
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
File: TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json)
Hash identifier: CtFNaZzZDX1wD+gFKkz+vxOHPwLhRHZFmrLdb+6gUX0=
Subject key identifier: 04:5D:21:5E:79:CE:8D:40:FA:15:DA:B2:25:97:19:72:22:07:06:C3
Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59
Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159
Certificate serial: 0270
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
Manifest number: 026A
Signing time: Fri 25 Sep 2026 02:06:21 +0000
Manifest this update: Fri 25 Sep 2026 02:06:20 +0000
Manifest next update: Fri 02 Oct 2026 02:06:20 +0000
Files and hashes: 1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: DyltAj57KTL7dqJmUs9FkBUx76N4DpyIPaROnI4BakY=)
2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: LTD30aegM2n/FIPS7PJPfAtlPCR/CQg1h9hsg7fN65E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl
rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C05E4, serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159
Validity
Not Before: Sep 25 02:06:20 2026 GMT
Not After : Oct 2 02:06:20 2026 GMT
Subject: CN=6ab5d71d-1d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:e8:8b:0d:a6:60:57:8c:47:e3:4c:ba:e7:
e2:d8:43:88:7d:5a:fe:82:bb:18:a8:30:2c:21:ba:
92:3b:3c:b7:85:b7:0a:43:f4:81:fa:64:6d:61:7d:
69:4f:03:da:16:4e:1f:e8:c8:d0:8f:21:2c:e1:ba:
88:2a:4e:c0:23:bb:90:47:ac:e1:76:21:2b:2f:69:
eb:c0:ec:85:8e:6d:b6:7d:0a:0e:80:93:bc:e9:cb:
89:f8:02:69:c9:f0:2c:31:1b:71:f5:42:3e:2d:f9:
24:a6:21:6e:ce:85:38:be:cf:82:74:db:70:df:0a:
69:f3:0d:a5:9f:4b:a9:87:7a:45:cf:d3:d6:f1:04:
02:eb:bf:17:7d:f7:3e:aa:0b:8a:52:a4:03:53:aa:
d0:12:74:a1:68:38:b5:8e:fc:58:4b:d7:a8:ff:1c:
ed:47:6b:3f:b8:81:37:52:20:a9:d2:8c:3c:1c:a8:
20:eb:22:f2:74:57:ba:52:cb:bb:05:fc:37:ff:29:
52:1e:8b:f8:ea:5c:5e:ef:51:34:96:7b:dd:bd:e3:
9b:ff:4f:03:51:63:ee:e7:db:82:dd:b8:57:1f:d2:
51:b4:52:a2:19:eb:b4:be:99:08:ab:84:5f:3f:58:
a7:83:f0:73:40:d2:4b:a5:88:6d:40:e5:23:51:3b:
8d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5D:21:5E:79:CE:8D:40:FA:15:DA:B2:25:97:19:72:22:07:06:C3
X509v3 Authority Key Identifier:
keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:ef:e5:f6:d2:92:cb:60:13:1f:ad:8e:35:0d:7a:e4:b1:97:
68:07:28:a7:f3:32:45:29:a4:6e:2a:5d:d2:3e:46:ca:0f:16:
8f:b1:21:fb:72:b9:17:fc:f5:51:07:30:0e:74:02:c1:e8:d3:
9d:7d:5e:13:f9:ee:b1:26:58:d7:e3:92:99:9f:80:60:62:ac:
c9:fe:e7:7c:ab:5f:97:81:12:22:be:a6:3b:38:26:b8:c8:a8:
3a:75:62:fc:4c:6e:91:89:8a:9b:43:60:28:bf:36:6d:39:33:
4d:bb:c8:8a:18:5f:67:ed:2e:41:ea:a9:5a:1a:b4:e0:be:15:
ff:9f:99:24:17:3e:12:d5:1a:e4:6b:65:49:bf:29:2b:e2:60:
a1:4b:bf:54:b6:58:f2:62:97:87:ab:30:86:4d:3a:0c:9e:a7:
8c:d3:15:49:6e:46:1e:10:b5:48:49:1e:d0:f9:31:9e:23:7b:
c4:9a:b1:11:5e:cf:99:cf:86:74:7b:29:e6:51:c7:7c:91:a1:
6a:f1:b9:67:f5:46:82:02:b2:d9:45:87:87:f0:2c:e6:09:6b:
51:a1:ec:81:5f:bd:bc:62:fb:4f:96:91:80:bb:6b:ea:c4:92:
36:51:f7:c5:b6:64:83:27:8d:92:bc:1c:51:37:c2:62:eb:14:
35:50:83:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:23:35 2026 by rpki-client