
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
File: tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft (raw, json)
Hash identifier: lCTh9sy3UWbnOlSDcpDMya2a8ysGS/hewWVgFqplpuI=
Subject key identifier: 73:2E:AB:54:CF:EA:63:AF:1E:8E:70:BC:D1:59:BD:21:EC:AD:B0:F1
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Certificate issuer: /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial: 01AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
Manifest number: 0195
Signing time: Wed 25 Mar 2026 03:54:26 +0000
Manifest this update: Wed 25 Mar 2026 03:54:26 +0000
Manifest next update: Wed 01 Apr 2026 03:54:26 +0000
Files and hashes: 1: tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl (hash: IO3DYrLDv3D2OIy2PgkXimTvF6HrekBYvpJeCNYWaIM=)
2: 657EDAC0003D11F187167F2F4B6F56BC.roa (hash: weYMUmUD1ARPw1SwwWxeCqTkxxR1HXaS9FBc7fRBcGo=)
3: 6D85335A58BC11F0983EE987C4F9AE02.roa (hash: MThr+gzKKGYuV0BMg8mTFAcI/8CCUv1CBgataxg2Fo0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Validity
Not Before: Mar 25 03:54:26 2026 GMT
Not After : Apr 1 03:54:26 2026 GMT
Subject: CN=69c35c72-a2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:08:6f:2d:bb:55:3c:52:70:6e:5f:20:16:4c:
6a:94:53:6b:a2:f3:73:e5:e7:a8:05:e8:2e:55:2c:
5b:c9:70:7b:4b:ef:2f:28:31:11:2d:e6:cc:c0:a7:
80:28:e7:dc:43:42:6d:a7:a0:11:ca:50:ab:ca:e2:
71:0e:27:03:96:85:25:50:b7:5b:22:6e:be:81:b4:
73:4d:f9:59:8e:4e:d5:16:fd:eb:87:8e:c4:fb:02:
90:fd:80:91:ae:4c:03:f1:a2:42:53:20:56:d1:1c:
b0:37:0f:67:1a:cc:5b:41:8a:76:93:2d:43:42:f8:
40:4b:b6:57:d4:ca:ec:5b:51:5e:38:e9:bd:e5:ef:
08:ec:4e:a2:10:2e:f8:bf:dd:ca:ad:fd:fd:ed:c0:
24:d7:34:d5:a7:75:b1:8f:df:46:13:1b:cd:96:fc:
21:ff:ef:b9:30:34:59:44:e0:d8:6b:63:3e:80:32:
a1:96:7d:3a:a6:41:b9:d9:5c:ce:76:6e:1d:f0:a6:
16:94:4f:3a:6a:2b:72:30:30:4b:30:fe:e1:48:4e:
3f:6c:f8:ff:2c:48:6a:ec:da:8e:e6:2f:a3:fb:8f:
cf:1c:6a:da:85:a2:06:4a:89:99:73:ed:91:8a:90:
3b:23:d5:0a:75:b6:30:9a:59:43:67:5b:10:07:dd:
16:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2E:AB:54:CF:EA:63:AF:1E:8E:70:BC:D1:59:BD:21:EC:AD:B0:F1
X509v3 Authority Key Identifier:
keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:22:4a:69:c6:5f:97:25:e1:65:9e:39:d9:01:6d:36:54:c3:
41:2f:f4:57:6e:3b:5c:85:c4:96:42:08:d0:3f:17:09:52:fa:
86:42:93:ad:d2:af:5f:1e:6c:7a:51:71:a5:bd:13:2f:f0:a2:
f3:f6:05:2d:9d:d2:1a:68:51:b0:4c:60:42:83:ae:a4:26:63:
7c:66:82:ee:89:08:13:c5:22:96:a3:2f:42:d5:64:89:a3:7b:
34:0a:9d:89:32:58:c3:74:af:c4:6c:33:34:78:88:83:15:16:
e2:ff:09:14:2d:e0:aa:f2:69:2f:46:fe:07:b5:15:f3:34:26:
f3:48:fb:61:84:56:c1:6c:c8:b7:77:ba:de:b5:57:a5:9a:28:
26:56:09:56:5d:88:f6:fd:e1:6d:59:d0:15:65:b0:96:97:08:
50:33:74:00:96:61:ce:4c:30:dc:ca:38:9d:b6:4c:9f:dc:51:
4a:69:67:02:c8:6f:1a:47:f6:14:6e:6a:7a:94:7b:41:59:d7:
57:3e:91:f3:4b:9c:16:5f:01:43:f2:96:60:5d:8a:2f:a8:4e:
dd:fc:9f:50:14:c8:01:d7:db:1b:a1:8b:46:45:a0:ae:9f:88:
dd:77:ed:95:bc:24:18:40:3a:4c:54:96:d7:ba:70:87:4d:15:
78:29:20:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:13:58 2026 by rpki-client