
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
File: TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json)
Hash identifier: EUVvcrzI9MU7V/ExRYIM21JkYWqi2ZHc7FNs1RGKyxI=
Subject key identifier: A3:5F:25:4A:AF:06:E7:4B:FD:26:48:9A:65:18:68:5D:B7:45:65:70
Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Certificate serial: 0649
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
Manifest number: 0640
Signing time: Fri 24 Jul 2026 23:30:45 +0000
Manifest this update: Fri 24 Jul 2026 23:30:44 +0000
Manifest next update: Fri 31 Jul 2026 23:30:44 +0000
Files and hashes: 1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: RphV5lSfbEkjLS8S7BYTz7IdVsNJT3sdpkpQSL/graM=)
2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: bWBcHaEKUgQ7gyCf6hn1djUztS6Lgf7ZTFoCzaWijUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl
rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 23:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1609 (0x649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Validity
Not Before: Jul 24 23:30:44 2026 GMT
Not After : Jul 31 23:30:44 2026 GMT
Subject: CN=6a63f5a5-3fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:de:95:91:60:bf:41:89:25:3c:3d:e7:8b:f6:
25:3d:c2:ae:1c:da:31:75:3b:f3:74:78:93:b0:d7:
95:bd:73:c0:0d:09:68:40:bd:a5:7c:e2:a2:73:c8:
80:26:48:de:cc:51:11:d2:69:ed:03:86:ff:d8:3e:
7f:b8:af:d9:3a:bb:d8:fd:cc:12:92:a3:52:27:da:
fa:68:25:f9:ef:26:33:d3:cb:29:b1:88:5c:ed:72:
96:53:8b:a6:0f:cb:40:55:82:45:3a:0a:5c:31:ff:
3f:f3:c3:c1:3b:69:9f:c1:54:15:15:67:29:b3:32:
6c:59:b5:60:95:05:b8:50:80:40:a3:20:80:a4:39:
c4:38:60:88:98:26:54:3f:0e:8f:49:ae:2f:8b:eb:
23:1a:e9:54:09:9b:94:bb:e6:24:dd:c1:6e:9a:d8:
09:62:ea:21:a7:3a:24:f3:c3:ea:73:2f:f8:82:93:
e9:a2:9a:d3:2d:f3:43:cc:7f:60:01:cb:fc:d9:e9:
8d:61:9e:41:13:f6:77:92:80:23:36:79:c1:4e:40:
68:47:0c:99:12:1a:c8:19:61:54:c0:0a:2d:d5:6f:
83:55:d9:ae:01:3c:5b:8c:88:60:56:35:91:36:3f:
30:54:37:73:36:6f:21:8f:7b:35:e7:b1:a8:b2:5a:
16:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5F:25:4A:AF:06:E7:4B:FD:26:48:9A:65:18:68:5D:B7:45:65:70
X509v3 Authority Key Identifier:
keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:23:95:53:c1:80:2b:c0:00:a2:ea:cb:1b:19:2d:40:9a:1f:
5a:b6:76:af:b0:62:d0:b3:2c:34:01:70:ce:64:40:ae:31:2e:
fb:e6:92:62:d1:e6:c8:35:64:0f:d9:32:db:c2:b8:43:df:8e:
ae:f3:92:62:4d:d9:6a:a7:e2:05:6e:8a:f2:82:db:91:74:4b:
67:94:a6:21:d6:72:eb:06:b6:1b:38:a1:64:81:a4:74:95:c7:
50:62:68:18:2f:8b:d1:70:af:61:c4:7e:cb:65:44:6f:4b:e1:
33:e2:4c:3c:d7:23:dc:01:25:f6:3a:e7:c6:3e:4f:c0:42:d7:
b1:c1:75:e4:24:6a:40:bf:93:91:56:90:cb:bf:51:61:2c:3e:
29:d8:f8:e1:6b:35:94:e7:a4:a1:80:23:00:75:e9:59:3f:d0:
78:50:91:99:80:26:c4:9b:3f:1c:50:83:54:48:57:18:d5:21:
58:ad:26:1e:b2:19:25:94:5b:54:f5:36:ad:8b:3a:c9:82:e4:
f0:07:f3:94:b1:23:3a:37:55:bd:db:83:21:84:bf:7e:eb:23:
2e:ba:c5:27:f2:d5:eb:15:f1:f3:3a:8e:4f:96:7c:07:a7:17:
a8:b4:6a:eb:a6:91:38:33:2b:88:59:fb:bc:bd:13:b5:9a:b1:
59:c9:40:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 06:41:38 2026 by rpki-client