
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.mft
File: TdgDorFJaSWJyLWTW-UwEPhvP5Y.mft (raw, json)
Hash identifier: cl7Z+9WKBYddhCsBCfqr7meBXKjV3zS+xhCuO80Fkn8=
Subject key identifier: 9A:A9:AD:83:52:52:70:82:97:91:82:09:2A:F1:57:B1:3B:AE:10:96
Authority key identifier: 4D:D8:03:A2:B1:49:69:25:89:C8:B5:93:5B:E5:30:10:F8:6F:3F:96
Certificate issuer: /CN=A91ADCB5/serialNumber=4DD803A2B149692589C8B5935BE53010F86F3F96
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TdgDorFJaSWJyLWTW-UwEPhvP5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 10:33:20 +0000
Manifest this update: Thu 23 Jul 2026 10:33:20 +0000
Manifest next update: Thu 30 Jul 2026 10:33:20 +0000
Files and hashes: 1: TdgDorFJaSWJyLWTW-UwEPhvP5Y.crl (hash: D6WxcDt426m+zroqfUQQX7ybekwZFpGojBBOpXDIo60=)
2: 444120CE2D6111F1A40866B8CB833773.roa (hash: ZAH3UvNZsRyQgkmq6DAPegLexqNQ6jKxjrSkeAlJ2aM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.crl
rsync://rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TdgDorFJaSWJyLWTW-UwEPhvP5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADCB5, serialNumber=4DD803A2B149692589C8B5935BE53010F86F3F96
Validity
Not Before: Jul 23 10:33:20 2026 GMT
Not After : Jul 30 10:33:20 2026 GMT
Subject: CN=6a61edf0-312c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:d0:a7:7e:f5:58:14:2d:55:6e:35:93:57:
54:14:9b:2d:fc:a5:7a:ef:53:3e:33:aa:ed:b5:46:
32:4d:15:6e:4a:bb:00:59:e3:f1:80:fd:d5:43:51:
f2:b5:aa:ca:db:f9:51:4d:84:5e:30:7f:59:48:0e:
44:3b:f3:2a:0e:ef:fc:50:0a:c1:0a:37:9c:85:52:
1f:f4:ce:6a:dd:1c:d7:ce:e4:9e:bd:b6:14:98:7b:
9f:c8:d0:06:53:eb:8f:ee:a7:c5:fb:46:49:9e:d4:
e8:78:bf:f7:db:43:35:aa:f4:84:63:34:b9:6e:68:
85:01:fa:dd:56:bb:64:87:01:2a:62:0a:93:6c:bf:
fc:3a:71:ba:ce:0b:11:bd:ef:ef:6c:74:b8:80:a2:
bc:f5:79:40:08:c0:1f:51:93:dd:b0:5d:19:88:4a:
cc:9a:33:c6:29:c7:0c:2b:f6:f8:f2:6c:ff:8e:cf:
d6:b2:35:9f:7b:75:81:e1:4a:eb:13:1e:03:65:bd:
e4:f6:ab:38:0e:99:e4:0a:5c:7e:04:65:93:bb:ab:
1f:ef:f8:56:b4:bc:8d:05:a7:2d:fa:f9:72:1f:52:
8a:0b:de:e1:04:18:a7:77:53:73:39:9e:6d:77:19:
60:0e:38:25:15:27:9e:5e:11:c0:b4:4f:30:6c:95:
f6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A9:AD:83:52:52:70:82:97:91:82:09:2A:F1:57:B1:3B:AE:10:96
X509v3 Authority Key Identifier:
keyid:4D:D8:03:A2:B1:49:69:25:89:C8:B5:93:5B:E5:30:10:F8:6F:3F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TdgDorFJaSWJyLWTW-UwEPhvP5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:9d:83:ba:52:ee:76:78:93:a9:15:8b:fa:c7:e7:6d:2a:ca:
04:2b:72:54:32:9b:81:22:68:d9:39:e4:9e:28:78:56:33:bc:
08:3e:d5:35:42:bf:29:ff:64:7c:d6:1b:68:6f:b6:4f:06:69:
75:f4:1a:45:20:b8:82:98:c5:34:7d:52:22:05:bb:19:f8:a2:
3e:da:e2:56:e3:0d:ac:fd:12:f4:4e:96:a2:8e:86:c3:9e:a9:
07:37:f2:34:0b:d4:ad:93:a6:dc:87:9a:b0:a7:77:4a:94:a9:
38:9c:f8:a1:59:d0:2f:ef:9f:73:b8:6f:dd:ce:0c:3a:ce:09:
9e:e9:c4:f2:f7:c8:31:91:25:5c:ab:e6:2a:b8:6c:a8:79:c4:
fc:04:c5:09:d1:ab:eb:93:61:9c:ca:7c:40:4d:fc:42:2b:c1:
f7:26:b4:8a:44:9c:2b:f3:c3:92:a2:76:db:67:98:a6:c0:06:
93:41:db:ad:2e:16:40:97:8f:27:eb:b3:75:f6:04:79:7a:e8:
78:cc:95:e5:88:95:a1:ad:12:4c:bf:05:3f:6f:cd:de:ec:91:
aa:e3:74:7b:0a:0c:f8:04:52:07:e9:a5:12:98:bc:19:2c:09:
e3:9e:e3:d5:b5:3f:c3:31:f9:39:36:4d:8f:7d:05:67:79:2e:
27:88:a7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:00:27 2026 by rpki-client