
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json)
Hash identifier: FwNYzRBX582e8FpWnvohO9Ag+rfFwEjGmOm8OrSF58s=
Subject key identifier: B4:FE:75:03:C6:92:AD:39:F6:65:78:47:5A:C4:FB:F2:AC:BD:CB:9D
Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Certificate serial: 3570
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
Manifest number: 3545
Signing time: Thu 26 Mar 2026 14:29:08 +0000
Manifest this update: Thu 26 Mar 2026 14:29:08 +0000
Manifest next update: Thu 02 Apr 2026 14:29:08 +0000
Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: OQhv1tcKI3JIgFg817AgQNSgqrxE+bhCSHYyHy35lVk=)
2: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: 0XTEt5zoDaqcrBr+823BjJa/ThjwRUzgKmsZbBXqoBs=)
3: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: zH3hNiG3oNZT93Paosmg2thFHMW31DTiFkny+zicvU4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:29:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13680 (0x3570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Validity
Not Before: Mar 26 14:29:08 2026 GMT
Not After : Apr 2 14:29:08 2026 GMT
Subject: CN=69c542b4-727e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d4:9a:94:6b:f1:7c:ae:53:f7:55:a3:9e:59:
dc:41:b4:03:d8:33:6d:57:26:c0:66:59:1c:91:b2:
fc:cb:0d:71:97:18:cd:c9:36:75:69:03:82:7c:da:
99:24:19:0b:11:95:0e:e7:6a:bd:1f:3b:24:dc:24:
83:3e:e8:db:07:55:2b:6d:7c:c1:60:f3:ec:8c:23:
51:60:13:6a:de:7b:2c:4e:35:34:38:1a:59:08:f4:
70:d0:00:de:22:08:15:d2:68:f5:88:53:b6:d3:c2:
0f:db:83:82:fc:8d:9a:cf:a7:de:7b:eb:34:a6:2d:
6c:53:2a:b0:7d:00:9c:b0:25:12:2c:06:a3:7e:84:
cd:b8:6c:e8:39:ce:87:b1:8e:9c:53:e5:70:8e:9a:
b0:c8:99:97:14:f3:49:2b:15:dd:03:96:c1:96:1f:
d2:ba:2b:86:a5:26:d7:30:97:93:5d:83:d9:17:26:
75:5c:fc:29:0d:eb:97:46:19:d1:d4:94:7c:68:84:
00:ea:c1:87:5b:38:c1:85:4b:8b:d3:bd:d7:2e:41:
70:8e:70:ea:e3:1c:bd:26:60:22:f1:08:61:3c:91:
97:a9:bc:c9:37:0e:34:4f:43:c0:6e:df:3b:4c:7c:
96:ff:bd:bb:d1:ac:e2:07:88:e2:e8:9f:39:a3:e3:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FE:75:03:C6:92:AD:39:F6:65:78:47:5A:C4:FB:F2:AC:BD:CB:9D
X509v3 Authority Key Identifier:
keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:ad:0a:fa:d4:fc:b8:e7:ac:60:f2:68:2c:73:42:21:df:24:
1d:26:9a:85:b2:7c:26:68:5a:67:3e:f2:d8:53:e7:45:cf:71:
8b:b6:82:c7:3d:f1:e7:5e:87:5b:40:67:86:47:19:87:2d:c8:
4d:fc:39:79:3f:31:62:43:4e:4f:b0:2c:08:de:0e:40:c0:c1:
14:86:22:ce:45:79:39:39:63:8b:2a:8e:28:f4:77:81:c3:be:
b7:cf:50:5c:86:63:c0:df:b5:1d:a3:6c:86:c7:f4:46:31:60:
ca:3c:3e:84:87:aa:91:a8:36:e9:6e:42:0a:62:b6:4b:3f:14:
52:c1:5b:d5:88:d5:52:fc:7b:95:26:61:18:09:91:0f:4e:98:
62:c2:e1:7b:8b:8d:26:cf:2e:f9:d2:a3:13:91:37:89:33:12:
0c:54:0d:50:3b:0a:5c:20:40:00:5e:9c:cd:2f:2a:48:a2:fa:
38:33:62:37:31:19:6b:7c:13:28:42:d3:27:9d:3e:37:3e:4a:
22:ea:f5:b2:79:52:03:ce:85:28:46:c6:ec:94:d1:c9:30:3b:
ac:a7:25:0c:b5:2d:96:f5:0b:89:93:a7:60:69:3d:49:b5:db:
b9:77:7e:e4:22:f9:31:40:32:26:f4:2d:ba:d1:54:cc:c1:60:
d9:84:34:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:29 2026 by rpki-client