
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
File: TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json)
Hash identifier: smnucONjhSqzoYD2yABcrmAu9YbnW46uOHxha1jzryM=
Subject key identifier: 0D:DB:2B:4F:CE:AA:A9:27:81:2A:74:31:A0:23:35:E0:75:7C:21:20
Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Certificate serial: 0621
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
Manifest number: 0619
Signing time: Tue 12 May 2026 22:55:38 +0000
Manifest this update: Tue 12 May 2026 22:55:38 +0000
Manifest next update: Tue 19 May 2026 22:55:38 +0000
Files and hashes: 1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: N07MN9sx2KYdMqa+O33pUHhRHaPemwyi7VzamNeDfWU=)
2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: waHlPrSIXU1DTG8JgX28cOXJ6bVasMgkvdeHgZb1AOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl
rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1569 (0x621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Validity
Not Before: May 12 22:55:38 2026 GMT
Not After : May 19 22:55:38 2026 GMT
Subject: CN=6a03afea-7d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:77:1c:6e:45:dd:f1:90:ed:2f:12:6c:ac:
5a:4d:4d:cf:d2:84:30:46:19:f7:36:ad:38:5b:3d:
57:22:cd:fb:75:66:fb:50:76:bb:47:5f:0b:5d:54:
99:41:4f:48:ca:d9:16:58:b4:4f:f8:79:49:69:ac:
c6:d3:9d:21:53:1f:18:d0:62:e0:4a:1f:a5:ce:b7:
7f:1f:8a:50:53:f8:22:e0:af:15:3e:63:0b:f7:1b:
d2:08:5e:4b:d3:40:1f:a9:e1:b8:f0:6c:fd:28:48:
7d:dc:09:8a:b9:57:c7:b6:56:39:1a:95:84:42:c4:
11:b7:a4:fa:d5:40:a6:3c:29:12:6b:c0:8c:65:90:
5c:ad:e3:f7:de:59:ab:b1:e2:05:c9:8b:b8:cf:86:
6d:e3:b7:4e:4e:73:e1:fd:4e:da:66:e8:c8:61:3b:
91:b3:cc:cc:13:35:65:e1:57:e7:5d:7a:5c:91:74:
25:db:55:31:95:b4:5c:6d:e7:3d:89:50:a4:1e:f0:
8f:82:98:d2:ef:fb:84:e3:dd:ab:4a:65:2d:40:fa:
25:e9:f1:39:0b:8a:1a:05:2e:8e:c3:df:ae:03:48:
4d:03:da:17:dc:32:55:48:96:59:da:91:0f:5e:a5:
7d:97:f2:62:fb:2f:6f:1f:74:ae:ca:f6:a2:00:0b:
23:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DB:2B:4F:CE:AA:A9:27:81:2A:74:31:A0:23:35:E0:75:7C:21:20
X509v3 Authority Key Identifier:
keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:65:3b:b5:16:5a:3b:aa:ee:1e:b4:2b:30:03:2a:63:7b:4a:
ea:fd:31:33:57:d3:5b:91:cd:49:a1:b6:15:6d:3a:0a:e9:5c:
5e:62:73:a8:40:cc:53:ca:3b:58:94:39:f7:fa:9b:86:3e:c9:
2b:61:ab:75:96:c3:4c:d0:ec:45:12:2d:b4:1e:59:50:aa:3c:
78:f1:ce:f6:e4:75:07:6c:4a:6a:db:b9:9e:c2:39:2d:1d:27:
b4:7d:55:80:22:85:95:6f:4d:e6:ab:fe:0d:49:95:ef:72:4a:
b7:87:51:ef:84:1c:ea:f5:fb:14:7d:f2:f4:5d:ff:90:a6:2a:
46:b0:c2:9f:a9:27:45:85:39:2b:9a:c9:53:d1:06:c9:36:36:
35:9d:a4:df:1b:66:63:41:15:cb:60:30:fc:ce:f5:c0:6f:80:
09:f6:d9:89:09:4e:40:b1:bc:cc:db:64:5a:08:be:7c:6c:de:
f0:c0:5d:fd:cd:56:a3:67:79:5c:d3:e2:e2:5c:d8:c0:78:52:
1f:bf:0b:a1:c1:82:9e:94:27:44:a6:9f:cd:db:b5:12:6f:65:
7c:ec:6d:d0:73:9b:ce:d2:7f:7b:2d:bc:69:19:57:60:0e:bf:
12:c0:88:07:eb:62:d7:49:bd:7c:3b:62:a7:80:0e:b7:3a:1c:
8a:1b:98:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:30:35 2026 by rpki-client