
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft
File: TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft (raw, json)
Hash identifier: sRsYEQMmH9p85L2I1dLKnjh2dTkDM7QhcUtg39W+pUg=
Subject key identifier: 31:12:B7:36:8E:20:90:DA:C8:5D:63:B0:46:C3:B0:6D:F8:1D:BB:68
Authority key identifier: 4E:D0:88:7B:D3:04:E0:4C:98:FB:A5:3B:9B:9B:02:BD:E4:38:97:03
Certificate issuer: /CN=A91B46FE/serialNumber=4ED0887BD304E04C98FBA53B9B9B02BDE4389703
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft
Manifest number: A8
Signing time: Thu 23 Jul 2026 09:02:02 +0000
Manifest this update: Thu 23 Jul 2026 09:02:01 +0000
Manifest next update: Thu 30 Jul 2026 09:02:01 +0000
Files and hashes: 1: TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl (hash: eqZZOtDqQ5N4D10yQjGi2Z2aCgtBFId216SuDfgmPlE=)
2: 24C9831E83E611F0AF39BE57C4F9AE02.roa (hash: LsaU+0/HBMpopK0RqA0eoAaAu/VdELeTd9+UWB8c6C0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl
rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B46FE, serialNumber=4ED0887BD304E04C98FBA53B9B9B02BDE4389703
Validity
Not Before: Jul 23 09:02:01 2026 GMT
Not After : Jul 30 09:02:01 2026 GMT
Subject: CN=6a61d88a-6c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:e5:41:79:e6:75:b1:c0:99:a4:f2:e4:2e:
06:33:b4:28:8b:c9:e0:6e:c1:70:57:7b:31:0a:a4:
89:2b:21:4b:14:a8:82:4b:15:90:cb:50:68:73:6c:
5e:bb:27:0b:59:f7:70:a4:d2:70:65:fb:6b:3c:22:
4f:c3:31:4d:b1:3c:da:d2:ee:19:1f:ae:ae:9f:f5:
f3:89:ae:76:2c:50:96:0b:56:26:57:c9:f4:ae:5d:
57:4e:ac:62:7b:01:3b:5f:d6:43:eb:9d:b6:bc:fd:
79:91:da:50:e1:2b:4f:48:f2:99:1b:ae:e2:46:3a:
4e:e7:e5:dd:fc:c5:67:78:6e:59:ad:2e:00:f7:6b:
a3:0d:9f:12:24:5a:05:90:60:6a:22:e9:10:4b:4c:
2d:75:06:1f:0d:5c:86:ee:da:e0:5b:27:c4:4e:28:
22:b8:ee:ca:e9:35:41:c2:37:ee:15:d9:54:12:17:
69:68:dc:96:45:17:2a:23:3f:66:b0:6f:8a:d7:07:
cf:54:25:90:de:1d:73:bd:3d:56:e3:5e:82:35:bd:
1c:07:96:47:7b:78:2a:7b:64:f0:b3:82:81:18:b2:
e9:38:fc:4b:81:09:11:01:61:c7:81:0c:d5:6c:13:
e7:5d:2e:2a:b8:b5:30:e2:2c:12:cb:03:ef:f7:a9:
50:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:12:B7:36:8E:20:90:DA:C8:5D:63:B0:46:C3:B0:6D:F8:1D:BB:68
X509v3 Authority Key Identifier:
keyid:4E:D0:88:7B:D3:04:E0:4C:98:FB:A5:3B:9B:9B:02:BD:E4:38:97:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2f:cf:46:d7:48:24:89:25:7f:1d:c4:db:fb:bf:77:32:6f:
6e:db:91:1f:d4:5b:c2:3b:a6:72:3e:35:27:3e:20:dc:f3:14:
06:56:9e:3a:50:1c:90:7f:93:c7:5a:0e:a1:1a:36:81:42:c8:
12:f6:61:48:0b:41:21:bc:8f:64:73:7d:fb:df:83:74:92:72:
07:f1:bd:ff:b1:59:4c:56:b8:0f:ab:fa:b8:d3:d2:14:4a:f2:
a0:b8:71:4a:a6:b2:a8:4f:54:33:7d:e5:bc:9d:18:53:06:c9:
05:43:b9:68:d7:0d:96:1f:c1:2a:a1:0a:0a:2e:1c:ef:c2:7c:
57:60:49:a5:94:6b:b5:2c:07:87:f6:72:d1:3b:e9:59:5f:c9:
e3:d1:9a:a3:d5:be:e8:6c:52:e0:05:6d:4b:19:f9:f5:57:6f:
22:65:8d:63:6c:c2:c0:e4:a5:f9:d7:14:69:19:f2:6a:24:75:
a9:98:b1:b3:c7:a6:0c:b8:e4:3e:b4:da:74:7a:95:23:84:be:
25:51:63:c6:e6:af:63:43:02:3d:21:6e:7a:89:0f:67:bc:56:
fd:fe:34:73:70:6a:dd:26:15:3c:88:6d:b1:e4:dd:c6:6e:98:
88:34:2e:6f:6b:4c:01:d1:e5:21:7f:66:b7:9d:93:f5:e0:44:
3b:6a:0a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:36 2026 by rpki-client