
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
File: TN7H1CHxboUWcqgSOd0Y_IweOVY.mft (raw, json)
Hash identifier: GBzb1IgMPpWDR6u4WiR1b45Nte9Y4TMS5q/S/BOzXTI=
Subject key identifier: 2C:F4:09:B8:7D:26:2F:CA:72:A4:EA:F2:83:CB:E6:99:71:D6:66:4D
Authority key identifier: 4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56
Certificate issuer: /CN=A91D0A62/serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
Certificate serial: 05A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
Manifest number: 059B
Signing time: Wed 22 Jul 2026 23:57:17 +0000
Manifest this update: Wed 22 Jul 2026 23:57:16 +0000
Manifest next update: Wed 29 Jul 2026 23:57:16 +0000
Files and hashes: 1: TN7H1CHxboUWcqgSOd0Y_IweOVY.crl (hash: DOUjiSXFR816diLB5Got+XiyINRoVNVcW1gyHfMZVlM=)
2: C54BA97E283311ECBE887F3BC4F9AE02.roa (hash: nCKVMdvYXIdspAc77iuSnxMdgz1R5Tl8t85tUkNQu3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl
rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1442 (0x5a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0A62, serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
Validity
Not Before: Jul 22 23:57:16 2026 GMT
Not After : Jul 29 23:57:16 2026 GMT
Subject: CN=6a6158dd-cb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:80:ca:3f:9a:88:ef:2b:3a:f9:3c:3c:56:63:
9c:a0:92:88:91:7e:97:45:0a:bc:a3:ca:1c:6e:39:
10:15:57:d5:1b:b2:4c:5a:56:f9:ba:92:1a:3c:7b:
34:92:c8:e4:d6:68:cc:81:c6:2d:9e:f7:79:da:69:
1e:75:a4:6f:3d:62:1c:11:ec:f0:36:f3:a9:e2:17:
b3:85:cf:ef:8a:d2:e0:f8:c8:63:a0:05:93:4c:42:
c8:12:d9:c4:23:ab:de:48:a8:8a:90:c3:29:60:df:
19:9f:b1:07:d2:c1:d0:f0:3d:9d:96:8b:30:e9:b9:
e4:b9:d5:1a:8f:d6:5e:bc:f6:f9:b2:8a:87:88:4b:
a6:c0:9f:39:df:cc:28:c0:5b:82:6a:f9:2d:63:a0:
69:79:2c:b7:bf:29:df:fb:25:b7:77:74:9b:20:cc:
84:87:70:7e:5c:69:bf:44:0b:c4:06:3b:fe:32:d5:
eb:57:87:43:2d:cd:61:a2:57:5f:f1:c5:5f:bc:e8:
63:d4:4d:6f:38:43:3f:d3:6d:e1:82:25:66:df:fe:
73:7b:e5:33:20:8f:88:5c:2a:9f:a7:a0:cb:6f:ff:
5d:1f:9d:d9:71:38:75:ca:7f:14:b6:ff:5c:44:ce:
10:d7:82:52:8e:13:7d:6f:46:d6:da:25:28:25:5b:
84:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F4:09:B8:7D:26:2F:CA:72:A4:EA:F2:83:CB:E6:99:71:D6:66:4D
X509v3 Authority Key Identifier:
keyid:4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e3:99:72:dc:9a:33:cb:1d:86:15:c0:6b:a1:67:0e:99:9a:
