
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
File: TZCQh73foVBeK7oD8gYRLq7_sRs.mft (raw, json)
Hash identifier: c2Dmlulb38GH+Ll00oB8BAl3MY5029nIsky/ML2RKoI=
Subject key identifier: B3:C1:FA:19:F3:C8:25:37:96:A5:66:F7:D8:8A:7D:9A:39:2A:DA:95
Authority key identifier: 4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B
Certificate issuer: /CN=A91D200F/serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
Certificate serial: 027D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
Manifest number: 026B
Signing time: Mon 21 Sep 2026 02:13:34 +0000
Manifest this update: Mon 21 Sep 2026 02:13:33 +0000
Manifest next update: Mon 28 Sep 2026 02:13:33 +0000
Files and hashes: 1: TZCQh73foVBeK7oD8gYRLq7_sRs.crl (hash: 8DCbhzCPo7Dr1XiNwcq08hEdqErYCUxTsbnsr6hh8nY=)
2: 039807B286B511EFAF868C6EC4F9AE02.roa (hash: GJOKnnR35/W//5xyyD5B9yPrJQet8eLCLqSkDmsdIrE=)
3: D71B60EC2B5911EE81C7542FC4F9AE02.roa (hash: Jas/B/HKgv6Ds9cxbOl0LkWTFVaps0+gG/0AuMhiV68=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl
rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 637 (0x27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D200F, serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
Validity
Not Before: Sep 21 02:13:33 2026 GMT
Not After : Sep 28 02:13:33 2026 GMT
Subject: CN=6ab092ce-102d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3b:8e:39:6c:4f:ed:a3:84:10:6f:f5:d3:56:
3e:6d:e1:49:db:aa:99:d3:20:85:a3:14:98:39:57:
06:c7:d0:89:95:86:26:61:10:b6:73:fd:a2:8a:55:
9c:d9:c7:3b:0f:23:1a:0d:50:f1:dc:1a:68:ae:37:
f9:88:50:23:82:59:28:22:fb:42:48:a7:6e:b1:78:
e2:5c:59:45:35:e0:96:27:f7:5b:a8:c4:e6:fc:0a:
f8:12:76:f8:4a:9e:f2:bf:81:8e:3d:9e:78:40:b7:
38:ba:03:f4:2a:5f:ba:54:af:1a:ac:14:d2:f4:2d:
c0:b7:bb:3c:1e:43:96:e8:ae:36:53:d0:87:15:3b:
fe:50:00:f0:41:b1:15:44:b2:65:35:e2:fa:a1:8c:
fb:2c:f6:e2:6d:20:8a:f7:6c:fd:7b:5b:0d:f2:97:
59:ad:20:fb:22:9a:9b:df:8e:09:79:ce:07:c6:68:
22:7c:e6:75:97:07:2d:69:87:8f:a9:9b:a6:23:f2:
58:a8:0e:cd:fe:4b:ae:6a:3a:1b:84:29:a2:75:d6:
4a:b0:af:ca:b2:32:50:0e:c2:3d:d4:28:13:f8:37:
81:98:c2:e1:e3:51:db:17:2d:ea:8e:cd:b8:6e:2c:
a4:45:ef:6c:db:8a:2b:15:e8:7c:c4:fd:fc:1a:05:
2b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C1:FA:19:F3:C8:25:37:96:A5:66:F7:D8:8A:7D:9A:39:2A:DA:95
X509v3 Authority Key Identifier:
keyid:4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:64:75:8a:03:07:55:a7:fd:c1:41:13:ab:ad:52:2e:25:17:
26:10:b0:5d:a3:05:53:bf:1e:35:1b:5a:ad:b1:e7:72:a3:84:
9d:98:4a:bf:2a:f3:fa:ae:38:1d:db:fc:22:60:4e:78:0d:7f:
7a:fe:44:f7:9c:83:ef:31:a5:0f:53:e9:1f:04:ed:b5:a5:c8:
8d:cd:49:a1:0c:56:72:1c:ae:1a:df:86:b1:63:99:7b:ee:1e:
18:8b:4f:cf:d3:f7:07:d1:7c:0b:28:dc:f1:a6:4a:7e:e1:26:
50:b6:fb:f9:5b:4f:84:50:84:c6:f5:26:28:c2:09:9a:91:b4:
cb:f7:68:79:d8:ed:fa:3b:8b:32:af:0c:ed:d9:f5:f3:a8:6c:
6f:40:92:04:c9:51:ac:25:96:5d:c5:fd:45:aa:4d:06:05:da:
33:75:80:09:89:a5:0f:0a:35:39:de:c6:b8:bc:59:60:25:e3:
b5:56:aa:02:16:16:11:b8:d1:99:1b:c9:94:15:fc:5a:e4:66:
85:f4:8e:eb:ef:e3:ad:f6:3d:d6:42:99:29:77:1d:c3:81:1a:
85:31:07:0e:09:7e:2b:f2:48:55:c2:c8:d8:04:f2:e4:22:12:
e8:32:7a:c6:49:7f:51:84:15:71:21:70:05:4a:57:8d:e4:b2:
2c:2b:45:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:22:24 2026 by rpki-client