
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
File: tbNfkk61wy-7QYZ9OhZuSpa77KI.mft (raw, json)
Hash identifier: TRvh5NDFjuNVeHfDX8H2MC3kP8s/XUMELwZ1/SEFpTc=
Subject key identifier: F2:B3:46:AE:19:C9:6B:5E:84:46:94:EA:B2:F4:10:F8:FC:A5:CA:4F
Authority key identifier: B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2
Certificate issuer: /CN=A91D9928/serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
Manifest number: 9B
Signing time: Thu 23 Jul 2026 09:10:58 +0000
Manifest this update: Thu 23 Jul 2026 09:10:57 +0000
Manifest next update: Thu 30 Jul 2026 09:10:57 +0000
Files and hashes: 1: tbNfkk61wy-7QYZ9OhZuSpa77KI.crl (hash: ETkjKM2WvH0A35R8TvATnep+Bxqm4q5zOgZaJlGE7ns=)
2: A71814CA984F11F0B7A01E76C4F9AE02.roa (hash: Wqlgag3JASt9EH/u+Cc5ukalg78nje36S+xtNjVr+A4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl
rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9928, serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
Validity
Not Before: Jul 23 09:10:57 2026 GMT
Not After : Jul 30 09:10:57 2026 GMT
Subject: CN=6a61daa2-97c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:cd:13:06:3c:e3:6d:0b:2d:ce:78:a9:a3:
6c:00:87:b6:ef:2d:cb:47:7b:48:00:d7:be:14:d3:
55:68:04:be:f8:6b:b4:e9:da:e0:cf:7c:d4:f7:63:
8b:b2:79:8a:81:d0:99:c6:eb:4d:0d:36:f9:44:dd:
79:24:03:34:2d:a8:a3:5c:eb:52:9f:dc:92:b9:49:
3e:85:3e:d3:7b:52:5d:17:ba:8b:41:b0:af:68:d0:
cb:6a:23:27:43:ba:92:17:29:60:99:d9:99:e9:37:
5c:91:10:64:c8:e3:bc:41:c1:3f:45:7d:f5:bd:95:
a8:c4:1d:e6:2b:bb:c8:46:bb:80:43:f3:60:46:e3:
66:2d:82:29:65:a5:9a:be:b9:3a:96:92:c0:7b:35:
17:eb:95:b2:7e:e1:0f:9e:a0:68:00:b3:62:96:bd:
c1:1f:a1:68:8f:4c:ef:d4:8a:bb:e8:c0:f3:d9:de:
3e:e5:22:aa:02:7d:7b:74:59:bb:e3:3b:e1:4d:32:
49:63:56:2e:54:84:0a:a4:69:97:32:ac:d7:c0:41:
76:57:3b:3e:4b:ec:ed:62:c8:05:e1:a3:a3:dd:78:
81:b8:e8:0a:6f:6c:51:2d:c5:5a:ae:cb:72:82:6d:
95:08:2e:6d:ac:91:08:83:99:91:df:f3:09:55:99:
2a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B3:46:AE:19:C9:6B:5E:84:46:94:EA:B2:F4:10:F8:FC:A5:CA:4F
X509v3 Authority Key Identifier:
keyid:B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:52:25:f8:72:3c:d7:0e:06:d1:d7:ec:e7:21:68:18:f3:f8:
ef:f4:8b:9c:bb:86:b3:87:49:a5:86:bf:21:3c:12:27:69:f0:
f6:10:2e:d1:2a:0b:ca:03:5b:4b:10:5c:9d:45:a8:fa:0f:84:
f0:23:1c:34:86:15:62:bb:ba:f5:ed:d1:63:1f:9f:eb:71:66:
7e:bb:3a:4f:be:e8:53:2d:0a:f3:80:d7:34:ab:f0:82:82:d9:
cf:9c:3e:16:ba:ce:2c:d7:6d:28:f3:ec:ba:19:9c:d4:ff:52:
69:1e:7f:3a:db:6f:aa:c0:65:69:49:4a:19:14:d3:a1:47:2c:
55:6c:46:bf:e6:a9:a6:ec:2b:f9:1e:5d:f7:b8:16:7c:7a:b3:
a2:1c:86:cb:0f:70:18:e3:5e:28:99:b6:bf:98:5e:d6:f7:bf:
86:1d:0e:8e:85:58:a4:36:48:6a:55:9b:58:75:97:e1:98:cd:
6e:da:c4:aa:ab:60:b6:a9:c7:56:aa:7d:cd:44:61:08:32:2d:
fe:b3:44:95:ea:f8:02:98:45:0f:76:35:15:30:ff:dc:2a:1f:
f3:14:f2:d4:f5:89:c0:db:60:f6:25:72:db:0f:e9:f7:e6:7e:
16:07:5c:b0:30:e6:97:7f:04:d7:36:79:4a:aa:8c:fb:78:06:
f5:d8:34:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:57:03 2026 by rpki-client