
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
File: 0TPfZxvFk0ayGhHuzAit0MCiCQo.mft (raw, json)
Hash identifier: dhgGw0Cw6Dpr6QQdz2pV+jiIn1A9eRzLnAG7Bpn0sgc=
Subject key identifier: D5:C2:9B:99:68:5D:3C:05:48:14:6D:F7:31:0B:8C:E8:35:99:FD:C4
Authority key identifier: D1:33:DF:67:1B:C5:93:46:B2:1A:11:EE:CC:08:AD:D0:C0:A2:09:0A
Certificate issuer: /CN=A91A8276/serialNumber=D133DF671BC59346B21A11EECC08ADD0C0A2090A
Certificate serial: 0860
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
Manifest number: 0860
Signing time: Tue 12 May 2026 20:48:36 +0000
Manifest this update: Tue 12 May 2026 20:48:35 +0000
Manifest next update: Tue 19 May 2026 20:48:35 +0000
Files and hashes: 1: 0TPfZxvFk0ayGhHuzAit0MCiCQo.crl (hash: TURzA+KDi+Hhau7356O2oWxUbrstBrGjQaoF+3+HTxo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.crl
rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2144 (0x860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8276, serialNumber=D133DF671BC59346B21A11EECC08ADD0C0A2090A
Validity
Not Before: May 12 20:48:35 2026 GMT
Not After : May 19 20:48:35 2026 GMT
Subject: CN=6a039224-01c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:96:86:1d:6b:18:c5:d1:7f:3d:b9:31:ea:
ff:42:ce:01:22:5c:64:11:ee:34:16:b3:06:0a:90:
fb:8a:8a:69:a0:60:66:2e:fe:19:22:03:c0:97:83:
cc:89:d3:e5:af:32:f8:c3:99:5e:04:67:18:f3:95:
24:9e:cb:4d:b8:e7:0c:24:d1:76:b2:7c:d9:48:d4:
f7:56:2e:c3:c5:f7:23:48:f8:ee:f9:e1:bd:e7:76:
09:08:16:ed:22:d5:48:d1:04:a5:69:4b:cc:98:81:
0e:37:fe:ac:3a:63:2c:29:f0:15:97:cb:67:94:06:
7f:0c:51:4a:53:22:d3:58:0b:d4:4e:17:5e:09:63:
9c:0b:73:e5:bc:1e:ce:34:4e:3c:d0:ee:18:8e:f6:
fd:e0:4f:95:fd:e2:e9:b0:a0:b2:17:64:a5:38:5b:
f4:ca:dc:aa:75:e3:1d:89:0d:1b:4a:df:57:a6:a0:
22:5f:6c:da:92:a7:4f:69:9d:7d:23:be:90:7d:8e:
66:cc:14:db:e4:f4:6c:62:b7:d0:55:a7:a5:d4:2d:
53:b4:77:3c:66:c7:b1:c0:7d:89:82:41:37:d4:0b:
87:e5:90:4a:5d:4d:dc:b2:89:6b:1d:ce:45:0f:dd:
6c:a5:9a:57:b4:b9:59:b3:db:f1:eb:ac:99:82:29:
15:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C2:9B:99:68:5D:3C:05:48:14:6D:F7:31:0B:8C:E8:35:99:FD:C4
X509v3 Authority Key Identifier:
keyid:D1:33:DF:67:1B:C5:93:46:B2:1A:11:EE:CC:08:AD:D0:C0:A2:09:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:70:c7:a3:2a:1a:f9:44:5d:41:96:9b:5c:5d:86:1f:e4:47:
24:f5:83:d3:7c:3a:73:af:2a:b7:54:98:e9:8d:a2:b5:d9:90:
5c:4c:52:ac:3c:fb:b5:01:c3:a8:c6:66:ce:3e:69:c9:35:f5:
cd:22:00:64:f1:08:c9:e8:37:6c:58:5f:09:99:9f:c4:8d:60:
08:73:2a:2f:bf:c0:d2:41:42:61:8f:58:0e:f1:1f:65:db:60:
88:94:c0:21:0d:f0:85:38:2e:68:14:ad:87:e4:93:06:14:04:
c9:a7:21:2f:f9:f0:9e:2d:71:d0:13:1f:56:ff:b8:45:5f:9c:
89:eb:22:cc:03:c0:02:ad:4e:87:ee:c6:2e:9c:c6:4a:2e:d4:
95:f9:60:d1:c0:d2:ae:f2:d6:ad:89:bf:b9:39:7b:0c:e4:60:
dc:23:16:d5:d0:80:48:2f:8e:c6:bb:05:e2:15:ce:3b:f9:f2:
97:64:1f:00:12:9a:77:80:a2:31:85:ba:a5:e1:fc:ff:29:a4:
c8:75:e4:55:5d:f5:2d:29:92:26:9c:b9:0d:e5:b6:fc:78:f1:
ae:f9:f1:2f:0e:7b:45:2a:71:c6:45:7d:71:a1:48:a3:3f:8b:
a6:c4:26:ce:bc:e4:41:ec:8e:8b:02:de:33:d5:1a:7f:8c:f3:
d8:81:88:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:34:29 2026 by rpki-client