
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
File: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft (raw, json)
Hash identifier: DF+XE8s5iHMJwZfCIIXc5JGErn4PNZfhwaZ2qJrZuIY=
Subject key identifier: 5A:3D:57:C3:AE:CF:AC:4C:3C:9F:C3:81:AE:17:88:D2:3B:BC:0A:55
Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34
Certificate issuer: /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
Certificate serial: 034E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
Manifest number: 033E
Signing time: Fri 25 Sep 2026 00:49:47 +0000
Manifest this update: Fri 25 Sep 2026 00:49:46 +0000
Manifest next update: Fri 02 Oct 2026 00:49:46 +0000
Files and hashes: 1: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl (hash: p0v7OGM1rhkhS7S7CCXor2jqhYSQndYYqudo+lKCOxA=)
2: 36765016252911EDBEF5C985C4F9AE02.roa (hash: 7iH70KKL8E6kg2mMBIuLcmu+q9kHmGNW2ajEqyTNrsU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl
rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 846 (0x34e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDBD0, serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
Validity
Not Before: Sep 25 00:49:46 2026 GMT
Not After : Oct 2 00:49:46 2026 GMT
Subject: CN=6ab5c52b-674b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:74:35:a9:d5:8d:17:8c:fb:2c:fd:a8:d1:
36:c3:b3:0d:b9:4e:05:4c:fb:94:01:77:28:47:6b:
d9:79:11:99:b7:70:6e:9e:34:ff:1f:0f:c1:06:3c:
21:b2:7b:0f:2b:35:7b:c3:f6:1d:38:82:bc:5a:b2:
71:19:48:c0:ef:ab:65:98:4d:60:d4:c5:85:9b:c9:
7b:6a:c9:3a:e3:c0:6f:eb:86:e3:50:e4:84:06:4b:
64:7e:2e:91:55:ca:15:1a:65:c3:e5:99:d0:65:6a:
3a:50:92:3d:a5:ef:d2:5a:6e:45:57:db:90:a4:a6:
fe:e5:b3:4e:c5:5d:1b:30:63:fc:96:2e:0f:d0:1f:
78:b2:17:44:7f:12:14:7f:d0:0b:62:02:12:9e:ab:
7c:eb:98:69:07:b7:b2:77:a0:5d:c7:1e:34:0c:9d:
70:fc:98:12:d4:c5:58:9e:69:2d:19:9d:61:ca:77:
69:a8:2a:e4:81:20:e4:12:78:ca:34:b9:c0:70:d7:
8b:34:e0:7d:19:56:e1:79:2f:58:48:04:01:f3:2e:
61:94:d0:7d:ed:5c:14:fd:6e:f1:2f:e8:b9:1f:e3:
bd:c2:28:54:e1:98:17:0e:42:0f:7b:36:a0:fb:40:
1d:45:fb:e6:b3:68:1b:cf:40:c0:c4:e1:9b:36:cb:
35:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3D:57:C3:AE:CF:AC:4C:3C:9F:C3:81:AE:17:88:D2:3B:BC:0A:55
X509v3 Authority Key Identifier:
keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:60:2b:cc:d3:c1:f6:5c:a1:21:ec:76:7f:10:de:3a:af:81:
a5:dd:3c:64:86:51:cf:f2:cd:dc:8e:75:9e:d1:ee:d8:2a:b5:
a7:ca:c7:be:f5:35:30:bf:05:db:22:fd:24:52:4c:f4:b3:42:
f5:6a:63:68:bf:ce:e0:22:c7:a9:45:4e:19:0f:81:5d:9b:09:
ce:55:fc:e2:ce:a8:d7:1e:d9:3f:12:f9:87:76:c6:46:74:63:
4b:80:c0:6b:ac:46:80:05:98:e3:45:c0:bf:f8:a9:41:01:4e:
93:1f:a2:02:d5:e7:0e:a0:88:8f:47:3a:9e:9e:52:3d:da:27:
6e:e1:7e:fe:3e:82:51:15:61:ab:fa:8e:5c:54:06:9e:59:27:
dd:b5:ca:7e:01:57:2c:72:b7:1a:27:15:2d:e7:60:61:93:34:
b1:64:c7:83:f3:42:ee:cc:0d:38:c5:80:4b:02:45:40:3f:79:
ec:09:58:b7:cf:dc:4b:4b:a2:13:7d:9c:4d:8b:e8:2a:17:86:
18:84:40:87:79:37:f3:9d:ad:64:74:88:25:24:cf:8e:23:9e:
29:e8:02:63:35:4a:4b:8d:8a:7d:23:f8:2b:27:17:3e:8b:55:
b7:03:39:b4:41:6b:77:89:72:8f:19:3e:a9:d1:60:bd:1f:2d:
b9:27:58:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:14:27 2026 by rpki-client