
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
File: TN7H1CHxboUWcqgSOd0Y_IweOVY.mft (raw, json)
Hash identifier: 7ZOE46lfHd6INYemoXSjHazveiLa7x1x6nfMLtdDtaE=
Subject key identifier: 7E:2E:86:92:69:C5:AC:42:DF:A8:07:94:61:AF:EA:06:B1:85:C6:8A
Authority key identifier: 4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56
Certificate issuer: /CN=A91D0A62/serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
Certificate serial: 05C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
Manifest number: 05BC
Signing time: Thu 24 Sep 2026 22:56:56 +0000
Manifest this update: Thu 24 Sep 2026 22:56:56 +0000
Manifest next update: Thu 01 Oct 2026 22:56:56 +0000
Files and hashes: 1: TN7H1CHxboUWcqgSOd0Y_IweOVY.crl (hash: E4HCyQidvFSaHZmATzrcsV9/qHLpDp83RW0lUPL7Gk4=)
2: C54BA97E283311ECBE887F3BC4F9AE02.roa (hash: nCKVMdvYXIdspAc77iuSnxMdgz1R5Tl8t85tUkNQu3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl
rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1475 (0x5c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0A62, serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
Validity
Not Before: Sep 24 22:56:56 2026 GMT
Not After : Oct 1 22:56:56 2026 GMT
Subject: CN=6ab5aab8-773a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:ac:ef:ac:e1:d3:ce:a8:73:4e:53:a7:32:
4b:00:1c:c4:de:1c:49:87:42:97:ee:4d:ea:90:93:
22:08:4d:52:ff:b4:e1:a2:6c:2b:fe:21:54:f4:b1:
b9:03:9e:f9:fe:48:61:29:48:31:ec:23:3b:2b:25:
5d:a9:06:61:7a:dc:b9:99:0c:64:bc:cb:8a:65:09:
32:2a:16:ea:d0:70:e7:98:63:0b:51:02:dd:6b:da:
ef:c2:11:ec:91:d3:a8:dd:8c:ba:98:9f:c9:df:3a:
a4:1b:85:17:9f:b7:d1:7d:6a:85:5b:5a:46:e2:65:
35:14:c6:d0:97:76:44:9a:43:10:7a:59:cb:f6:82:
95:13:50:46:10:d6:80:43:72:6c:58:63:9f:7d:0f:
0e:ec:83:14:62:09:62:82:70:f8:f8:8a:69:6c:79:
6d:8a:87:ba:c9:53:a3:c6:de:83:2a:86:f7:be:c5:
3a:6e:75:89:d1:f5:5d:d5:46:3a:81:ce:93:d8:2d:
84:ab:5e:80:54:f3:44:3a:5f:4e:3a:fd:cf:f4:3a:
64:00:e2:17:b9:08:b3:b7:de:c5:7b:e2:0a:3d:63:
aa:a8:96:4b:45:23:52:3d:8d:43:4a:c3:f6:20:58:
8c:59:15:14:35:20:d1:86:7a:01:33:0f:3e:cc:7c:
20:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2E:86:92:69:C5:AC:42:DF:A8:07:94:61:AF:EA:06:B1:85:C6:8A
X509v3 Authority Key Identifier:
keyid:4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:80:5b:9d:71:b9:86:54:fc:42:d0:fe:11:03:b8:5c:66:2d:
78:86:34:f0:6b:3f:ba:01:d3:05:3d:ae:d1:6e:19:03:e0:ae:
90:0c:b6:82:77:b6:7c:79:47:24:55:df:5d:56:c3:bc:71:e2:
75:cf:5a:67:de:35:50:75:f5:f5:88:0e:11:72:d4:fc:1d:b0:
f1:4f:73:f8:7c:d7:07:66:36:a4:b4:ae:cb:41:dd:7c:c9:0a:
ac:72:a6:8c:52:25:d5:77:df:c0:a5:e3:c3:a5:03:c5:f9:57:
5c:47:50:2b:98:d1:97:c2:32:8e:55:6c:53:5b:c3:88:3c:37:
b2:bd:c5:f4:63:60:e0:dc:a6:f2:bb:87:fe:9d:19:e9:8d:73:
85:13:9d:0b:13:86:11:07:f2:a5:61:c8:78:4b:45:94:6c:f8:
c3:87:d2:f5:c0:c9:f8:be:7e:d8:4c:dd:30:2a:7a:6a:3c:3c:
1f:32:7d:24:db:fd:94:2c:6d:ae:cb:6e:7a:79:f4:14:d9:13:
b9:58:1f:bf:76:20:bd:c8:57:d9:c2:53:1e:4a:51:89:ea:09:
00:8d:4a:dc:2b:51:5c:97:ac:75:f0:2a:2d:49:05:83:bf:fa:
7c:18:8d:c6:16:fe:82:6c:41:b4:e5:da:ae:ca:3a:98:08:a5:
52:ed:db:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:47:15 2026 by rpki-client