
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
File: TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft (raw, json)
Hash identifier: wg7V3Vww4dUQU94lLKFLK3W462b023NUijf4DD15aS4=
Subject key identifier: F4:4D:01:17:DF:9C:2F:0F:65:4F:1B:A5:85:F0:7C:EB:8C:C6:AE:8A
Authority key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D
Certificate issuer: /CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D
Certificate serial: 01A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
Manifest number: 0198
Signing time: Thu 23 Jul 2026 05:45:34 +0000
Manifest this update: Thu 23 Jul 2026 05:45:34 +0000
Manifest next update: Thu 30 Jul 2026 05:45:34 +0000
Files and hashes: 1: TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl (hash: MJEYZNtpkP4+RvXmYGdAOuJE7ovOY9vdiI3YeYlDhwI=)
2: 1FC3B0DE1E6F11EFB392D937C4F9AE02.roa (hash: bs1Xgw6z8UHVdG8cs/XzlMBqu7GicIxeKJC8ZxwnNXc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl
rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:45:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C31B7, serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D
Validity
Not Before: Jul 23 05:45:34 2026 GMT
Not After : Jul 30 05:45:34 2026 GMT
Subject: CN=6a61aa7e-be59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3c:2f:cf:2e:78:ad:01:95:c5:fc:ae:34:ea:
fd:d0:b6:23:1f:e1:81:e3:e4:85:8d:f1:91:5a:05:
40:ee:81:ca:5b:42:9f:a1:60:47:c1:08:ff:9d:5b:
99:17:1d:43:ba:1f:44:ea:52:79:54:65:4d:c3:53:
a2:66:e4:8e:97:b8:24:f2:47:bb:b8:5c:91:41:c3:
8e:67:16:cd:f6:f6:53:f9:ba:57:d2:f8:bf:42:10:
a8:34:bd:7b:b7:6b:e1:70:dd:43:28:e9:9d:6e:36:
0e:91:28:c0:6e:53:16:60:4f:c5:30:65:05:54:a9:
8c:99:46:da:9f:a6:8a:93:f2:80:c6:4b:2c:82:f5:
dc:f4:a9:d9:87:7e:44:b3:cd:84:20:f3:d5:05:ba:
19:52:fd:1f:68:5d:40:fc:a9:15:7b:98:5f:35:84:
87:26:09:b8:32:16:e3:47:42:4f:db:79:8a:b4:37:
36:b9:7d:b1:c8:33:9f:13:30:f7:62:6f:15:0d:e7:
ae:19:c1:3b:f7:fa:aa:b0:53:8c:6a:c6:a0:ce:af:
5d:e8:1a:17:f9:11:40:8e:7d:1d:86:f6:09:a3:06:
77:da:8b:18:46:df:06:50:17:a8:37:28:cb:96:bd:
c8:de:58:b5:a8:0c:e1:f6:93:5f:03:1f:12:c1:c0:
b9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4D:01:17:DF:9C:2F:0F:65:4F:1B:A5:85:F0:7C:EB:8C:C6:AE:8A
X509v3 Authority Key Identifier:
keyid:4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:74:1a:2b:25:2d:23:73:ff:4d:b6:b8:b2:23:93:65:81:47:
0c:60:8d:db:16:a1:e0:4a:7c:34:8f:c9:54:96:e1:ab:5e:56:
8a:bd:ed:55:c4:6a:1d:a5:f5:ca:7f:e6:f8:6c:43:6a:0a:6b:
be:b9:4f:a1:2e:ea:a8:ca:cd:0f:1c:59:f2:60:ff:92:85:17:
4f:89:d1:99:f6:10:51:62:f3:f0:02:be:c6:19:4b:33:01:2e:
80:5d:c7:95:ab:ef:9e:3b:a6:e9:bd:d5:f8:68:65:18:e6:b5:
11:3b:cb:66:ac:bb:dd:1c:6f:a4:a8:20:c8:84:1b:26:c8:f1:
62:b7:72:88:e2:f2:f9:d9:64:27:03:95:f8:54:ca:46:a9:9b:
23:e6:a2:3b:7a:cb:ad:4a:22:88:42:ba:bc:fe:41:99:e9:c2:
21:4e:7b:81:58:d1:9b:d4:5a:aa:1f:d2:ee:38:f5:1e:44:2b:
95:70:66:43:75:4a:86:da:01:53:00:30:41:30:e1:a6:ff:14:
1d:12:91:9a:5e:76:3b:47:1e:81:af:b9:06:da:0f:29:0f:18:
80:46:5d:b9:cd:17:3f:75:3f:f1:4f:83:22:12:2d:e3:32:93:
72:a0:da:89:e5:7d:44:68:9c:71:ba:62:e7:b8:4e:e8:a4:a9:
56:cc:60:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:37 2026 by rpki-client