
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/tSBT1BwEGQhTHAz26tfzlryctl4.mft
File: tSBT1BwEGQhTHAz26tfzlryctl4.mft (raw, json)
Hash identifier: 0Ixqcrw2lBhWDo+j4fJBM1CSIZuFySziY5E16Jp+PXM=
Subject key identifier: 05:82:98:80:62:9C:B8:E4:01:17:46:F2:1C:F6:8A:AE:54:55:1B:F1
Authority key identifier: B5:20:53:D4:1C:04:19:08:53:1C:0C:F6:EA:D7:F3:96:BC:9C:B6:5E
Certificate issuer: /CN=A91CD883/serialNumber=B52053D41C041908531C0CF6EAD7F396BC9CB65E
Certificate serial: 31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSBT1BwEGQhTHAz26tfzlryctl4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/tSBT1BwEGQhTHAz26tfzlryctl4.mft
Manifest number: 30
Signing time: Thu 23 Jul 2026 10:40:08 +0000
Manifest this update: Thu 23 Jul 2026 10:40:08 +0000
Manifest next update: Thu 30 Jul 2026 10:40:08 +0000
Files and hashes: 1: tSBT1BwEGQhTHAz26tfzlryctl4.crl (hash: L6qLg38XtEnpMun0+FfZGYqUexbA+C8sNmT477HgApQ=)
2: 17D6C97C3D7D11F1864FF013BB833773.roa (hash: GGmxmbtP7l6hq2pSZ0GpfnYrJImoQ0VE16XaMS6Xk4g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/tSBT1BwEGQhTHAz26tfzlryctl4.crl
rsync://rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/tSBT1BwEGQhTHAz26tfzlryctl4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSBT1BwEGQhTHAz26tfzlryctl4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:40:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD883, serialNumber=B52053D41C041908531C0CF6EAD7F396BC9CB65E
Validity
Not Before: Jul 23 10:40:08 2026 GMT
Not After : Jul 30 10:40:08 2026 GMT
Subject: CN=6a61ef88-72dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ab:1e:9f:d6:b4:03:9e:cc:2e:cd:c3:18:48:
21:7b:3c:54:13:0c:8f:d5:35:0b:1f:07:2f:21:51:
9a:7a:17:0f:fd:60:f2:58:3e:cd:63:ba:fc:ca:5b:
28:77:6e:3a:57:41:5f:7e:da:48:5e:7d:93:91:ec:
fe:60:b7:75:f6:27:3e:6c:3b:2d:2f:74:60:63:c8:
89:5e:13:75:7f:e0:8b:11:e6:e5:bb:3c:d1:1d:ce:
55:ec:32:b6:99:1b:c2:87:bd:5b:6f:d5:1a:22:24:
b4:b5:c9:98:5a:e8:9f:01:b0:c8:72:57:9a:1e:c6:
71:67:78:7a:32:c9:15:54:c4:86:e7:70:db:9d:7b:
5a:cf:7c:a5:7a:7c:af:12:be:60:67:18:c9:1f:8c:
1a:65:e4:b6:1a:ca:92:5e:50:98:73:e6:4e:18:1b:
fe:fb:8a:03:3a:66:a0:9c:cf:27:39:33:38:80:13:
02:a3:f3:11:2e:66:c2:1f:50:3f:af:9c:75:26:a9:
93:37:28:5d:9c:87:2b:d1:7d:15:34:d8:67:d7:36:
50:40:90:5b:65:71:70:aa:45:a2:79:a4:7c:1b:2b:
bc:1d:ab:4d:b9:be:65:ac:dc:d6:bb:51:34:d1:ae:
3e:65:e0:40:5f:f7:dc:ce:2a:c0:7e:7d:6f:76:6a:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:82:98:80:62:9C:B8:E4:01:17:46:F2:1C:F6:8A:AE:54:55:1B:F1
X509v3 Authority Key Identifier:
keyid:B5:20:53:D4:1C:04:19:08:53:1C:0C:F6:EA:D7:F3:96:BC:9C:B6:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/tSBT1BwEGQhTHAz26tfzlryctl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSBT1BwEGQhTHAz26tfzlryctl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/tSBT1BwEGQhTHAz26tfzlryctl4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d8:18:64:4a:fe:49:bb:73:21:3f:b2:8c:56:e8:ef:51:dd:
08:c2:ac:e1:dc:f4:93:8b:57:d0:6f:14:fe:9a:70:1a:e3:dd:
7f:9d:ef:7a:b9:b1:5e:17:2c:69:c5:e3:8e:00:cd:f1:c5:6e:
32:6a:f3:48:a1:ff:9e:4b:ce:f0:54:4d:40:6b:b6:85:0e:f5:
e5:36:ac:f7:9a:20:82:0b:81:56:5a:21:be:37:3b:8b:aa:20:
3a:31:dd:0f:d4:19:26:8b:7e:50:b2:18:7d:1e:4c:17:f9:db:
df:da:b8:f2:4a:19:06:54:d8:87:96:c4:8e:06:d7:69:7d:f2:
72:59:3e:24:7f:f5:af:fe:0b:90:02:b7:3c:97:d3:f9:18:4f:
93:b1:a0:ae:af:8c:34:2d:21:b2:13:15:f2:24:17:20:3f:00:
96:c1:3a:f3:3a:cb:95:a6:37:70:a8:9d:6a:e0:1f:2a:56:ce:
e7:e2:0b:11:aa:7f:18:02:3c:ec:c7:ce:98:ba:97:0a:47:4a:
55:68:b8:ae:9a:02:6b:ba:c7:aa:fd:d1:b2:b8:c2:ed:9f:09:
0c:8e:9b:71:1d:6e:d9:10:16:65:8c:85:24:70:da:19:78:bb:
34:68:3c:b7:f3:e0:3b:b0:f6:5d:17:7a:fb:37:05:08:e7:eb:
ea:51:ef:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:52:43 2026 by rpki-client