
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
File: tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft (raw, json)
Hash identifier: pUI9sDbNukov/bmDZdTlXs1AvIZd8cQZTMlHD6VldiQ=
Subject key identifier: 1D:9A:C6:ED:B7:EA:74:86:D8:61:43:D4:18:14:85:D2:CC:AC:7F:99
Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E
Certificate issuer: /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E
Certificate serial: 027A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
Manifest number: 0B67
Signing time: Tue 24 Mar 2026 20:06:51 +0000
Manifest this update: Tue 24 Mar 2026 20:06:50 +0000
Manifest next update: Tue 31 Mar 2026 20:06:50 +0000
Files and hashes: 1: tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl (hash: 7khOkTpnbDvxNFy+qwwonIr8aIj0kuAN0bX+IMYShM4=)
2: 6897097E6C6311EDBCFA073FC4F9AE02.roa (hash: amtsGIZ1bAiDpg3BaPYjx1lqeDVrGcipi92mNwNuQSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl
rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 634 (0x27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA0AE, serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E
Validity
Not Before: Mar 24 20:06:50 2026 GMT
Not After : Mar 31 20:06:50 2026 GMT
Subject: CN=69c2eeda-c971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:90:43:8c:c1:ff:a4:af:33:b8:2a:8a:ad:18:
44:58:2c:28:a4:a1:e6:c7:ae:3e:a8:9d:da:29:eb:
28:5f:15:8d:9d:1c:56:61:19:fb:34:fd:12:7b:f3:
42:af:e8:61:00:49:78:9a:9e:ed:a6:83:ca:42:ae:
23:a2:9e:26:47:04:e2:5d:35:2b:da:37:95:1c:de:
14:3e:4d:27:3f:d5:1a:ef:c6:87:61:f9:2a:5b:bb:
43:b4:c4:10:82:4d:45:c5:db:38:7c:10:5e:1a:7f:
32:40:bd:55:40:43:28:91:06:97:28:b4:3c:d4:5e:
4a:19:e6:3e:7a:26:b0:58:cb:76:d3:47:e6:3e:7c:
52:06:39:08:c6:70:a1:82:c7:59:7f:3c:e5:30:7e:
45:bd:bf:68:8e:ca:61:74:b0:a5:a8:9a:38:d7:b5:
71:a3:78:6a:23:11:23:16:cd:05:97:e2:07:b4:2a:
96:cf:eb:8d:c2:1e:08:86:f5:a0:e3:9f:cf:59:f6:
e5:05:42:51:13:07:02:a3:fd:5b:a2:e7:08:d9:7a:
d6:d6:b3:9b:3b:d5:a4:71:aa:ea:f6:f3:bb:74:67:
fe:f6:1d:53:3d:c4:db:e5:aa:cd:a7:5c:92:3d:48:
6c:37:79:c4:68:25:e3:67:a0:42:7a:ee:37:36:b3:
f1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9A:C6:ED:B7:EA:74:86:D8:61:43:D4:18:14:85:D2:CC:AC:7F:99
X509v3 Authority Key Identifier:
keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:3a:ff:27:1c:48:3c:c1:28:ca:fe:76:83:9d:b0:a1:4c:25:
f7:2b:64:4c:4a:05:62:6c:79:02:04:1f:5e:9c:e7:9c:69:bd:
62:4c:89:9d:44:61:9e:16:07:95:8c:0a:bc:6c:2a:1f:9d:40:
b7:a6:2c:9e:87:95:cb:34:fd:ec:d7:0d:51:ad:4c:bb:8c:16:
c5:8f:f1:d5:82:3f:6e:86:d9:6e:86:a1:ec:bf:5e:b5:f0:a0:
1e:32:67:38:24:c1:83:b6:a7:cf:02:c7:c5:63:54:13:99:ea:
02:3a:46:2a:13:76:e1:7f:59:70:5c:cf:90:81:c4:c1:ce:cc:
b4:3c:ec:d2:36:3d:6a:90:ae:52:f0:07:a4:07:37:7b:0e:09:
c7:9f:73:a4:1a:05:d9:19:f0:af:af:c3:2a:2e:73:6d:77:64:
c3:17:a0:2c:4a:ea:57:e7:c6:67:3f:6d:97:ec:e8:5c:6b:de:
b1:c4:c6:9e:9b:cf:70:e4:ab:3d:f3:6e:37:85:c5:29:5a:4d:
41:74:37:d9:a3:b9:1d:04:b9:c1:46:d6:9c:3f:80:64:b1:7a:
da:ca:b2:31:5b:80:4b:4d:27:30:5f:62:db:fc:d1:f3:e8:29:
c4:98:a4:43:af:56:83:6a:d7:bf:6d:b6:13:d8:a7:a1:cd:55:
61:41:76:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:07:32 2026 by rpki-client