
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
File: TihN8oxlIKdxEwQV85PINH1ubek.mft (raw, json)
Hash identifier: v4GUVVq2GUH26ZDv0dd2fnB2HOKannsgnyP1bqf+DFc=
Subject key identifier: 89:25:1C:49:EA:8F:F8:FF:5E:EB:88:09:CA:88:35:1A:E6:A2:E9:AC
Authority key identifier: 4E:28:4D:F2:8C:65:20:A7:71:13:04:15:F3:93:C8:34:7D:6E:6D:E9
Certificate issuer: /CN=A91FC765/serialNumber=4E284DF28C6520A771130415F393C8347D6E6DE9
Certificate serial: 1EF9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
Manifest number: 1EED
Signing time: Tue 12 May 2026 16:02:00 +0000
Manifest this update: Tue 12 May 2026 16:01:59 +0000
Manifest next update: Tue 19 May 2026 16:01:59 +0000
Files and hashes: 1: TihN8oxlIKdxEwQV85PINH1ubek.crl (hash: XqU2F3YmQcj+VYi+KeA5icqxfRIqJNnPy8QxygpU0zo=)
2: 9071A5E690CB11E6A804EF84C4F9AE02.roa (hash: BCoqh3XwiuOYuTN55f/bRuAb674C9ONaqrljAIYqfbg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.crl
rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7929 (0x1ef9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC765, serialNumber=4E284DF28C6520A771130415F393C8347D6E6DE9
Validity
Not Before: May 12 16:01:59 2026 GMT
Not After : May 19 16:01:59 2026 GMT
Subject: CN=6a034ef8-719c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:0a:a9:af:70:78:e0:92:dd:92:5c:dc:01:
9f:0a:69:84:57:8d:50:d3:c3:7a:2f:8f:4f:4e:ae:
c8:07:e9:49:e0:52:f4:c2:49:cb:45:96:09:e8:48:
f3:b6:f6:2e:b5:95:47:cf:72:dd:2c:67:ce:f8:8f:
d0:46:d5:29:00:a8:73:45:7f:ee:9a:35:35:ae:6f:
40:c8:02:1b:d3:05:23:07:fc:34:b6:e2:3a:ce:c8:
35:0c:66:af:ea:df:9e:49:1f:57:84:62:dc:20:b4:
16:72:77:48:49:ed:52:5f:70:b7:f4:65:65:2e:72:
71:bf:9a:6b:c3:06:cb:26:38:1a:f5:24:31:bb:7c:
07:c6:6f:30:d4:a7:70:a3:17:11:5f:36:29:95:d0:
5c:83:e4:35:45:35:83:29:75:23:49:7b:eb:c2:cb:
4a:a3:ed:ba:6c:c1:3e:8e:16:c3:50:c2:2a:5b:6f:
5a:f9:18:de:ad:ab:41:23:d7:ad:0a:98:2a:99:66:
8f:7b:e8:e4:36:7d:12:0b:00:31:6f:60:1b:ed:77:
0b:16:9a:99:6d:03:a8:55:ee:49:09:93:f2:6b:8e:
82:1a:4d:24:8d:0f:e0:f8:4f:73:da:4c:db:e3:f9:
a5:92:07:51:4c:8c:03:e0:b8:3d:99:ab:c9:58:0f:
d3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:25:1C:49:EA:8F:F8:FF:5E:EB:88:09:CA:88:35:1A:E6:A2:E9:AC
X509v3 Authority Key Identifier:
keyid:4E:28:4D:F2:8C:65:20:A7:71:13:04:15:F3:93:C8:34:7D:6E:6D:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:22:b3:03:6d:e8:84:19:dc:59:24:f6:09:4e:2a:13:1d:64:
