
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
File: TN7H1CHxboUWcqgSOd0Y_IweOVY.mft (raw, json)
Hash identifier: SBEHxR0CBWk2mz5tP03JRHkIpefU84J5Dk8c6AwrUak=
Subject key identifier: 22:04:98:55:77:C0:3E:93:C1:F4:47:09:51:EA:F0:A8:92:5C:81:FF
Authority key identifier: 4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56
Certificate issuer: /CN=A91D0A62/serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
Certificate serial: 0565
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
Manifest number: 055E
Signing time: Tue 24 Mar 2026 23:03:36 +0000
Manifest this update: Tue 24 Mar 2026 23:03:36 +0000
Manifest next update: Tue 31 Mar 2026 23:03:36 +0000
Files and hashes: 1: TN7H1CHxboUWcqgSOd0Y_IweOVY.crl (hash: evJVPzvnS/783DbwYpyNBBxXt/LxhFeTIwqGc+HMvDs=)
2: C54BA97E283311ECBE887F3BC4F9AE02.roa (hash: nCKVMdvYXIdspAc77iuSnxMdgz1R5Tl8t85tUkNQu3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl
rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1381 (0x565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0A62, serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
Validity
Not Before: Mar 24 23:03:36 2026 GMT
Not After : Mar 31 23:03:36 2026 GMT
Subject: CN=69c31848-a413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:11:33:08:0a:eb:d7:eb:aa:d6:ab:a4:8a:0e:
fb:0f:d1:47:a7:db:9c:90:81:9d:c3:00:c3:48:7d:
63:a4:0f:db:00:16:74:39:59:78:73:2a:08:26:56:
ba:37:41:e9:3a:82:20:60:e4:d7:39:73:5f:ea:ce:
d1:a0:88:12:3c:03:1a:ee:63:72:6c:fc:96:14:cf:
22:7b:c3:88:cd:dd:09:41:fa:dd:2f:62:4b:67:0b:
9c:ce:1b:9e:a4:4a:8e:84:30:02:35:6b:ac:e9:53:
0e:f4:08:ee:63:74:a8:3b:d2:d6:5d:58:e7:ed:f4:
ae:65:14:05:4e:62:71:7d:d1:bd:f5:06:db:a9:dc:
d6:ef:96:b9:d9:78:33:38:82:b8:0c:b8:ad:ce:51:
92:47:ea:75:7b:cf:68:48:a7:05:d2:ac:31:bd:1e:
c2:a8:06:a0:9c:e1:38:9a:e0:3f:3b:c3:dd:70:4b:
d9:b5:98:0f:59:3e:b9:0f:63:c2:14:c2:be:05:b3:
f2:ab:28:8a:05:1a:66:ef:79:6e:59:6e:4e:21:a5:
ed:3d:3d:56:bb:d5:6c:c4:f8:c6:30:af:d0:e1:22:
f2:71:56:7c:e4:a7:04:e7:de:19:0e:56:a4:af:93:
16:6a:6e:f9:ed:07:e4:6c:a4:b8:de:e3:24:b7:93:
17:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:04:98:55:77:C0:3E:93:C1:F4:47:09:51:EA:F0:A8:92:5C:81:FF
X509v3 Authority Key Identifier:
keyid:4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:93:de:5b:d7:69:fe:27:21:d5:8f:2a:77:a0:68:40:4f:10:
39:10:d1:83:10:a1:4e:65:8a:59:4c:5a:f2:65:e1:f2:06:54:
09:45:af:f5:c6:ee:c0:ec:2e:31:d8:ab:59:f4:ab:55:e4:f9:
b1:36:dc:f0:1a:41:02:f3:5a:0d:b4:06:b8:cd:af:60:81:df:
e8:bc:d1:ae:e5:f2:c7:63:33:f2:b6:5b:fb:d1:08:21:e3:00:
91:20:06:d5:37:c4:19:d0:e5:97:06:c8:3d:6b:ab:c7:f4:c7:
09:79:33:e1:4f:eb:46:6b:05:0b:01:ca:bf:85:48:d2:a8:b6:
29:b3:b4:8c:fe:5a:14:62:cf:b5:e3:15:5f:8c:eb:94:4d:13:
56:34:aa:54:6f:03:1f:1a:86:88:ea:ec:d2:51:bd:74:5d:a1:
c6:9a:54:95:ed:67:4a:25:05:b1:c4:15:12:94:9e:2c:60:ac:
2f:ea:fb:89:10:13:71:35:56:9e:f9:82:4d:4b:3a:80:6c:f2:
8b:75:92:c0:d8:30:47:ce:0d:e4:e5:48:63:12:79:b1:4f:bd:
85:c5:ff:9b:a7:f7:53:d9:83:a8:0d:71:d2:7e:59:6c:4b:81:
4c:40:0a:69:8a:e4:48:39:c8:76:a0:f0:38:d4:dc:d4:4a:4f:
09:9c:7a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:50:21 2026 by rpki-client