
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
File: TYBwR6bhsNMLr2Qme_lSJIr906k.mft (raw, json)
Hash identifier: 2UkqUI0KNNOPvEzGMLs6hyuAiwFCeoxcJfhCIk37iog=
Subject key identifier: E9:C3:B0:AD:30:A3:04:94:C4:BB:19:6A:36:95:5E:F7:B3:4B:B0:25
Authority key identifier: 4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9
Certificate issuer: /CN=A91F7D5E/serialNumber=4D807047A6E1B0D30BAF64267BF952248AFDD3A9
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
Manifest number: 28
Signing time: Wed 25 Mar 2026 07:58:36 +0000
Manifest this update: Wed 25 Mar 2026 07:58:35 +0000
Manifest next update: Wed 01 Apr 2026 07:58:35 +0000
Files and hashes: 1: TYBwR6bhsNMLr2Qme_lSJIr906k.crl (hash: vj83w05+DZs0g+jnKbxdDykjYD4a+0aR6SQdpteitLM=)
2: 07DEEBF0F20311F09027AFE1496F56BC.roa (hash: iWkfkl8IPV0JFK1Zl8pweCdJ/SFodByB+0jA5hETEao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.crl
rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:58:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7D5E, serialNumber=4D807047A6E1B0D30BAF64267BF952248AFDD3A9
Validity
Not Before: Mar 25 07:58:35 2026 GMT
Not After : Apr 1 07:58:35 2026 GMT
Subject: CN=69c395ab-8919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:e9:c8:2f:72:42:a8:56:f7:af:ca:af:b5:
36:eb:14:eb:c5:85:16:dc:ac:c6:c6:1a:38:98:ae:
56:05:f6:f2:72:7d:69:ee:5b:7e:74:e1:65:fa:93:
14:38:93:f6:d4:c9:a7:55:16:1d:2a:da:54:00:04:
dd:47:a4:fe:16:f6:35:d4:bd:73:1c:d0:08:a0:c7:
5f:a6:df:77:dd:79:99:bc:c0:f7:d8:6b:8e:a9:27:
bd:53:5e:54:f0:cb:ee:f0:50:bf:e5:3d:d3:cb:96:
ef:08:b9:a3:14:28:60:db:42:98:8a:56:5d:ab:ad:
1d:64:10:9e:3f:25:7b:29:5a:d5:d8:e5:51:df:be:
63:13:5b:f6:08:17:76:2b:59:3c:4e:4f:e1:72:75:
91:4d:96:df:b9:df:e3:5a:f8:91:25:3a:d2:a4:3f:
83:1b:22:5c:59:18:27:cf:1d:b4:4b:a7:8f:9c:e3:
02:10:f7:41:e9:3d:14:4e:33:51:06:09:c2:fc:77:
ff:cc:ad:15:ba:69:dd:c3:1f:1d:bc:bf:b2:a2:5d:
a3:02:5e:49:36:84:2d:5d:e1:38:ae:bc:89:dc:4f:
f2:16:98:f3:68:2e:9a:09:ad:6f:1e:6e:80:93:29:
67:fc:ae:17:cb:03:e9:5f:49:50:bd:7d:01:8f:7f:
e8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C3:B0:AD:30:A3:04:94:C4:BB:19:6A:36:95:5E:F7:B3:4B:B0:25
X509v3 Authority Key Identifier:
keyid:4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:89:9f:9f:d2:68:92:55:4d:59:36:32:1f:38:88:f6:a7:bf:
