
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft
File: tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft (raw, json)
Hash identifier: dOebgqotnhUSP71ECj8JZTwF5penb8ATQvi8W+A4F44=
Subject key identifier: BA:6E:D1:9A:82:04:51:17:52:69:1C:25:4E:CE:99:9E:88:C7:57:94
Authority key identifier: B5:FD:AD:3D:18:E7:46:24:CB:39:42:3F:B5:14:CA:DB:A6:79:26:E6
Certificate issuer: /CN=A91B637A/serialNumber=B5FDAD3D18E74624CB39423FB514CADBA67926E6
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tf2tPRjnRiTLOUI_tRTK26Z5JuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft
Manifest number: 5B
Signing time: Wed 23 Sep 2026 07:56:17 +0000
Manifest this update: Wed 23 Sep 2026 07:56:17 +0000
Manifest next update: Wed 30 Sep 2026 07:56:17 +0000
Files and hashes: 1: tf2tPRjnRiTLOUI_tRTK26Z5JuY.crl (hash: OnnwCzGunJzOiRYvWDkfXNFgQb+SHdcjkWJeI52JqRM=)
2: D0F478D02E7011F1B3CAF1C4A3833773.roa (hash: bM7Q3Goo2yIx6mUK1MyLG8gg5MzYy2/CvHGPwmnvAsM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.crl
rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tf2tPRjnRiTLOUI_tRTK26Z5JuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B637A, serialNumber=B5FDAD3D18E74624CB39423FB514CADBA67926E6
Validity
Not Before: Sep 23 07:56:17 2026 GMT
Not After : Sep 30 07:56:17 2026 GMT
Subject: CN=6ab38621-25ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:c6:1b:44:7a:5c:03:c5:58:f2:0b:57:31:
44:2a:7f:23:57:26:25:9e:43:bf:88:92:72:d6:d8:
e1:3c:8f:70:96:ac:36:dd:3b:c8:70:d4:ee:63:c9:
32:71:04:3b:b0:1b:34:35:ec:ff:b9:26:60:8e:11:
33:08:3d:4b:7a:dc:c9:12:39:df:4b:e7:db:4e:2e:
11:fc:0c:f9:1b:fb:43:be:b8:20:ad:76:da:c2:5a:
66:84:b0:00:f1:44:ee:f2:28:34:6c:9f:68:41:a5:
c5:dc:2f:d1:a7:8b:48:0e:c7:f3:04:91:3b:5b:3d:
ae:2c:cb:2b:03:6b:05:73:f5:3e:e9:6f:25:fe:f6:
cf:96:cf:71:dc:42:8a:19:6c:b3:de:28:d6:6f:5b:
20:b5:58:56:31:00:97:8a:23:e9:5f:1f:54:ed:ab:
e1:bf:62:10:fe:fc:29:06:e1:0c:f1:44:d6:3a:68:
2a:a8:47:62:39:d2:bc:ca:97:f9:e9:0b:4d:ff:b7:
2a:c8:1e:a6:a1:b0:ab:e7:21:df:44:08:14:29:28:
2e:36:bd:62:4d:12:bb:d9:51:dd:6a:cf:60:3a:c4:
e2:ed:6d:67:25:67:5d:4e:d0:7d:39:9b:bd:80:45:
fe:ba:3d:d2:be:c5:61:25:d0:e6:9d:45:3d:82:6d:
53:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6E:D1:9A:82:04:51:17:52:69:1C:25:4E:CE:99:9E:88:C7:57:94
X509v3 Authority Key Identifier:
keyid:B5:FD:AD:3D:18:E7:46:24:CB:39:42:3F:B5:14:CA:DB:A6:79:26:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tf2tPRjnRiTLOUI_tRTK26Z5JuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a0:c5:f7:8d:3e:88:26:3a:45:86:2d:f0:1d:c0:ce:44:78:
