
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
File: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft (raw, json)
Hash identifier: InwNXdeHCglei8h8UWwnd4vFYFdhPaQLkACMHoPcFJo=
Subject key identifier: 46:24:3C:85:C6:3B:FE:D1:30:BC:41:FD:40:13:1B:29:C6:BF:28:71
Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34
Certificate issuer: /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
Certificate serial: 0308
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
Manifest number: 02F8
Signing time: Mon 11 May 2026 01:22:46 +0000
Manifest this update: Mon 11 May 2026 01:22:46 +0000
Manifest next update: Mon 18 May 2026 01:22:46 +0000
Files and hashes: 1: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl (hash: J9B8E9Zs48BdWyFrYreBFYowdIbzi78DvmVqTNbF2/Y=)
2: 36765016252911EDBEF5C985C4F9AE02.roa (hash: 7iH70KKL8E6kg2mMBIuLcmu+q9kHmGNW2ajEqyTNrsU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl
rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 01:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 776 (0x308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDBD0, serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
Validity
Not Before: May 11 01:22:46 2026 GMT
Not After : May 18 01:22:46 2026 GMT
Subject: CN=6a012f66-d76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:fb:31:92:c0:51:e0:e1:f4:e6:c6:c7:6f:
6b:62:9b:9d:3b:07:0d:14:ff:90:46:35:6c:00:8f:
f0:bc:fc:87:0d:f7:60:6a:58:09:fe:99:d0:bf:64:
03:6d:a5:11:ab:82:e5:7c:e4:dd:83:6b:17:fa:e6:
f7:d1:ae:98:b3:4b:92:59:39:89:ed:eb:e8:78:4f:
f9:08:f5:e4:1b:ca:37:91:90:ea:a8:4b:d9:88:43:
b4:d5:eb:6e:32:8d:1d:d5:ad:7a:38:8e:95:0e:69:
a0:04:ef:9c:c2:e6:b5:40:51:5e:5e:a0:ab:c0:2d:
a1:55:a4:02:5d:09:91:ee:41:9d:4b:d9:4a:6e:da:
ba:91:45:3f:1e:d7:6f:bb:4c:9f:cc:5b:a3:05:b8:
08:d4:61:4d:23:68:de:a5:f0:20:71:d1:c4:86:00:
c8:0f:55:ec:36:1a:1b:ec:8e:96:81:3d:30:a6:c6:
98:84:bc:b3:13:a8:c6:ac:98:d7:d6:13:5a:93:fe:
2c:05:ad:c8:a6:20:f5:d1:da:4f:6c:99:52:26:87:
5c:8d:f1:08:00:ed:3c:2f:d4:18:5d:4a:72:2b:81:
c9:28:54:ae:1a:0d:e6:d6:a1:bf:08:d6:ca:e2:23:
5f:dd:c9:71:00:53:70:44:f4:1b:0b:44:84:16:11:
c4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:24:3C:85:C6:3B:FE:D1:30:BC:41:FD:40:13:1B:29:C6:BF:28:71
X509v3 Authority Key Identifier:
keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7d:82:d7:32:0d:77:89:86:58:de:d2:93:22:6f:7a:c4:a4:
0b:fa:56:b1:0d:7f:9a:11:b7:43:b6:1d:a6:21:90:64:ef:5e:
3e:95:7c:f8:6d:6c:1c:2f:16:60:1f:69:8f:99:2e:1d:f3:d4:
74:b2:91:05:e7:fa:36:60:15:9f:2e:1a:19:ad:33:d4:85:2f:
f3:b5:88:21:3b:e3:21:35:e7:8b:b3:56:31:f0:cf:a9:54:45:
da:0d:f6:a8:ce:30:7a:43:6c:a2:8a:94:78:55:db:0b:b7:6d:
a1:f1:80:1b:15:14:fb:eb:5f:63:da:18:2e:9a:a1:da:50:a0:
22:d9:9f:4f:12:1d:1d:44:90:5e:46:bb:c9:62:f5:e6:4b:50:
12:c5:a2:f7:76:62:eb:12:7e:48:73:bb:b2:ec:2a:80:24:c1:
fd:52:ec:67:fc:38:fb:6f:bc:c7:8a:85:77:b0:44:2e:05:1f:
fd:a9:c2:1d:34:3f:b3:41:8c:cb:4e:f6:4a:9f:5d:e9:d5:7c:
e6:49:58:c6:8e:bc:2a:93:b4:e1:bc:f0:e0:f7:55:2b:89:5e:
2f:1a:5a:90:bf:f9:6d:06:ab:99:01:a8:9c:f3:fc:6a:41:11:
b4:5d:bd:a7:f3:c0:d7:0d:55:e5:24:a2:8e:b3:88:d4:74:52:
b3:dc:9f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:29:56 2026 by rpki-client