
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
File: tnJ-39N9HiwXXBCBGh04qirGyJw.mft (raw, json)
Hash identifier: igM4C4AHQ0Xi+fRDwLmESnPZxVpc89L7206JG9qWQUE=
Subject key identifier: FD:EB:78:4E:09:F2:19:D0:17:70:42:B9:37:B6:FC:99:2D:B0:BB:7D
Authority key identifier: B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C
Certificate issuer: /CN=A91BD3D2/serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C
Certificate serial: 0209
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
Manifest number: 01FC
Signing time: Wed 25 Mar 2026 02:34:14 +0000
Manifest this update: Wed 25 Mar 2026 02:34:13 +0000
Manifest next update: Wed 01 Apr 2026 02:34:13 +0000
Files and hashes: 1: tnJ-39N9HiwXXBCBGh04qirGyJw.crl (hash: YzbGTnkl5sC/VHPS7+FhRwXThgOOyXVOf7I34M+cNW4=)
2: 862D5B3A2C8611EEB04B7B66C4F9AE02.roa (hash: pWAjmQn5SbEE6PdoMznAj34dV0v6ZXCFUuJiYeyqVgg=)
3: 207C8A52AC7611EEB465AF75C4F9AE02.roa (hash: zYQ2BctNXY7magajQqIBQAnaVIQn28KFCi8jua34WGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl
rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 521 (0x209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD3D2, serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C
Validity
Not Before: Mar 25 02:34:13 2026 GMT
Not After : Apr 1 02:34:13 2026 GMT
Subject: CN=69c349a6-6067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:51:49:de:0a:26:95:17:07:ec:10:aa:bd:33:
b8:20:a6:b3:61:e9:8a:e9:2c:48:c1:93:b4:ca:f4:
0b:44:35:0c:03:80:66:cb:33:5e:91:11:17:14:c7:
bd:cb:f2:12:78:ef:7e:bd:ca:3a:3a:6f:1f:f0:57:
8c:d0:96:85:b0:10:16:61:d9:f2:b4:fa:3c:02:90:
cf:e6:41:14:d3:8d:f4:1a:34:d9:67:83:66:28:99:
2d:82:11:aa:3a:0d:18:0c:64:7a:61:46:1a:da:ef:
ab:96:0d:ab:62:68:77:ea:99:a9:be:24:c2:bf:77:
5c:00:0a:02:1f:23:1e:08:52:51:ed:72:4c:18:22:
5c:01:c4:ae:3c:14:ad:a5:a8:41:d1:7e:2b:f9:16:
91:fd:c6:56:84:e1:ad:ec:e4:35:fe:b1:7a:f4:d7:
00:f7:ca:09:b9:6f:50:ba:f9:5e:d0:27:55:98:a7:
bb:6c:26:33:f2:89:4b:00:76:f3:c1:a9:fc:26:9c:
c0:77:d4:1a:33:ed:04:bf:0a:38:c6:b8:34:0a:a6:
07:24:68:56:76:58:c7:fa:7f:e9:30:89:65:5a:19:
30:12:9a:c1:c1:59:b2:78:68:c5:29:54:44:4f:71:
69:f6:9a:05:8f:d2:e7:f7:a4:8d:25:c9:4e:9d:ae:
bf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EB:78:4E:09:F2:19:D0:17:70:42:B9:37:B6:FC:99:2D:B0:BB:7D
X509v3 Authority Key Identifier:
keyid:B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d9:f8:19:3b:65:cd:41:a2:68:1a:96:7f:16:c7:76:48:c2:
e3:ab:be:50:6e:97:45:fc:c4:7b:a4:e4:33:58:15:78:0a:ea:
a8:8e:53:17:7d:a0:03:66:06:df:5b:6e:db:b8:25:86:07:9a:
b7:bc:55:23:96:56:f6:28:83:56:5c:ce:2e:74:5e:98:74:4e:
6d:5c:2e:ae:04:70:3b:82:41:7f:89:f4:b1:20:af:2b:8f:4a:
1d:0c:2a:ba:41:22:87:9d:9e:ea:2d:c8:68:2c:10:4a:24:93:
91:9a:80:98:80:5b:c5:a0:4f:53:e0:e2:3d:56:34:c7:87:57:
70:e1:b0:a8:22:4b:85:ac:61:27:1d:97:cf:b0:45:60:fb:8c:
ec:af:54:c0:eb:93:e1:65:8d:d3:ac:17:67:37:6c:54:d9:a1:
3d:fa:a5:7c:59:77:fa:7b:63:f5:8b:c7:5b:14:52:c9:8f:d9:
6d:73:b4:95:59:bc:5b:8d:7a:68:ef:8a:1f:fb:de:a6:19:8f:
67:67:c0:83:84:55:00:36:00:37:87:53:c3:b1:c0:e2:08:a6:
83:10:e1:05:62:29:f2:9d:73:1b:e8:f2:08:2f:2b:8b:9e:62:
e3:4c:05:97:2a:7c:3d:d3:87:c3:4a:26:19:e5:a3:3f:2d:1a:
dd:d8:1e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:32:03 2026 by rpki-client