
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
File: TnWast4kVGn4MRuSc7VVOH51CpA.mft (raw, json)
Hash identifier: R6RS87eWVAwP2Avy+rWTwct7QMAdc0Wah5sICBe5pG8=
Subject key identifier: 0E:CA:3A:CB:6C:3B:E0:3E:06:8A:CB:C8:07:25:32:62:A6:A3:51:1E
Authority key identifier: 4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90
Certificate issuer: /CN=A91DF233/serialNumber=4E759AB2DE245469F8311B9273B555387E750A90
Certificate serial: 0113
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
Manifest number: 010F
Signing time: Mon 11 May 2026 06:06:39 +0000
Manifest this update: Mon 11 May 2026 06:06:38 +0000
Manifest next update: Mon 18 May 2026 06:06:38 +0000
Files and hashes: 1: TnWast4kVGn4MRuSc7VVOH51CpA.crl (hash: 0CaMhQcmxl9lbJLBBPL3/jtjiC+VuM99agPt6/dt/uY=)
2: 1FE0E016B37D11EFBDE18263C4F9AE02.roa (hash: dVowzphy2uXgtzt1PiwbcwH9pWDhfnknLc0RqbSLyzs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl
rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF233, serialNumber=4E759AB2DE245469F8311B9273B555387E750A90
Validity
Not Before: May 11 06:06:38 2026 GMT
Not After : May 18 06:06:38 2026 GMT
Subject: CN=6a0171ee-4944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d2:97:e8:f6:7b:e5:74:7a:a9:7f:71:2b:b0:
85:14:e9:40:45:a5:46:4b:17:4d:3d:c5:ba:54:f3:
fe:47:b1:40:b5:dc:fc:46:59:cd:2e:f7:df:46:bb:
13:e9:9c:87:88:a9:0a:b9:60:af:5b:97:3f:e4:98:
6f:59:0b:99:b8:0c:1b:24:32:f9:53:68:86:73:19:
3b:ea:8a:e6:d7:2c:d4:66:2f:b3:14:65:f5:ec:74:
28:ee:e0:fb:c3:35:17:4f:73:0c:c5:74:68:71:8b:
11:ba:2e:e9:6e:ae:2b:f7:66:3f:58:aa:c8:0d:cf:
58:ad:a0:29:4f:8e:16:5a:87:b8:04:ab:9e:e0:01:
b6:ba:53:a9:86:6c:20:b7:44:fb:3a:84:78:ed:f2:
4f:9a:61:10:23:8f:44:0f:d0:a7:0d:a4:09:3c:ea:
6f:02:7f:2d:98:84:c0:d5:53:f6:b6:82:c0:cd:d3:
ec:7c:43:49:fd:f7:df:85:59:e8:ab:e7:e0:27:2b:
ff:fe:45:56:14:29:9e:dd:0e:10:04:e8:d8:77:a2:
82:34:d0:dc:3c:12:af:3c:65:8d:9b:31:6d:e1:26:
68:db:cd:b8:a5:14:9a:dc:f5:c8:12:ae:32:4b:74:
5c:e7:f9:27:98:d5:9c:fe:5b:3e:03:02:55:32:f6:
81:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CA:3A:CB:6C:3B:E0:3E:06:8A:CB:C8:07:25:32:62:A6:A3:51:1E
X509v3 Authority Key Identifier:
keyid:4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:05:42:55:ce:17:37:43:cb:71:85:ba:0f:a7:a1:13:07:9b:
16:a5:e3:c7:ff:89:63:65:2c:e0:df:55:a2:ec:1d:9d:84:0a:
29:82:c1:bf:1a:f9:f5:78:6e:ec:06:a6:83:70:3f:56:66:aa:
aa:23:3e:b3:fc:e1:82:33:b8:30:25:fe:53:9f:e2:ab:97:94:
47:0d:80:62:e2:50:52:ef:86:1d:24:f2:97:ee:53:4c:5b:33:
96:b7:2c:5d:48:19:82:11:4c:35:82:16:c0:99:71:16:8c:6f:
e3:04:58:53:d1:bb:5c:7f:1a:0c:51:69:08:b5:e8:b8:f2:d5:
ba:fa:ef:fa:1f:f8:04:04:97:f2:e6:bb:de:8d:9b:4a:e8:37:
03:4c:94:9a:ec:52:f7:18:42:5c:24:00:ae:df:23:77:d6:3b:
5e:eb:f7:48:3d:fd:5f:29:73:0e:f9:1d:d0:da:9c:9d:51:53:
bc:10:33:66:4a:d8:fc:56:66:0b:6a:f8:09:66:b5:76:d5:af:
eb:61:ac:e8:bb:ce:f2:3b:27:26:f5:e1:fa:83:fd:f6:92:3d:
d0:25:d3:24:e8:af:09:38:ea:be:ee:7b:66:20:94:e8:44:93:
07:c7:71:43:f1:6a:59:17:5e:32:3f:af:ba:71:70:4d:b8:9e:
e9:3c:e8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:27:57 2026 by rpki-client