
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
File: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json)
Hash identifier: cvNGL4pma17HMojpsi3eRjQ5bEIMLH8NgY7o1RkFERw=
Subject key identifier: 9F:E9:D2:A9:20:43:41:FF:A5:CA:B3:60:56:CA:C1:59:E1:6C:FE:12
Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A
Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
Manifest number: 0168
Signing time: Sat 03 Oct 2026 05:43:05 +0000
Manifest this update: Sat 03 Oct 2026 05:43:04 +0000
Manifest next update: Sat 10 Oct 2026 05:43:04 +0000
Files and hashes: 1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: 5tO375a161B7vyFaGAhT5f1hLTe0NZ1yBK1+zluN14M=)
2: 12B6D40E37C511F19788E36ABE833773.roa (hash: f5bzM7j+pO8fCnEBI50cYrv56JA2HlZHuSFXp1GJx88=)
3: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: iXPPbRwODBTS92FzdfuvK5J3jl/IZyMATy+kQwe/++Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl
rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 05:43:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDEFE, serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A
Validity
Not Before: Oct 3 05:43:04 2026 GMT
Not After : Oct 10 05:43:04 2026 GMT
Subject: CN=6ac095e9-d7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:91:10:cc:2c:a8:45:19:ea:b3:e6:97:b8:
a5:86:02:4a:2e:d2:81:ff:9f:4c:87:bf:20:53:e0:
c3:f1:36:83:ca:3f:48:85:ce:3a:61:1a:0c:4a:24:
9b:13:1c:1a:ef:9d:dd:c6:1a:6d:ae:33:5c:75:a4:
79:78:2d:71:c2:27:87:24:8d:9b:71:c4:a7:36:7f:
0f:40:23:97:85:fe:92:f7:95:d4:5e:d7:92:56:7f:
95:aa:93:62:20:93:82:5a:e5:ac:54:f0:1b:7d:3e:
0e:4c:66:46:76:14:7b:db:64:c0:95:ed:a5:db:d4:
25:d9:cd:ce:3f:00:65:b2:aa:f1:b9:7c:c1:4e:48:
ad:7e:c6:b6:43:80:fc:52:5a:33:ba:b8:b7:d3:1a:
e2:1a:3f:bf:56:eb:6b:0f:f8:46:9c:95:a1:43:74:
e4:55:31:91:e3:6d:cf:53:dc:99:d5:27:39:03:8c:
6f:67:cd:21:4d:9a:ec:b5:da:13:b5:f0:b3:14:84:
98:32:10:95:d1:29:9c:b7:72:53:64:18:fa:87:e9:
55:21:03:e2:6a:3a:30:3b:0d:07:b1:88:b2:c7:c9:
16:3c:04:ea:46:32:32:8e:1a:7d:eb:2a:07:73:f3:
ab:a2:25:d3:4a:07:32:91:96:3b:cc:8f:1c:53:a0:
b9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E9:D2:A9:20:43:41:FF:A5:CA:B3:60:56:CA:C1:59:E1:6C:FE:12
X509v3 Authority Key Identifier:
keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:9d:00:20:8a:0b:64:ac:d2:74:cf:b4:7d:d8:8d:1e:d8:17:
64:69:41:df:46:15:6d:37:3c:41:b5:bb:72:82:0a:23:03:88:
9a:34:3d:12:ad:01:b1:d1:68:a2:e7:12:c1:b8:33:e1:ce:f3:
66:cc:65:cf:dc:bf:93:ff:8b:e8:7a:c7:e5:b8:b7:a5:3f:ff:
97:22:67:48:36:21:7a:d2:2e:90:43:dd:41:b9:26:c1:30:a2:
f5:9c:80:36:e9:e5:f7:aa:a3:60:c5:ef:eb:6d:c8:ab:1b:ef:
3d:9c:6b:27:56:f3:c1:03:1b:e8:5e:1b:be:65:02:8a:05:e1:
2b:bf:f6:0a:7d:7a:38:a3:d1:27:b9:7d:d1:30:3a:96:80:4b:
08:b7:25:0b:30:80:2b:49:0a:74:d0:e0:33:70:e9:37:10:6c:
30:05:ad:c3:c5:c4:32:d4:9f:03:2d:2c:f2:dc:a4:a2:9e:56:
4e:df:32:2f:ab:a4:81:87:f4:22:2f:65:f0:28:8c:dd:5f:b4:
8c:36:8a:b9:f4:74:8b:df:9e:f5:f0:4e:46:32:ab:9c:b3:1f:
e3:7b:b0:8f:63:cd:7c:d0:e4:89:06:ac:57:6b:91:1a:df:bf:
77:d6:63:c8:f9:6d:5d:2d:2e:2d:0a:2e:9d:c7:68:f6:8e:f6:
bf:15:fd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:47:02 2026 by rpki-client