
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json)
Hash identifier: sV7s0OPK7xmk7afNrs307DJs1rNv9L0mbOZx0h7/BAw=
Subject key identifier: C0:B3:5C:10:3B:D0:F7:EF:7A:11:B5:A3:1B:F3:9F:BB:CD:FB:E3:1F
Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Certificate serial: 35AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
Manifest number: 3581
Signing time: Wed 22 Jul 2026 14:30:43 +0000
Manifest this update: Wed 22 Jul 2026 14:30:43 +0000
Manifest next update: Wed 29 Jul 2026 14:30:43 +0000
Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: r3vP254KXYkqr8EHnf1oqOr4YLwMHcTZXiHHYyi3/A0=)
2: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: 0XTEt5zoDaqcrBr+823BjJa/ThjwRUzgKmsZbBXqoBs=)
3: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: zH3hNiG3oNZT93Paosmg2thFHMW31DTiFkny+zicvU4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13740 (0x35ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Validity
Not Before: Jul 22 14:30:43 2026 GMT
Not After : Jul 29 14:30:43 2026 GMT
Subject: CN=6a60d413-ad76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d5:3d:a7:69:f4:53:b2:17:12:79:60:50:82:
ab:57:ee:39:f9:74:dd:a0:8a:e4:27:ca:fc:59:ad:
99:cb:c4:c2:f9:eb:b1:9c:33:a4:79:98:d1:a0:94:
a2:84:e1:c6:8c:76:18:e2:61:86:d9:9b:7b:4b:be:
7d:cd:9f:eb:fd:ae:75:6f:e2:fe:af:3e:bf:3b:3f:
99:78:5b:81:aa:bd:15:03:dc:cd:28:02:e7:43:1a:
dd:7d:68:e7:12:c6:85:bb:d7:fa:de:bc:cc:a1:0a:
f7:48:d7:a8:ec:c0:c2:29:a3:9c:e2:d0:56:8f:52:
dc:3a:ae:ed:f9:7c:c0:fe:d1:a7:b9:86:39:6b:0c:
40:ea:a0:bb:b9:f8:68:76:3f:c8:a3:8b:55:aa:19:
11:06:3d:11:40:d9:06:68:8a:a1:12:e1:ec:4c:73:
eb:89:b5:da:9a:52:19:4f:fb:ad:35:c4:a8:d7:29:
2f:ed:da:65:17:14:5d:aa:4a:36:b4:99:27:11:ad:
d5:d5:04:bf:04:8b:af:2f:cb:94:54:57:f5:59:9b:
e2:d8:a4:c1:86:64:2a:25:4c:69:03:af:c6:a8:41:
02:29:27:16:27:d2:0d:00:ed:d6:4d:6f:9e:af:2a:
41:cb:cb:20:ee:e9:ea:6a:59:9c:2f:c4:bd:ec:07:
d9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B3:5C:10:3B:D0:F7:EF:7A:11:B5:A3:1B:F3:9F:BB:CD:FB:E3:1F
X509v3 Authority Key Identifier:
keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:31:96:b3:4d:ea:18:ac:2e:47:ca:fb:ea:c8:41:1e:9e:66:
6c:7c:e1:2d:55:da:5b:0d:a9:85:2d:af:a3:9a:74:cf:8b:96:
66:f2:95:c4:21:67:95:76:93:a9:de:4a:58:2b:20:70:39:5d:
fd:72:f8:c2:a8:f9:4e:16:5c:37:e1:49:69:ce:1d:20:77:a7:
36:ee:0e:d2:0e:a0:06:08:b1:21:4c:b0:3b:90:73:4b:f3:eb:
1f:be:92:ef:b4:5d:89:8d:db:99:03:ab:c8:4b:93:b5:e7:cb:
75:94:f2:80:75:87:54:43:3d:7c:2d:c8:2e:81:66:5b:c6:02:
28:c0:86:82:24:7a:b7:50:fd:18:59:69:66:3e:1a:4f:5d:29:
a9:4a:3f:8a:bc:cc:5a:c0:bf:fc:87:4f:74:b5:ad:62:a5:ed:
51:db:fd:79:5f:a8:a1:4b:fd:19:f0:c3:2f:6a:3d:92:49:40:
cd:58:18:49:82:fc:91:16:ca:5f:37:40:34:42:9d:5c:11:8c:
56:60:9a:73:83:23:ab:89:da:2c:0b:52:c9:99:39:a6:a4:e8:
18:5a:46:93:0d:c8:61:52:38:be:8c:55:c0:86:18:e6:c4:6f:
6b:a3:0d:22:34:a9:6a:9d:65:71:1f:2c:16:3a:37:da:3d:f3:
ea:6e:70:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:35 2026 by rpki-client