
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
File: tbNfkk61wy-7QYZ9OhZuSpa77KI.mft (raw, json)
Hash identifier: OJ5qwLp9yhHqPklf/pDjfdTaaZmtEetQyUsgd1oAs2c=
Subject key identifier: B6:19:38:D5:D7:05:A2:12:B0:8C:61:D3:A0:11:8B:6E:BA:A2:1C:59
Authority key identifier: B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2
Certificate issuer: /CN=A91D9928/serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
Manifest number: 77
Signing time: Mon 11 May 2026 07:53:33 +0000
Manifest this update: Mon 11 May 2026 07:53:32 +0000
Manifest next update: Mon 18 May 2026 07:53:32 +0000
Files and hashes: 1: tbNfkk61wy-7QYZ9OhZuSpa77KI.crl (hash: P0VGQ8suUTV95EF9b77Q5ttQQ1v4/NfX7AzwiKNVwh8=)
2: A71814CA984F11F0B7A01E76C4F9AE02.roa (hash: Wqlgag3JASt9EH/u+Cc5ukalg78nje36S+xtNjVr+A4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl
rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:53:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9928, serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
Validity
Not Before: May 11 07:53:32 2026 GMT
Not After : May 18 07:53:32 2026 GMT
Subject: CN=6a018afc-d9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:c6:db:35:9f:15:72:e3:d2:08:f6:b5:bf:
8d:68:45:ee:d2:bb:d7:71:0e:bb:b6:6c:f1:c0:4c:
02:83:33:78:f7:8d:55:f5:dc:0c:99:09:5a:6f:7b:
2b:0c:ad:79:39:fd:32:e5:55:f8:b2:dd:e2:32:09:
19:47:16:ef:c9:78:da:17:c2:ff:ed:0f:d3:f1:c7:
be:48:23:0a:b2:92:20:78:19:ca:89:5d:64:54:91:
21:e4:84:63:8d:d4:a7:68:e1:6b:fe:09:f2:42:09:
cb:15:e9:6f:f7:da:a2:09:08:82:7c:47:7e:57:25:
9e:b5:1b:a6:e7:5c:94:a6:48:57:33:e7:4d:3b:51:
02:f4:c1:ed:f2:03:6f:7a:b6:d0:bb:02:c4:e1:ef:
30:0d:fa:99:0c:9e:96:74:bc:ab:c8:33:ed:d9:f3:
e4:2b:2d:9c:3c:6f:e4:53:27:c5:9d:37:0c:70:87:
e0:2c:a8:2a:77:a6:c1:04:9a:1a:1c:11:3f:61:61:
32:d0:75:c0:89:94:a5:b4:37:c9:d9:1c:e3:91:8f:
27:f2:77:b6:48:12:6d:35:6c:f4:b6:e2:a9:9d:ae:
20:ee:c3:0c:2e:e3:4c:af:06:33:82:c1:19:fe:b0:
87:28:46:a0:b1:20:dd:86:40:29:47:47:ac:5e:69:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:19:38:D5:D7:05:A2:12:B0:8C:61:D3:A0:11:8B:6E:BA:A2:1C:59
X509v3 Authority Key Identifier:
keyid:B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:65:a4:dd:d6:cf:e7:80:54:e5:da:04:95:a7:e0:32:a8:08:
e4:29:85:06:51:3b:30:e9:bd:eb:c8:94:f1:b1:47:0a:9b:8a:
3c:a1:00:6b:3a:96:a0:b2:3b:ba:de:b8:24:08:de:d2:16:a5:
2e:8e:90:e3:04:4d:1f:55:64:86:9b:62:55:ee:24:50:d2:1d:
73:af:fd:54:a8:77:1e:60:a2:1a:cc:de:5e:78:4d:3d:44:43:
ce:7a:b1:4f:ba:05:5f:06:77:89:dd:3b:1a:2e:49:ae:46:ae:
4d:7d:e1:ff:5f:91:6d:96:87:fb:5a:cc:22:d7:4c:83:2b:97:
cb:2a:ad:70:98:e0:ee:3b:77:85:44:e3:cb:fa:9e:d1:6f:98:
85:bc:b4:7a:dc:d8:e6:eb:db:ba:d2:5b:c6:43:b1:da:ff:14:
a4:94:de:d5:4e:7b:fb:09:69:67:b5:bb:76:d4:de:d6:f9:0e:
0f:94:ba:78:30:a9:9d:8e:5d:f1:e6:05:b8:34:40:2c:87:72:
20:2a:7c:1b:3f:ac:f0:44:f5:09:ba:08:94:1e:e3:77:b4:15:
b6:9c:08:5b:7e:0d:76:d5:18:d9:41:3c:22:d2:15:3c:c3:d7:
66:76:ba:85:12:33:da:83:c5:85:e5:a7:2f:ee:4c:48:26:37:
87:74:75:e3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
OTkyODExMC8GA1UEBRMoQjVCMzVGOTI0RUI1QzMyRkJCNDE4NjdEM0ExNjZFNEE5
NkJCRUNBMjAeFw0yNjA1MTEwNzUzMzJaFw0yNjA1MTgwNzUzMzJaMBgxFjAUBgNV
BAMTDTZhMDE4YWZjLWQ5ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDBsbbNZ8VcuPSCPa1v41oRe7Su9dxDru2bPHATAKDM3j3jVX13AyZCVpveysM
rXk5/TLlVfiy3eIyCRlHFu/JeNoXwv/tD9Pxx75IIwqykiB4GcqJXWRUkSHkhGON
1Kdo4Wv+CfJCCcsV6W/32qIJCIJ8R35XJZ61G6bnXJSmSFcz5007UQL0we3yA296
ttC7AsTh7zAN+pkMnpZ0vKvIM+3Z8+QrLZw8b+RTJ8WdNwxwh+AsqCp3psEEmhoc
ET9hYTLQdcCJlKW0N8nZHOORjyfyd7ZIEm01bPS24qmdriDuwwwu40yvBjOCwRn+
sIcoRqCxIN2GQClHR6xeaS9hAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUthk41dcF
ohKwjGHToBGLbrqiHFkwHwYDVR0jBBgwFoAUtbNfkk61wy+7QYZ9OhZuSpa77KIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5OTI4LzU3REZCRUJDOTg0
RjExRjA4NTQwMjk3NUM0RjlBRTAyL3RiTmZrazYxd3ktN1FZWjlPaFp1U3BhNzdL
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdGJOZmtrNjF3eS03UVlaOU9oWnVTcGE3N0tJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5
OTI4LzU3REZCRUJDOTg0RjExRjA4NTQwMjk3NUM0RjlBRTAyL3RiTmZrazYxd3kt
N1FZWjlPaFp1U3BhNzdLSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBNZaTd1s/ngFTl2gSVp+AyqAjkKYUGUTsw6b3ryJTxsUcKm4o8oQBrOpagsju6
3rgkCN7SFqUujpDjBE0fVWSGm2JV7iRQ0h1zr/1UqHceYKIazN5eeE09REPOerFP
ugVfBneJ3TsaLkmuRq5NfeH/X5Ftlof7Wswi10yDK5fLKq1wmODuO3eFROPL+p7R
b5iFvLR63Njm69u60lvGQ7Ha/xSklN7VTnv7CWlntbt21N7W+Q4PlLp4MKmdjl3x
5gW4NEAsh3IgKnwbP6zwRPUJugiUHuN3tBW2nAhbfg121RjZQTwi0hU8w9dmdrqF
EjPag8WF5acv7kxIJjeHdHXj
-----END CERTIFICATE-----
Generated at Wed May 13 07:17:33 2026 by rpki-client