
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json)
Hash identifier: LqCmOaSbhk4Wv/8rfSkPn1WGOD8kvvRtvkn9iJ6cgQQ=
Subject key identifier: 63:14:E5:E0:61:29:75:3A:72:93:40:43:C7:FF:0D:8F:23:A0:C8:AF
Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Certificate serial: 35CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
Manifest number: 35A2
Signing time: Thu 24 Sep 2026 14:29:34 +0000
Manifest this update: Thu 24 Sep 2026 14:29:33 +0000
Manifest next update: Thu 01 Oct 2026 14:29:33 +0000
Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: ip9aes4Z+s8jd7i5msWPPw4cHmZ+xNCZMhfcU85WtU4=)
2: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: zH3hNiG3oNZT93Paosmg2thFHMW31DTiFkny+zicvU4=)
3: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: 0XTEt5zoDaqcrBr+823BjJa/ThjwRUzgKmsZbBXqoBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13773 (0x35cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Validity
Not Before: Sep 24 14:29:33 2026 GMT
Not After : Oct 1 14:29:33 2026 GMT
Subject: CN=6ab533ce-acd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:44:7c:33:ab:5d:6b:66:0f:91:13:d3:0c:
28:10:6c:ab:cc:ca:d8:d3:20:1b:ba:6f:84:4e:4a:
a3:8f:35:39:4e:be:b6:a7:70:e8:6e:93:6d:17:41:
5c:d1:0c:a0:16:1b:28:87:cc:cb:c6:d3:8c:6c:22:
88:03:3d:34:5b:f0:64:79:25:71:87:21:e4:08:77:
32:ab:ed:6c:15:87:55:de:3d:88:11:90:6f:52:88:
2d:40:dd:7a:8a:58:97:6d:5d:93:d7:81:9b:21:dd:
16:df:fe:75:36:22:77:15:5a:90:6d:93:d7:1d:83:
8e:f2:81:1f:0d:f7:0f:98:04:27:2a:eb:95:5e:5f:
5f:ad:ca:f9:78:8a:2a:b8:28:f5:07:fb:f2:21:73:
12:a8:2b:e7:71:0e:24:73:9f:e7:47:27:29:34:f7:
78:01:b8:91:4f:56:c4:f9:43:d3:cc:c5:e0:75:53:
08:f7:d6:c6:fa:89:53:50:e8:be:cd:4d:e7:eb:c1:
14:e1:d1:bb:64:68:1d:c8:fa:55:83:ab:dd:da:0e:
ce:b7:28:94:f3:38:2e:70:b6:cc:00:b2:a8:7f:6f:
b0:ca:5a:ac:41:10:7f:08:db:9b:dc:33:f7:d2:c4:
c9:e6:9a:1e:59:ab:12:df:d9:1f:be:40:e7:75:c2:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:14:E5:E0:61:29:75:3A:72:93:40:43:C7:FF:0D:8F:23:A0:C8:AF
X509v3 Authority Key Identifier:
keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:56:66:52:9c:d9:02:90:fe:8e:03:59:63:9e:3b:e2:dc:ac:
67:b9:78:f8:64:36:f5:87:3b:ea:a0:d2:41:bb:09:6d:f3:6d:
e8:8b:14:8c:ea:41:ec:56:96:a1:0e:2a:45:fb:0e:49:ec:42:
1e:ac:98:57:d4:71:28:d9:60:f8:1a:d9:ed:d9:f7:31:36:05:
c5:88:04:68:09:d1:0c:e1:3f:5a:93:43:9b:9e:4a:12:43:3a:
d0:45:d2:d6:5a:e0:56:86:be:b4:e2:a3:e5:b7:4e:b6:c6:54:
3b:0d:2d:24:2a:f3:f2:dd:e5:6d:1e:87:c7:54:0e:38:8d:4a:
fa:24:23:16:76:77:0c:b1:a0:80:eb:0a:a7:47:35:60:1d:bc:
dd:fe:95:dc:b8:92:ad:cd:b4:1d:e2:15:78:0f:4f:40:6f:39:
64:b8:8d:36:91:2c:92:79:a6:c3:88:42:9d:bc:36:99:a8:60:
c4:a7:d4:e2:9c:c9:6c:75:92:dc:dd:8a:08:a9:40:86:f2:fe:
d0:66:21:5e:b0:cd:67:0b:ed:be:be:5c:68:cf:bf:1f:63:98:
ea:b9:c9:13:cc:cf:7a:35:0d:d5:65:7a:50:ca:9c:71:f8:48:
fe:e6:82:47:46:10:b4:e4:6a:83:b7:e3:60:ae:50:2c:7e:3a:
ca:d9:0c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:01:50 2026 by rpki-client