
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
File: tZ39tQipur3Pjaqv4_PeaVn7E6o.mft (raw, json)
Hash identifier: KkwxtaLE3ZkEX8o8XIOMgnu5WO1/6LAlzXR+37ByVd4=
Subject key identifier: 6E:02:AA:DF:35:3B:67:F7:C1:D0:90:82:DD:96:D4:EB:F1:B0:FF:9A
Authority key identifier: B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA
Certificate issuer: /CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA
Certificate serial: 01B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
Manifest number: 01AB
Signing time: Thu 15 Oct 2026 05:02:36 +0000
Manifest this update: Thu 15 Oct 2026 05:02:35 +0000
Manifest next update: Thu 22 Oct 2026 05:02:35 +0000
Files and hashes: 1: tZ39tQipur3Pjaqv4_PeaVn7E6o.crl (hash: EkIiKsnP5v4PVEPGYthtqggKHhul7Aq8J6SsMT72dq0=)
2: 31A71E34407111EFAC14A640C4F9AE02.roa (hash: NvkUPdx5+VVVPCUx3OPsu6oi/eYl/YxTHWPNn/chhZs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl
rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 05:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437 (0x1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1A9C, serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA
Validity
Not Before: Oct 15 05:02:35 2026 GMT
Not After : Oct 22 05:02:35 2026 GMT
Subject: CN=6ad05e6c-390d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:a0:70:d1:d4:a4:0e:54:a4:c9:25:7a:3f:eb:
6d:c9:b0:e5:64:44:c5:c8:3e:6d:b0:e6:f8:00:73:
33:58:7a:2d:df:b0:f1:00:50:1d:6f:59:c4:02:fc:
c9:06:2d:a7:29:e8:ae:86:13:fd:7f:62:db:55:bc:
22:98:6c:e0:7b:da:b0:2f:b5:4f:9a:9a:d1:91:bf:
c8:37:10:a9:91:73:62:09:9a:fd:d3:e6:6f:ed:fc:
57:65:64:82:87:15:74:35:04:4d:c8:e5:18:10:91:
91:d6:da:e6:14:84:90:02:8b:f4:9f:87:18:9a:90:
6c:a0:ed:5a:a6:06:50:f8:53:fa:6d:3d:fa:4e:a4:
08:30:13:b3:8d:7f:9e:18:c0:fb:ee:67:d6:96:57:
df:43:5d:dc:6a:d1:db:43:30:51:d2:c7:88:76:05:
82:03:1f:c8:74:fb:79:59:e6:2b:ea:e0:d6:c5:ae:
a0:36:8a:68:f0:5c:3f:dc:62:90:ef:e8:73:e2:9c:
a1:41:62:4d:6b:12:4c:87:e8:92:94:99:a2:b4:fe:
2a:8e:fa:b0:8b:bb:a6:8c:50:4e:97:f3:7f:4b:10:
96:98:fe:c5:b0:96:26:1d:c9:d5:e1:7f:ae:44:0b:
be:ad:67:0c:11:1f:81:de:cf:fe:69:1f:61:b3:97:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:02:AA:DF:35:3B:67:F7:C1:D0:90:82:DD:96:D4:EB:F1:B0:FF:9A
X509v3 Authority Key Identifier:
keyid:B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:7a:15:a4:68:3a:e1:74:32:c3:cb:1c:cb:ef:c9:d5:62:86:
59:2f:3a:52:1c:af:94:dd:3a:b0:6f:2c:3e:ee:32:3d:dd:0f:
ed:67:ac:bd:9b:9d:1f:cf:0b:02:7b:5f:3f:57:43:85:27:fb:
76:c1:50:d3:de:c4:e5:28:e8:a1:17:a6:a4:c4:93:36:39:d1:
12:91:70:a0:d1:5f:5e:d9:b4:80:3d:88:03:75:3c:80:42:35:
aa:5a:fd:e5:ff:a9:ac:4f:80:d5:5f:90:8c:56:14:35:29:e3:
6f:8a:57:16:b2:67:41:a8:40:36:7c:2d:ed:37:8c:81:03:50:
c5:d7:27:f7:d2:6e:a9:6e:7e:a6:e1:cb:0b:b7:3f:35:32:42:
1a:cb:6d:76:51:1b:2a:fe:72:30:db:cd:0d:45:02:09:7d:cc:
d6:62:68:f3:af:2c:76:42:83:12:57:aa:b2:37:40:ac:55:68:
bc:57:67:c9:15:c1:4a:c4:c8:c7:06:17:20:95:36:97:b2:fd:
7b:d6:28:78:a3:5b:50:29:f2:9e:aa:86:a2:90:f9:f5:12:3a:
91:c7:41:4f:6b:ec:0b:62:44:b2:3a:0e:90:44:ec:b3:c6:a4:
7a:8e:18:0a:33:bd:4d:ff:90:94:b1:42:18:73:f9:20:59:b5:
ea:00:38:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 01:16:22 2026 by rpki-client