85:d9:00:9b:0e:fb:c1:83:61:1e:3b:32:26:c8:14:85:db:f7:
e3:52:63:bb:1a:2f:f3:24:a3:96:af:de:9b:68:2b:f5:ee:1d:
36:eb:a8:04:f5:d5:7b:e3:41:16:7d:ba:f0:d0:cd:4a:6f:ac:
cb:fc:94:3a:b9:6f:4b:91:b1:03:56:47:7a:41:5f:c8:ed:68:
bd:e3:ae:69:13:d8:db:40:c6:6b:83:d7:99:f0:f2:3c:aa:3b:
ac:23:a9:ff:6c:27:4c:e4:d7:16:bf:e5:f8:4d:f7:39:9f:e0:
04:5b:03:0b:24:5f:0a:6d:6d:52:fa:2d:c2:1b:32:f5:13:77:
fc:a8:76:68:7a:1d:8e:33:00:d4:f2:8a:c2:47:7a:ae:64:4d:
b0:77:34:21:78:67:e5:bc:cd:c9:67:f3:40:af:14:5d:56:d7:
0b:59:e1:53:c1:de:f1:f9:02:d4:5a:3d:d0:95:d4:a9:51:86:
3f:cb:b6:5a:33:ae:d1:a4:dc:45:67:64:a4:f5:8b:66:98:66:
88:af:e9:f8:d4:0f:d6:9a:d2:7f:35:b9:d7:a7:eb:7e:42:d4:
79:76:94:e4:0f:22:7b:5c:7a:c0:f7:8d:61:67:d4:a1:0b:85:
2c:d3:20:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDBBNjIxMTAvBgNVBAUTKDRDREVDN0Q0MjFGMTZFODUxNjcyQTgxMjM5REQxOEZD
OEMxRTM5NTYwHhcNMjYwNzIyMjM1NzE2WhcNMjYwNzI5MjM1NzE2WjAYMRYwFAYD
VQQDEw02YTYxNThkZC1jYjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzIDKP5qI7ys6+Tw8VmOcoJKIkX6XRQq8o8ocbjkQFVfVG7JMWlb5upIaPHs0
ksjk1mjMgcYtnvd52mkedaRvPWIcEezwNvOp4hezhc/vitLg+MhjoAWTTELIEtnE
I6veSKiKkMMpYN8Zn7EH0sHQ8D2dlosw6bnkudUaj9ZevPb5soqHiEumwJ8538wo
wFuCavktY6BpeSy3vynf+yW3d3SbIMyEh3B+XGm/RAvEBjv+MtXrV4dDLc1holdf
8cVfvOhj1E1vOEM/023hgiVm3/5ze+UzII+IXCqfp6DLb/9dH53ZcTh1yn8Utv9c
RM4Q14JSjhN9b0bW2iUoJVuEJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCz0Cbh9
Ji/KcqTq8oPL5plx1mZNMB8GA1UdIwQYMBaAFEzex9Qh8W6FFnKoEjndGPyMHjlW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEE2Mi8xRkE5NkRBMDI4
MzExMUVDOTdBMDEzMTZDNEY5QUUwMi9UTjdIMUNIeGJvVVdjcWdTT2QwWV9Jd2VP
VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RON0gxQ0h4Ym9VV2NxZ1NPZDBZX0l3ZU9WWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MEE2Mi8xRkE5NkRBMDI4MzExMUVDOTdBMDEzMTZDNEY5QUUwMi9UTjdIMUNIeGJv
VVdjcWdTT2QwWV9Jd2VPVlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC+OZctyaM8sdhhXAa6FnDpmahdkAmw77wYNhHjsyJsgUhdv341Jjuxov8ySj
lq/em2gr9e4dNuuoBPXVe+NBFn268NDNSm+sy/yUOrlvS5GxA1ZHekFfyO1oveOu
aRPY20DGa4PXmfDyPKo7rCOp/2wnTOTXFr/l+E33OZ/gBFsDCyRfCm1tUvotwhsy
9RN3/Kh2aHodjjMA1PKKwkd6rmRNsHc0IXhn5bzNyWfzQK8UXVbXC1nhU8He8fkC
1Fo90JXUqVGGP8u2WjOu0aTcRWdkpPWLZphmiK/p+NQP1prSfzW516frfkLUeXaU
5A8ie1x6wPeNYWfUoQuFLNMgJQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:45 2026 by rpki-client