65:6d:c8:92:45:b8:2a:ad:82:a5:d5:7b:26:02:1b:bf:98:14:
e3:40:0d:98:8a:00:4b:50:0a:c6:e6:fe:f0:c7:6e:c3:3c:6a:
01:6c:13:5e:03:d4:50:78:be:30:eb:9a:80:ad:d8:73:37:f9:
28:eb:54:84:8c:e8:66:b8:10:0f:df:9a:69:e9:d6:99:bc:bc:
a0:d7:eb:62:f0:78:69:ee:35:67:d6:75:11:76:4a:cf:75:3f:
b8:55:32:cf:eb:c9:77:70:5f:4b:f7:6c:50:0f:d0:10:a0:44:
11:73:e2:77:f5:ab:01:17:d7:93:00:e5:91:e8:16:8c:5b:8a:
0c:3b:b7:6c:d6:95:56:02:b2:fd:13:6b:64:4e:75:f5:95:08:
b5:fc:47:f7:c1:4c:f5:c1:1d:db:0b:47:f5:b8:a8:f7:c8:16:
50:6c:22:71:6a:02:55:78:5b:ff:6f:ba:3a:bc:1c:cc:b9:37:
4d:9d:b7:4f:ef:4b:fa:d2:6e:82:b1:07:d2:65:0e:cf:5c:b5:
36:5e:db:c8:af:39:46:2f:ed:65:0b:32:b9:4a:38:82:bb:f7:
b1:a1:c6:37:ab:cc:6f:c1:64:fb:97:92:f1:92:d3:d6:a7:d0:
c2:5d:d8:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkM3NjUxMTAvBgNVBAUTKDRFMjg0REYyOEM2NTIwQTc3MTEzMDQxNUYzOTNDODM0
N0Q2RTZERTkwHhcNMjYwNTEyMTYwMTU5WhcNMjYwNTE5MTYwMTU5WjAYMRYwFAYD
VQQDEw02YTAzNGVmOC03MTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoWsKqa9weOCS3ZJc3AGfCmmEV41Q08N6L49PTq7IB+lJ4FL0wknLRZYJ6Ejz
tvYutZVHz3LdLGfO+I/QRtUpAKhzRX/umjU1rm9AyAIb0wUjB/w0tuI6zsg1DGav
6t+eSR9XhGLcILQWcndISe1SX3C39GVlLnJxv5prwwbLJjga9SQxu3wHxm8w1Kdw
oxcRXzYpldBcg+Q1RTWDKXUjSXvrwstKo+26bME+jhbDUMIqW29a+RjeratBI9et
CpgqmWaPe+jkNn0SCwAxb2Ab7XcLFpqZbQOoVe5JCZPya46CGk0kjQ/g+E9z2kzb
4/mlkgdRTIwD4Lg9mavJWA/TUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIklHEnq
j/j/XuuICcqINRrmoumsMB8GA1UdIwQYMBaAFE4oTfKMZSCncRMEFfOTyDR9bm3p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzc2NS9FNUM3NEJBQTdG
ODExMUU2ODk4RTVGNDVDNEY5QUUwMi9UaWhOOG94bElLZHhFd1FWODVQSU5IMXVi
ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RpaE44b3hsSUtkeEV3UVY4NVBJTkgxdWJlay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Qzc2NS9FNUM3NEJBQTdGODExMUU2ODk4RTVGNDVDNEY5QUUwMi9UaWhOOG94bElL
ZHhFd1FWODVQSU5IMXViZWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZSKzA23ohBncWST2CU4qEx1kZW3IkkW4Kq2CpdV7JgIbv5gU40ANmIoAS1AK
xub+8MduwzxqAWwTXgPUUHi+MOuagK3Yczf5KOtUhIzoZrgQD9+aaenWmby8oNfr
YvB4ae41Z9Z1EXZKz3U/uFUyz+vJd3BfS/dsUA/QEKBEEXPid/WrARfXkwDlkegW
jFuKDDu3bNaVVgKy/RNrZE519ZUItfxH98FM9cEd2wtH9bio98gWUGwicWoCVXhb
/2+6OrwczLk3TZ23T+9L+tJugrEH0mUOz1y1Nl7byK85Ri/tZQsyuUo4grv3saHG
N6vMb8Fk+5eS8ZLT1qfQwl3YRw==
-----END CERTIFICATE-----
Generated at Wed May 13 06:31:53 2026 by rpki-client