cf:06:f1:ad:86:57:b6:0a:27:d5:c9:4c:b3:85:3d:03:2f:22:
dc:3f:6c:04:49:03:82:f9:8d:5c:cf:50:4a:a5:c6:86:11:5b:
b9:06:00:82:58:87:45:3c:ee:53:3f:2e:7e:bd:a2:24:dc:66:
4c:93:4a:61:81:41:b7:32:d6:08:2b:41:cc:ca:fc:c4:d4:55:
bd:85:07:2e:cb:76:8b:82:ba:c5:19:d2:2a:e9:51:8a:ba:60:
33:17:19:3a:d3:54:11:49:77:28:9a:46:1c:a8:f0:3d:cb:fd:
26:3a:85:ca:02:39:ad:ef:c3:c9:fc:d9:18:de:08:10:e7:a1:
c0:00:23:67:a6:e1:2b:ee:c4:ab:31:e6:bb:fc:ef:b6:48:8d:
d4:87:a7:ac:1d:e1:3a:90:fe:21:46:74:59:4a:75:7b:b3:23:
aa:bc:22:46:00:8d:f6:be:94:37:30:d1:a5:ac:b7:20:f6:17:
15:08:49:15:6e:23:ce:3d:e6:20:6d:1f:97:61:8b:fa:a7:32:
b0:19:c5:55:35:4c:65:aa:0c:22:98:b6:bf:17:43:06:a1:aa:
36:89:d9:23:2f:7c:48:42:ca:d9:09:18:7d:77:25:e5:07:71:
2a:2c:03:ed
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NjM3QTExMC8GA1UEBRMoQjVGREFEM0QxOEU3NDYyNENCMzk0MjNGQjUxNENBREJB
Njc5MjZFNjAeFw0yNjA5MjMwNzU2MTdaFw0yNjA5MzAwNzU2MTdaMBgxFjAUBgNV
BAMTDTZhYjM4NjIxLTI1YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDARsYbRHpcA8VY8gtXMUQqfyNXJiWeQ7+IknLW2OE8j3CWrDbdO8hw1O5jyTJx
BDuwGzQ17P+5JmCOETMIPUt63MkSOd9L59tOLhH8DPkb+0O+uCCtdtrCWmaEsADx
RO7yKDRsn2hBpcXcL9Gni0gOx/MEkTtbPa4syysDawVz9T7pbyX+9s+Wz3HcQooZ
bLPeKNZvWyC1WFYxAJeKI+lfH1Ttq+G/YhD+/CkG4QzxRNY6aCqoR2I50rzKl/np
C03/tyrIHqahsKvnId9ECBQpKC42vWJNErvZUd1qz2A6xOLtbWclZ11O0H05m72A
Rf66PdK+xWEl0OadRT2CbVN3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUum7RmoIE
URdSaRwlTs6ZnojHV5QwHwYDVR0jBBgwFoAUtf2tPRjnRiTLOUI/tRTK26Z5JuYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2MzdBLzNBQzAzQjU2MkU3
MDExRjE4MUM1REY3M0EzODMzNzczL3RmMnRQUmpuUmlUTE9VSV90UlRLMjZaNUp1
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdGYydFBSam5SaVRMT1VJX3RSVEsyNlo1SnVZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2
MzdBLzNBQzAzQjU2MkU3MDExRjE4MUM1REY3M0EzODMzNzczL3RmMnRQUmpuUmlU
TE9VSV90UlRLMjZaNUp1WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBuoMX3jT6IJjpFhi3wHcDORHjPBvGthle2CifVyUyzhT0DLyLcP2wESQOC+Y1c
z1BKpcaGEVu5BgCCWIdFPO5TPy5+vaIk3GZMk0phgUG3MtYIK0HMyvzE1FW9hQcu
y3aLgrrFGdIq6VGKumAzFxk601QRSXcomkYcqPA9y/0mOoXKAjmt78PJ/NkY3ggQ
56HAACNnpuEr7sSrMea7/O+2SI3Uh6esHeE6kP4hRnRZSnV7syOqvCJGAI32vpQ3
MNGlrLcg9hcVCEkVbiPOPeYgbR+XYYv6pzKwGcVVNUxlqgwimLa/F0MGoao2idkj
L3xIQsrZCRh9dyXlB3EqLAPt
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:19:28 2026 by rpki-client