
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
File: TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json)
Hash identifier: 9CwB25SGc2bPGVrjl5TeRJqwhigzjQrrcONb+8T2++Q=
Subject key identifier: DD:5B:EF:81:B0:0E:98:8C:0E:FC:4E:0B:AD:E0:8E:F4:3E:78:EB:8A
Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Certificate serial: 066D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
Manifest number: 0664
Signing time: Fri 02 Oct 2026 22:55:12 +0000
Manifest this update: Fri 02 Oct 2026 22:55:12 +0000
Manifest next update: Fri 09 Oct 2026 22:55:12 +0000
Files and hashes: 1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: W1BYGTiPTUOuX3BWwDWAumN9hOHpU5BE263z86h0wu8=)
2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: bWBcHaEKUgQ7gyCf6hn1djUztS6Lgf7ZTFoCzaWijUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl
rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1645 (0x66d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Validity
Not Before: Oct 2 22:55:12 2026 GMT
Not After : Oct 9 22:55:12 2026 GMT
Subject: CN=6ac03650-8032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:4d:80:a0:b4:c6:92:6a:55:f0:a0:ff:7c:
9a:b8:85:27:bb:3c:65:6b:06:4d:87:d1:03:e0:2d:
b4:8e:9a:b6:8b:26:27:e9:dd:1f:90:33:8f:28:ed:
7c:83:da:f3:3e:e4:9a:3d:09:e5:df:a5:35:e7:cd:
c8:63:09:4b:fb:ef:a3:0b:80:5c:fc:00:45:65:da:
56:39:8b:56:40:d5:a2:5e:93:40:7f:85:0f:ad:ad:
15:f4:e8:9e:a5:a1:ce:a5:f1:34:25:8c:55:e2:8c:
d0:f0:6b:13:94:25:fd:f6:6d:32:4a:bb:88:2f:63:
66:2f:25:81:f9:07:ab:26:59:13:0a:d7:44:da:67:
ab:a1:0e:b4:bb:62:b6:c6:86:e0:d1:4c:0b:c5:68:
89:7f:ec:f2:9a:c8:c2:31:37:a4:2e:a8:b1:11:58:
09:58:df:4b:19:b9:0d:ee:2f:d1:ac:14:e8:10:f8:
53:68:8e:2c:c2:73:98:93:42:3a:29:2c:dd:ff:7c:
4e:c5:ac:b3:7f:52:5b:dc:aa:e4:ec:d5:ea:0d:48:
36:9a:97:ea:f0:f7:0c:43:2f:f7:96:1c:7d:5d:8c:
83:8a:4e:aa:67:d3:92:ff:d0:c8:a3:47:c2:f2:81:
bf:cc:93:d0:be:09:ac:87:bf:e0:f3:34:c0:02:a1:
6e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5B:EF:81:B0:0E:98:8C:0E:FC:4E:0B:AD:E0:8E:F4:3E:78:EB:8A
X509v3 Authority Key Identifier:
keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:14:e0:60:9f:cc:b7:59:d9:03:c8:4e:71:97:42:b1:f3:6d:
12:ad:2c:d8:41:89:35:2a:88:3b:9d:1d:91:3b:ea:9c:14:3f:
48:df:b1:54:06:00:8f:60:6a:07:cb:03:47:1c:47:f5:62:14:
97:8b:a9:22:b9:75:35:c4:0a:ae:b7:7c:59:8a:bb:a3:9d:3f:
f4:a6:2b:e8:14:2a:c0:58:c0:a1:63:87:e5:82:98:fa:33:cc:
7a:90:e1:1a:3f:d1:e6:31:d2:6d:f6:34:6f:55:96:91:5d:ce:
7f:98:93:05:ca:8d:c2:28:b5:6b:c5:b2:21:ed:ba:bb:be:e8:
b8:b7:93:f5:ac:f4:65:41:16:5e:fe:7c:53:71:52:27:07:87:
f3:ed:1b:eb:bc:e9:9a:3e:d9:b1:1a:41:ec:ea:dc:7b:ac:df:
87:04:4e:29:8d:31:d9:5b:c9:83:98:26:00:81:c0:fe:6d:da:
87:3f:ac:ac:51:11:ba:27:a1:ed:f7:4c:10:e4:ad:3d:a5:6a:
eb:33:12:8a:c2:1e:ac:df:d2:10:6a:90:e9:d4:e7:68:2a:13:
30:7b:05:a4:45:7d:c9:80:43:80:52:e0:5e:73:e2:67:6e:f1:
71:97:bf:aa:20:d9:75:35:2b:5e:8d:c3:af:af:d8:94:7f:82:
8e:2a:7d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:58:21 2026 by rpki-client