
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
File: tgQSzpgJwQxn3eq7oOM1462k_hA.mft (raw, json)
Hash identifier: YtXKbbXwUHQSFNE+vjwD+H0QcozfEkG/R6oBFikHEjQ=
Subject key identifier: 09:C6:78:59:B7:50:23:19:16:1F:EC:DA:DA:83:99:A4:06:9E:10:64
Authority key identifier: B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10
Certificate issuer: /CN=A91BF306/serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10
Certificate serial: 01CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
Manifest number: 01C7
Signing time: Wed 25 Mar 2026 03:03:17 +0000
Manifest this update: Wed 25 Mar 2026 03:03:16 +0000
Manifest next update: Wed 01 Apr 2026 03:03:16 +0000
Files and hashes: 1: tgQSzpgJwQxn3eq7oOM1462k_hA.crl (hash: UyK5lSkaNk31oVPr706+AUtyPSG7+l1yInSi4GizmIQ=)
2: 3CED465E8E0811EE8450D961C4F9AE02.roa (hash: lItS9IhoLUedBvAXuWgl/Rf34kmfafMEcysHbipPcpE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl
rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF306, serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10
Validity
Not Before: Mar 25 03:03:16 2026 GMT
Not After : Apr 1 03:03:16 2026 GMT
Subject: CN=69c35075-cdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:c6:01:2f:c0:ae:2e:aa:e0:17:14:44:9f:
70:6f:db:48:59:6a:6a:37:a5:97:30:19:2b:92:bc:
69:29:08:c9:dc:15:aa:e1:5b:94:0e:64:e8:bd:f6:
29:27:ee:c3:2a:1b:88:73:b5:77:42:1f:b6:c0:7a:
5a:76:fc:a0:23:f9:46:4a:48:c2:17:59:e2:7f:95:
19:09:2d:3c:d9:2e:15:34:04:c1:a0:86:4c:6e:76:
5e:7b:6e:4e:eb:e1:41:42:95:de:a0:a7:4e:b6:42:
2b:62:61:9d:17:61:09:9b:7c:12:63:50:08:e0:e9:
7a:93:53:48:7b:1f:76:bb:f5:6f:ed:c4:52:09:03:
99:fb:87:43:80:e0:f7:69:e9:2a:f7:37:cd:3a:8c:
01:dd:08:54:e2:49:7b:0d:8d:e3:36:10:cc:21:04:
11:6b:42:1e:45:9b:e8:5d:7b:c6:49:1a:cd:0d:2a:
84:19:c8:6a:51:f2:98:1e:69:a4:5a:db:23:cf:aa:
9f:a8:ea:9e:40:62:a4:85:5f:e3:16:85:59:81:fc:
8c:34:09:c9:7b:3c:ba:a7:6d:5b:62:34:ce:dd:77:
36:df:a5:ac:5e:f0:74:4a:91:cd:9b:9f:96:5b:17:
a0:27:ad:eb:7b:63:26:42:9d:c1:e6:f7:3c:a4:bb:
8a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C6:78:59:B7:50:23:19:16:1F:EC:DA:DA:83:99:A4:06:9E:10:64
X509v3 Authority Key Identifier:
keyid:B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7d:d1:9f:74:1b:ba:05:64:73:33:b3:b7:96:61:a4:c2:6d:
3e:43:88:91:67:5f:32:f8:a0:29:cf:bd:b1:6d:15:e1:33:b5:
53:0d:73:31:14:85:17:11:72:3b:8c:db:41:b5:37:a5:65:e5:
b1:12:74:aa:e2:17:91:67:e8:b6:f4:d1:ce:2f:df:53:55:ce:
35:77:3e:61:ca:33:13:62:31:23:2d:4f:f2:02:2a:4c:1e:a0:
cb:40:e1:e9:1e:e9:9a:f6:2f:55:34:37:ed:4a:bd:f9:17:c7:
bd:c4:02:5b:5a:0f:8e:d2:e4:36:47:22:11:5a:57:83:a4:4d:
f7:f2:cc:55:06:aa:57:3e:6d:a1:e0:fd:d4:a6:c2:66:a5:df:
84:89:4d:15:5e:6c:3f:df:ee:69:ee:9e:d8:d1:d4:31:58:71:
42:ae:4b:d3:92:14:a2:76:7e:69:d9:76:54:a9:0c:5c:d8:19:
83:bb:09:64:d0:b4:a5:fe:c2:3d:3b:ec:45:3e:53:38:ee:79:
27:15:e0:f2:24:06:d6:58:ed:98:e1:b5:f2:c4:a1:a0:a7:c1:
ab:79:7b:fe:d5:71:ce:25:d9:8e:90:b8:5a:33:6e:3d:7e:c9:
3f:24:d9:d0:be:83:dd:7a:74:55:d6:6b:5f:c0:c2:68:de:dd:
27:c7:ff:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:51:12 2026 by rpki-client