3c:fa:4e:61:9f:54:b5:52:da:87:f4:84:24:
86:f5:3d:46:9b:5b:5b:96:62:5a:ec:59:00:a1:4c:
f5:34:df:b3:97:89:8b:0f:8d:53:02:1e:45:41:2c:
44:ee:be:90:a9:16:be:e7:84:37:be:53:f9:e5:f3:
56:31:91:0a:04:bf:66:08:bb:f4:1c:3a:9b:b3:d6:
98:3e:fb:c9:c6:05:13:6e:88:2d:d9:b0:ec:56:1d:
04:c8:be:26:18:8d:ce:c7:33:ba:7f:4f:5b:80:b4:
9e:5a:be:fa:f7:69:9b:36:d0:84:2c:ea:aa:55:ff:
ab:ed:94:9a:24:a2:79:b5:4e:a8:df:06:d5:86:b6:
4e:e0:95:c3:a7:83:a8:ad:bf:0c:bd:97:0f:da:d1:
20:e1:0f:bd:77:90:76:69:18:d1:ee:dd:d0:16:f3:
6d:31:c4:fb:ad:8b:09:a8:fa:b7:42:81:b6:48:69:
50:41:b1:d6:18:47:1a:b5:8c:83:b5:64:c5:e1:63:
9f:bf:42:ef:a9:50:ee:9b:f9:c2:e7:cb:37:dd:77:
80:43:64:c4:2b:39:52:f7:e4:e9:c8:80:fa:62:f6:
c8:ec:7d:84:23:d8:5f:a2:90:07:a3:ed:7a:22:4e:
07:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:31:1A:E8:8E:1E:0F:D4:2B:14:CA:30:5E:48:1F:12:25:39:07:6F
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f8:c3:b6:4d:d3:d0:75:87:77:b8:c5:31:c4:c2:2e:c9:2d:
9b:04:00:1c:4c:22:ac:c7:f0:2d:bd:61:46:77:10:53:a8:45:
b7:6f:ed:c6:c8:06:19:f3:b4:34:73:7e:78:a3:5c:94:03:ac:
26:f1:02:3a:76:f8:e4:23:38:b3:da:fa:9b:0b:2d:5e:3a:cc:
bb:ca:fe:a9:0c:66:65:aa:88:34:18:d0:7c:66:cf:0b:12:02:
2e:6a:0c:66:02:fc:dd:34:99:90:2e:dd:3d:d6:bf:6e:99:63:
08:5d:71:1d:49:d0:40:c4:f2:4c:34:9c:04:cc:53:1e:8a:01:
ed:83:65:0a:24:27:ba:9d:a5:a3:a4:9b:f7:e5:90:da:95:d5:
1c:d0:6d:aa:c8:87:33:2c:88:4f:5a:9b:dd:d4:e9:f4:46:72:
90:3a:2e:09:d4:67:c6:a7:8d:e4:23:53:b0:98:e7:47:1a:56:
4b:b6:78:a2:49:24:70:51:52:dd:19:2d:d6:80:3f:0a:c3:53:
37:8e:bc:cb:06:f4:cc:c2:c8:58:cc:ad:1d:86:d8:47:dc:4c:
eb:bc:2d:c7:a5:e8:b6:8a:ad:32:cc:ed:ce:ac:32:b5:20:39:
9c:52:09:c3:47:de:56:5c:2f:1b:50:ee:46:ad:b9:c7:dd:40:
72:5c:21:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:53:36 2026 by rpki-client