51:95:0f:bb:98:33:91:53:ab:a8:8e:97:17:a1:ce:9b:77:0d:
fa:37:c9:b3:43:fe:a3:d9:3f:37:86:1c:49:9a:53:f5:3a:7f:
d4:f2:42:13:06:97:5b:bc:55:fd:93:56:50:7d:3c:69:74:21:
21:31:5b:7a:23:8f:16:d2:7f:83:e8:d2:18:a5:56:90:e7:27:
24:32:7d:bd:48:b6:1d:0d:54:be:de:b0:57:e2:8a:8d:ca:1a:
84:fe:b9:ca:85:f2:d1:aa:6b:61:56:2d:92:ad:0b:4d:74:0e:
7d:68:3b:38:8b:f2:56:eb:76:a0:e9:8b:79:df:59:7b:f7:f5:
73:c0:e3:34:11:73:7c:59:2d:54:14:f5:49:81:d7:24:11:42:
fc:96:23:49:d4:6c:4c:78:35:12:8b:f2:5b:86:5e:60:9d:6f:
2e:06:f0:c8:77:dc:44:ba:8d:0f:57:b2:87:77:69:30:4a:f2:
02:da:99:92:67:83:31:7d:fb:9c:9b:68:32:8e:a0:77:49:89:
16:de:9d:49:bb:b2:4d:75:5e:a7:71:33:27:aa:5b:03:e2:67:
8d:f8:93:00:33:ce:9e:45:8c:83:02:43:b8:1f:75:bb:b0:ee:
b8:3a:f3:9f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
N0Q1RTExMC8GA1UEBRMoNEQ4MDcwNDdBNkUxQjBEMzBCQUY2NDI2N0JGOTUyMjQ4
QUZERDNBOTAeFw0yNjAzMjUwNzU4MzVaFw0yNjA0MDEwNzU4MzVaMBgxFjAUBgNV
BAMTDTY5YzM5NWFiLTg5MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDbsOnIL3JCqFb3r8qvtTbrFOvFhRbcrMbGGjiYrlYF9vJyfWnuW3504WX6kxQ4
k/bUyadVFh0q2lQABN1HpP4W9jXUvXMc0Aigx1+m33fdeZm8wPfYa46pJ71TXlTw
y+7wUL/lPdPLlu8IuaMUKGDbQpiKVl2rrR1kEJ4/JXspWtXY5VHfvmMTW/YIF3Yr
WTxOT+FydZFNlt+53+Na+JElOtKkP4MbIlxZGCfPHbRLp4+c4wIQ90HpPRROM1EG
CcL8d//MrRW6ad3DHx28v7KiXaMCXkk2hC1d4TiuvIncT/IWmPNoLpoJrW8eboCT
KWf8rhfLA+lfSVC9fQGPf+hHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6cOwrTCj
BJTEuxlqNpVe97NLsCUwHwYDVR0jBBgwFoAUTYBwR6bhsNMLr2Qme/lSJIr906kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3RDVFLzBGQjYyNjA2RjIw
MTExRjBBRDQxOENCQTQ4NkY1NkJDL1RZQndSNmJoc05NTHIyUW1lX2xTSklyOTA2
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvVFlCd1I2YmhzTk1McjJRbWVfbFNKSXI5MDZrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3
RDVFLzBGQjYyNjA2RjIwMTExRjBBRDQxOENCQTQ4NkY1NkJDL1RZQndSNmJoc05N
THIyUW1lX2xTSklyOTA2ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBriZ+f0miSVU1ZNjIfOIj2p79RlQ+7mDORU6uojpcXoc6bdw36N8mzQ/6j2T83
hhxJmlP1On/U8kITBpdbvFX9k1ZQfTxpdCEhMVt6I48W0n+D6NIYpVaQ5yckMn29
SLYdDVS+3rBX4oqNyhqE/rnKhfLRqmthVi2SrQtNdA59aDs4i/JW63ag6Yt531l7
9/VzwOM0EXN8WS1UFPVJgdckEUL8liNJ1GxMeDUSi/Jbhl5gnW8uBvDId9xEuo0P
V7KHd2kwSvIC2pmSZ4Mxffucm2gyjqB3SYkW3p1Ju7JNdV6ncTMnqlsD4meN+JMA
M86eRYyDAkO4H3W7sO64OvOf
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:07 2026 by rpki-client