
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
File: TMGqg6KKEDdySbbqS4nZ7doGqXE.mft (raw, json)
Hash identifier: FVCZ6ktHP7T50MovTKSJgKaJiaGbk0aUDwyLXpMvzIA=
Subject key identifier: 9E:75:06:F5:F4:39:87:E1:17:43:D8:E5:19:CD:AF:85:C6:84:2F:BD
Authority key identifier: 4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71
Certificate issuer: /CN=A91EA7E3/serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
Manifest number: 06
Signing time: Wed 25 Mar 2026 08:23:11 +0000
Manifest this update: Wed 25 Mar 2026 08:23:11 +0000
Manifest next update: Wed 01 Apr 2026 08:23:11 +0000
Files and hashes: 1: TMGqg6KKEDdySbbqS4nZ7doGqXE.crl (hash: nuusHNTseBneVg7GXVc/RUQ/Ud8qjrv3Ojz2b+nTlJo=)
2: 5BB88D38245A11F18A931CD8C3833773.roa (hash: dO+a4nQRE+isJxtzRbplPM324KVyASEgu6GREHrp+RM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.crl
rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA7E3, serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971
Validity
Not Before: Mar 25 08:23:11 2026 GMT
Not After : Apr 1 08:23:11 2026 GMT
Subject: CN=69c39b6f-155b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:c2:89:c0:38:d5:ce:f8:f3:0e:57:15:40:
bd:1d:22:4c:7d:9e:e9:e8:01:d5:e2:e2:c0:1b:76:
33:df:9d:7d:e4:0b:40:a9:2d:ae:dc:ff:08:d5:2b:
c8:83:a1:e0:a9:74:10:e4:5d:68:63:c7:8d:23:16:
c5:4a:d5:32:dd:eb:e0:63:f3:0e:a6:b4:3a:76:b3:
b5:f8:e4:27:17:c6:bc:ac:1e:97:86:a4:ef:a4:94:
5a:28:ac:6b:b2:0a:35:ab:f5:0e:8e:f6:fb:7a:3c:
35:83:d3:11:90:47:9f:0c:69:62:7c:28:44:f1:86:
5b:1b:e9:8c:dd:52:6a:71:1d:8f:14:71:72:35:53:
a2:ff:84:b4:55:54:b1:bf:8b:ff:61:d5:c3:6f:04:
96:29:c6:89:d6:3b:c4:68:0a:46:e7:c6:16:d3:0c:
9a:11:69:eb:b1:9a:aa:24:f8:f8:56:e6:97:9c:51:
71:2c:18:c1:17:c3:dc:7d:0e:9b:af:70:52:c9:08:
a9:95:ae:c0:81:72:08:87:4b:62:a8:be:e7:29:57:
48:31:98:a3:f3:0a:0b:73:a6:a6:e1:fe:30:ae:86:
96:85:41:3a:23:44:fe:73:0c:5d:d2:28:98:ef:74:
f2:6c:ba:fb:d2:60:87:a5:70:70:1a:49:5f:cb:15:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:75:06:F5:F4:39:87:E1:17:43:D8:E5:19:CD:AF:85:C6:84:2F:BD
X509v3 Authority Key Identifier:
keyid:4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:3f:cb:f0:2e:a1:b6:a6:26:99:d9:0d:e0:eb:00:52:56:6a:
98:05:5b:c3:25:3e:ce:9e:a8:cb:13:00:39:f2:15:c4:b5:87:
f8:7d:08:e6:aa:7b:a3:db:2a:12:91:81:3b:7b:c1:a0:24:b7:
7e:e6:15:c0:50:2c:0b:fe:df:39:ea:c2:3f:12:1f:cf:0b:35:
2c:82:5d:0a:5f:66:8f:9f:25:e6:4a:87:97:e4:bc:13:a6:01:
c1:b7:b7:f6:45:4f:96:d7:36:d8:82:40:55:c7:5f:26:4a:52:
54:e4:e6:29:a8:1a:2e:a5:38:bf:88:0a:45:b0:db:40:b4:4a:
4d:38:ff:f9:c2:84:7d:23:9b:7c:cc:ec:69:b5:51:9c:31:a1:
55:19:c3:ac:eb:bf:43:e8:c0:3b:43:0f:eb:7b:e8:af:95:60:
08:f9:77:4f:2e:02:1a:5d:b0:57:36:35:c6:bf:db:49:2d:d2:
3d:71:00:bf:23:84:ae:57:f5:05:67:99:e9:28:9b:8b:39:b5:
fb:83:1d:38:5e:95:c9:55:16:a9:44:81:4d:7c:ec:0a:a7:80:
03:78:44:1a:ba:a6:f9:9a:fe:65:82:a9:47:2e:c1:05:d6:d9:
54:d1:5d:da:30:50:42:2c:38:47:3e:3b:1f:8b:50:4d:d5:f1:
94:a8:ec:51
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
QTdFMzExMC8GA1UEBRMoNENDMUFBODNBMjhBMTAzNzcyNDlCNkVBNEI4OUQ5RURE
QTA2QTk3MTAeFw0yNjAzMjUwODIzMTFaFw0yNjA0MDEwODIzMTFaMBgxFjAUBgNV
BAMTDTY5YzM5YjZmLTE1NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCu98KJwDjVzvjzDlcVQL0dIkx9nunoAdXi4sAbdjPfnX3kC0CpLa7c/wjVK8iD
oeCpdBDkXWhjx40jFsVK1TLd6+Bj8w6mtDp2s7X45CcXxrysHpeGpO+klFoorGuy
CjWr9Q6O9vt6PDWD0xGQR58MaWJ8KETxhlsb6YzdUmpxHY8UcXI1U6L/hLRVVLG/
i/9h1cNvBJYpxonWO8RoCkbnxhbTDJoRaeuxmqok+PhW5pecUXEsGMEXw9x9Dpuv
cFLJCKmVrsCBcgiHS2KovucpV0gxmKPzCgtzpqbh/jCuhpaFQTojRP5zDF3SKJjv
dPJsuvvSYIelcHAaSV/LFVPHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnnUG9fQ5
h+EXQ9jlGc2vhcaEL70wHwYDVR0jBBgwFoAUTMGqg6KKEDdySbbqS4nZ7doGqXEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBN0UzL0VBREMwMTlBMjQ1
ODExRjE5M0UwRTE4QkMzODMzNzczL1RNR3FnNktLRURkeVNiYnFTNG5aN2RvR3FY
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVE1HcWc2S0tFRGR5U2JicVM0blo3ZG9HcVhFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB
N0UzL0VBREMwMTlBMjQ1ODExRjE5M0UwRTE4QkMzODMzNzczL1RNR3FnNktLRURk
eVNiYnFTNG5aN2RvR3FYRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAwP8vwLqG2piaZ2Q3g6wBSVmqYBVvDJT7OnqjLEwA58hXEtYf4fQjmqnuj2yoS
kYE7e8GgJLd+5hXAUCwL/t856sI/Eh/PCzUsgl0KX2aPnyXmSoeX5LwTpgHBt7f2
RU+W1zbYgkBVx18mSlJU5OYpqBoupTi/iApFsNtAtEpNOP/5woR9I5t8zOxptVGc
MaFVGcOs679D6MA7Qw/re+ivlWAI+XdPLgIaXbBXNjXGv9tJLdI9cQC/I4SuV/UF
Z5npKJuLObX7gx04XpXJVRapRIFNfOwKp4ADeEQauqb5mv5lgqlHLsEF1tlU0V3a
MFBCLDhHPjsfi1BN1fGUqOxR
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:18 2026 by rpki-client