
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
File: tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft (raw, json)
Hash identifier: 9ZLe2P8L+X8PAcyQTIDvv7YgmzFev05u+g+Pv8V0txU=
Subject key identifier: AC:33:52:B6:F2:23:BB:46:85:21:62:21:BC:B0:CE:31:26:0D:E1:B1
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Certificate issuer: /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial: 01EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
Manifest number: 01D5
Signing time: Thu 23 Jul 2026 05:20:33 +0000
Manifest this update: Thu 23 Jul 2026 05:20:33 +0000
Manifest next update: Thu 30 Jul 2026 05:20:33 +0000
Files and hashes: 1: tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl (hash: OAh32vRETK6BNZGXFWXELD/LwawpFbPSuI5bbxHxUOA=)
2: 6D85335A58BC11F0983EE987C4F9AE02.roa (hash: bdKA7kvKI2THYNjeyi3Lbacr6XK2z8rAQaWiwHnpqT8=)
3: A6AB9D38335211F1960FCBDEC6833773.roa (hash: eXxCFDfnDfAFb+VxnPASq3AvIfkbg/uecOo6gz8yP10=)
4: 657EDAC0003D11F187167F2F4B6F56BC.roa (hash: 4QNpZ4lYAWDyFPtVqSrnEIjMO2wek++7TF/91yII7Vs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495 (0x1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Validity
Not Before: Jul 23 05:20:33 2026 GMT
Not After : Jul 30 05:20:33 2026 GMT
Subject: CN=6a61a4a1-081c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:e8:07:1e:3b:71:ca:b9:c1:6c:74:cd:cc:
48:6f:cb:10:62:a5:2d:b3:4a:1e:cf:ff:b9:b0:1c:
5e:5a:be:74:cf:07:09:bf:7c:2d:3a:0d:c3:d4:68:
f4:af:d1:98:c5:93:36:c3:57:10:70:19:1a:c0:bb:
9f:46:07:96:dc:95:1a:39:93:84:47:43:4e:d6:69:
15:0e:f4:c3:ec:45:08:32:cf:58:fa:f7:59:43:d1:
b3:0b:df:dd:c0:d4:ab:52:06:38:f7:45:f1:1e:82:
93:27:a5:80:37:44:71:e5:d0:2e:45:3a:3f:6f:e6:
79:8c:09:9e:73:27:8b:0b:2b:b3:f0:5e:9d:54:79:
4d:c1:39:7a:49:7c:4d:fd:08:56:0f:4a:c7:a9:73:
21:06:a5:cb:a1:3b:3a:9e:d2:32:ab:51:8d:5d:79:
27:fd:b0:4f:bc:6b:85:de:73:a7:96:01:9c:c6:38:
f5:cf:d4:96:c5:8e:a4:fa:02:d7:7b:5f:2e:10:64:
a4:05:a0:b2:ce:b0:ab:f8:39:72:24:e3:6a:f3:9a:
0f:41:0d:3e:6b:a4:95:9a:41:5c:52:4c:b2:68:8c:
f9:23:a7:da:89:5e:44:4c:40:1a:13:48:17:c6:53:
58:fe:35:b6:29:d8:0f:6e:9e:5f:81:2e:da:f7:76:
10:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:33:52:B6:F2:23:BB:46:85:21:62:21:BC:B0:CE:31:26:0D:E1:B1
X509v3 Authority Key Identifier:
keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ab:76:3a:84:97:2c:76:08:a9:ea:d5:34:a6:59:cc:ce:82:
