
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
File: TihN8oxlIKdxEwQV85PINH1ubek.mft (raw, json)
Hash identifier: ayRfxweKOfXwy4Aiz2t8YGrfa5m6EIUcwH5jCg/WhDQ=
Subject key identifier: 14:6E:4F:31:DB:DB:AB:54:9A:D6:0B:7D:23:FE:15:D6:55:D6:0A:9E
Authority key identifier: 4E:28:4D:F2:8C:65:20:A7:71:13:04:15:F3:93:C8:34:7D:6E:6D:E9
Certificate issuer: /CN=A91FC765/serialNumber=4E284DF28C6520A771130415F393C8347D6E6DE9
Certificate serial: 1EE0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
Manifest number: 1ED4
Signing time: Tue 24 Mar 2026 15:57:38 +0000
Manifest this update: Tue 24 Mar 2026 15:57:38 +0000
Manifest next update: Tue 31 Mar 2026 15:57:38 +0000
Files and hashes: 1: TihN8oxlIKdxEwQV85PINH1ubek.crl (hash: nSTPaejP/S875BrmbCs1sUCTL42gqEAhA6hAQG9xNNw=)
2: 9071A5E690CB11E6A804EF84C4F9AE02.roa (hash: BCoqh3XwiuOYuTN55f/bRuAb674C9ONaqrljAIYqfbg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.crl
rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7904 (0x1ee0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC765, serialNumber=4E284DF28C6520A771130415F393C8347D6E6DE9
Validity
Not Before: Mar 24 15:57:38 2026 GMT
Not After : Mar 31 15:57:38 2026 GMT
Subject: CN=69c2b472-c679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:25:2d:ce:d7:9d:eb:da:c8:d6:2b:4e:f6:ee:
ac:cf:79:ae:21:c4:13:6c:bd:60:78:a4:53:cd:40:
17:71:03:6c:1a:d6:3d:c7:6f:b2:14:40:7a:f3:3a:
89:dc:24:94:30:fb:0e:77:02:cc:d5:96:03:f3:5e:
83:65:d2:25:c5:16:aa:b5:c2:8e:c5:ec:d8:01:c2:
df:34:df:2f:ed:0a:16:67:cd:1e:d5:66:ef:13:68:
a8:02:b7:cf:88:40:45:54:9e:c5:7a:56:91:6b:d3:
9a:e1:b0:9e:d6:c9:72:47:b6:6b:ca:21:be:4c:85:
b1:4a:88:19:fa:c4:fa:dc:d8:29:e2:bc:32:56:71:
ea:85:62:c7:e1:59:30:5b:87:ce:f7:d4:47:55:7e:
cb:eb:03:f1:2e:a8:50:21:26:9e:48:6e:22:fe:ed:
d0:91:8b:11:48:66:2b:ca:b1:f1:e9:ec:f1:4e:15:
52:f6:45:4c:19:3c:45:02:9d:30:dc:41:94:a2:5e:
f8:81:5e:98:62:8a:d3:8d:00:39:ba:a4:7d:b0:38:
91:f7:e0:bd:3c:9f:bc:bf:68:bb:47:59:5a:23:27:
99:28:78:2b:41:0f:2b:2b:26:e3:85:d6:2d:8c:f9:
85:cc:b6:e9:18:20:57:db:f9:4d:68:ec:44:b5:df:
bd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6E:4F:31:DB:DB:AB:54:9A:D6:0B:7D:23:FE:15:D6:55:D6:0A:9E
X509v3 Authority Key Identifier:
keyid:4E:28:4D:F2:8C:65:20:A7:71:13:04:15:F3:93:C8:34:7D:6E:6D:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:81:8b:42:b8:7f:c3:e6:0e:20:19:bf:7d:62:b6:0e:4b:15:
eb:43:cf:d5:4f:5d:2b:6c:c2:d9:25:eb:10:90:05:ca:27:05:
5b:46:2c:35:9d:42:1d:f4:cc:0a:bf:84:12:2f:40:33:42:3d:
8d:ed:25:00:74:f8:c0:c2:e7:12:d2:84:64:ca:c1:69:0b:7a:
15:ed:53:1a:cd:24:ef:e2:7f:23:21:36:26:42:e1:e4:08:9f:
4a:ff:87:e9:4d:8c:ed:40:89:69:a9:e6:21:54:78:9b:bb:f1:
cc:10:7b:47:7f:4a:bb:9b:9c:90:1b:b0:9b:61:c7:16:15:ce:
91:06:3b:e2:2b:a1:9e:7c:00:19:bb:71:9d:ab:25:cd:72:e8:
eb:8e:0c:76:eb:5c:b5:d4:02:d6:2a:fc:2a:1c:5f:71:05:25:
e4:7d:b9:8d:94:c2:fc:eb:d4:6f:28:e1:f3:a0:d0:65:21:54:
2e:ba:3a:e6:c9:eb:fd:ab:c8:e0:f2:fb:63:ec:0c:ce:f5:03:
2b:20:4f:c3:92:8b:4b:47:10:69:fd:2e:d2:b0:7d:4a:5c:8d:
05:db:dc:20:48:54:56:25:90:c3:5f:7b:72:ee:56:1d:c0:11:
08:38:04:a0:ff:9e:d4:cd:2c:58:e5:e5:60:c5:35:3e:59:d4:
90:81:60:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:54:19 2026 by rpki-client