
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
File: tLEObLONU2XQVOjb6Q808sOIsQw.mft (raw, json)
Hash identifier: wrxd4O0ux+4XIR2b20NyofkmXQtFTCCuO46qEUsx3TA=
Subject key identifier: 60:3C:67:AF:F2:D2:F4:90:7F:12:1E:08:A6:52:EC:E2:E0:E5:2D:8A
Authority key identifier: B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C
Certificate issuer: /CN=A91CE3A3/serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
Certificate serial: 0D4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
Manifest number: 0D1A
Signing time: Tue 12 May 2026 18:15:43 +0000
Manifest this update: Tue 12 May 2026 18:15:42 +0000
Manifest next update: Tue 19 May 2026 18:15:42 +0000
Files and hashes: 1: tLEObLONU2XQVOjb6Q808sOIsQw.crl (hash: 4EZTV0qT03gcJOilQByncHbeTJH2U1t9nbUBIH683vI=)
2: 30256B5CF7B911EEAB0C6C36C4F9AE02.roa (hash: 98uYds8I1pxO4Y6dKdHlz74HRamQ9x93aGa9N7uQZao=)
3: 618AD7B6638A11F08BC2A840C4F9AE02.roa (hash: l1iCGSn/PX7oFU8pYAYmto407lNna+dcfVIeQPwpey4=)
4: 610856EC638A11F08BC2A840C4F9AE02.roa (hash: hFVkKE+Qi5ASFcR8wJP4hxF2ONROpTw8ANjmt7CoeCQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl
rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3405 (0xd4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3A3, serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
Validity
Not Before: May 12 18:15:42 2026 GMT
Not After : May 19 18:15:42 2026 GMT
Subject: CN=6a036e4e-8e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:de:11:1c:00:38:38:36:29:b4:27:2e:3c:c4:
7e:f0:a7:a0:01:a2:6c:59:af:41:c2:9f:e3:36:07:
e4:19:59:ff:2f:e7:b5:96:78:68:71:03:db:ce:ba:
f7:3a:3b:74:05:d9:25:3d:81:10:c6:76:51:f9:10:
eb:6a:0e:65:78:36:cb:4f:34:91:ac:13:48:19:33:
56:fc:00:f7:f6:6d:09:d4:88:84:80:ab:65:b1:d2:
d5:ac:4d:6a:b0:7e:f4:71:d7:da:ef:c4:63:b4:3a:
14:60:cf:35:61:3b:e3:dd:13:f7:63:5f:51:cc:ce:
2b:f6:53:a7:46:5b:38:b2:22:b0:cd:01:ad:9d:93:
4b:9f:13:b1:03:64:8b:a1:77:e7:9e:79:58:e6:b7:
d6:69:dd:06:0e:9f:3d:04:a8:37:63:31:b7:99:04:
51:a5:c4:57:25:5c:5a:fa:83:4b:87:d8:27:91:59:
58:52:a1:14:72:9e:6a:1a:7b:5c:1a:6f:bc:f8:3f:
57:91:02:6e:c5:27:18:2a:09:53:a7:22:4d:77:38:
bb:3b:a0:2d:db:f1:d2:53:9b:77:93:1c:0f:48:95:
62:e3:e5:1e:fc:10:b1:95:43:2d:50:17:4f:a4:6b:
ff:b2:6d:fb:9c:e5:91:35:27:d0:30:30:90:dd:cc:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3C:67:AF:F2:D2:F4:90:7F:12:1E:08:A6:52:EC:E2:E0:E5:2D:8A
X509v3 Authority Key Identifier:
keyid:B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:fd:ed:fe:7c:8e:ad:2d:9c:f4:06:f4:c7:8d:0c:fb:67:b1:
64:04:f8:db:ed:8b:93:cb:34:cb:85:de:ff:fe:75:9f:2d:e5:
f7:4e:bd:10:8a:06:01:b2:78:7f:bd:cf:c5:47:ee:06:88:2c:
d2:35:8f:85:52:30:db:6e:75:07:59:cd:fa:90:95:ea:8d:e5:
9e:bc:7b:c5:41:67:61:d6:78:cb:87:d9:55:13:a4:44:2d:0b:
e9:7f:0c:72:af:53:f4:af:bd:0e:c7:ae:45:77:62:06:b7:fe:
59:71:cf:9e:39:5b:12:84:be:fd:22:76:04:84:4b:37:eb:c5:
47:b1:d0:35:c2:e5:9c:44:50:e3:90:36:0a:22:7b:e7:50:32:
71:f6:b5:c4:ef:ad:78:7b:59:13:05:25:4f:30:ea:28:95:45:
ca:f8:b5:f6:c8:50:d0:59:b5:12:dd:8d:f7:02:4b:84:d7:cb:
40:d8:ef:92:d9:71:bb:12:f8:fd:a7:a8:0e:89:ea:9a:f8:ac:
f0:d8:f7:86:0d:8f:18:77:90:e6:16:4f:5d:54:81:e3:97:c2:
e5:45:b1:ce:de:b2:73:b3:a4:53:09:d7:54:ea:f8:f2:2a:3e:
1f:ae:b6:08:a5:c4:c1:d2:29:12:05:4b:28:69:d9:b6:21:83:
e0:d2:9c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:46 2026 by rpki-client