cc:84:25:3f:c5:8b:fc:d8:25:f8:95:53:41:43:10:08:69:90:
bc:0c:54:82:d1:f1:a2:d7:2f:39:3c:a6:c3:db:f7:bd:85:82:
da:9f:1d:ed:7b:7a:c4:df:7f:24:81:b9:44:9f:ac:26:b6:2c:
ff:65:b4:37:15:40:68:7b:01:8a:91:3b:9b:ed:73:b1:43:44:
bc:8b:9b:a1:c4:0c:39:2a:31:f8:06:d1:3b:28:31:d0:cb:04:
ca:7d:de:19:c4:46:b7:e0:da:f3:73:0f:fa:a4:81:e3:7c:d3:
5c:84:37:35:f1:23:4c:c2:a9:1a:e8:5d:3e:1e:9d:45:01:96:
fe:c8:15:f3:78:8e:02:3e:af:be:35:8b:43:ad:8a:96:7d:bd:
3e:45:e7:c6:60:a7:4f:fc:69:d2:39:db:26:7c:66:cd:6b:2c:
4c:10:b2:20:7f:c3:f3:fc:59:eb:17:57:42:a9:9d:c7:10:c3:
98:24:ad:ed:86:0a:bb:45:03:7c:a1:5f:ce:92:e5:dd:d8:17:
a7:80:6d:c3:40:49:9f:8c:25:8d:a2:5f:4e:71:27:c5:34:20:
68:cc:2a:4a:79:47:c4:6b:a5:41:70:a3:d6:c3:79:e0:b2:07:
61:b1:a0:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ4NDkxMTAvBgNVBAUTKEI2Q0MwMkE3REI4QTREQjUzMEYxMTJCNjIyNEYxOTA4
MDg2OEZCRDkwHhcNMjYwNzIzMDUyMDMzWhcNMjYwNzMwMDUyMDMzWjAYMRYwFAYD
VQQDEw02YTYxYTRhMS0wODFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvxLoBx47ccq5wWx0zcxIb8sQYqUts0oez/+5sBxeWr50zwcJv3wtOg3D1Gj0
r9GYxZM2w1cQcBkawLufRgeW3JUaOZOER0NO1mkVDvTD7EUIMs9Y+vdZQ9GzC9/d
wNSrUgY490XxHoKTJ6WAN0Rx5dAuRTo/b+Z5jAmecyeLCyuz8F6dVHlNwTl6SXxN
/QhWD0rHqXMhBqXLoTs6ntIyq1GNXXkn/bBPvGuF3nOnlgGcxjj1z9SWxY6k+gLX
e18uEGSkBaCyzrCr+DlyJONq85oPQQ0+a6SVmkFcUkyyaIz5I6faiV5ETEAaE0gX
xlNY/jW2KdgPbp5fgS7a93YQTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKwzUrby
I7tGhSFiIbywzjEmDeGxMB8GA1UdIwQYMBaAFLbMAqfbik21MPEStiJPGQgIaPvZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDg0OS8wODdEM0VFOEU2
NkQxMUVFOEEzMUE5NjBDNEY5QUUwMi90c3dDcDl1S1RiVXc4UksySWs4WkNBaG8t
OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Rzd0NwOXVLVGJVdzhSSzJJazhaQ0Foby05ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDg0OS8wODdEM0VFOEU2NkQxMUVFOEEzMUE5NjBDNEY5QUUwMi90c3dDcDl1S1Ri
VXc4UksySWs4WkNBaG8tOWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALKt2OoSXLHYIqerVNKZZzM6CzIQlP8WL/Ngl+JVTQUMQCGmQvAxUgtHxotcv
OTymw9v3vYWC2p8d7Xt6xN9/JIG5RJ+sJrYs/2W0NxVAaHsBipE7m+1zsUNEvIub
ocQMOSox+AbROygx0MsEyn3eGcRGt+Da83MP+qSB43zTXIQ3NfEjTMKpGuhdPh6d
RQGW/sgV83iOAj6vvjWLQ62Kln29PkXnxmCnT/xp0jnbJnxmzWssTBCyIH/D8/xZ
6xdXQqmdxxDDmCSt7YYKu0UDfKFfzpLl3dgXp4Btw0BJn4wljaJfTnEnxTQgaMwq
SnlHxGulQXCj1sN54LIHYbGgrQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:25:44 2026 by rpki-client