
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
File: TmiwSN0926X0ePH9KIqGGLqfq6o.mft (raw, json)
Hash identifier: hFASHzq85BmrvBGxHRq/vKzt7i4hrmcqyfZy/fb5K/Y=
Subject key identifier: 84:78:EE:38:99:11:26:AD:2A:20:53:1B:75:0F:76:94:86:5D:CD:35
Authority key identifier: 4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
Certificate issuer: /CN=A91FEB37/serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
Certificate serial: 0115
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
Manifest number: 010E
Signing time: Thu 23 Jul 2026 07:49:10 +0000
Manifest this update: Thu 23 Jul 2026 07:49:10 +0000
Manifest next update: Thu 30 Jul 2026 07:49:10 +0000
Files and hashes: 1: TmiwSN0926X0ePH9KIqGGLqfq6o.crl (hash: 0GkMMO9qt4DT3j+6pw2mnO2nX+KF47W9boCZ8wC4hrk=)
2: 0FED0338F66C11EFA1F5216AC4F9AE02.roa (hash: QELUJCqdGaWJJ9WqA0a4XotSJPr5/ZmoQUlhz9HUAP4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl
rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEB37, serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
Validity
Not Before: Jul 23 07:49:10 2026 GMT
Not After : Jul 30 07:49:10 2026 GMT
Subject: CN=6a61c776-9d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:50:37:ad:07:4c:45:1d:f8:bf:e5:33:01:
7b:07:14:52:3d:23:ee:48:36:6a:f0:80:d5:01:a9:
dc:78:51:b1:01:21:a9:73:cd:4f:a4:0a:e6:68:6a:
d7:a8:0c:37:79:cf:4a:8b:d0:16:2b:0a:18:06:0b:
22:da:d8:2c:1f:fd:f7:bf:d6:50:09:37:d0:48:4e:
1f:24:1e:da:16:53:96:16:ca:9e:7c:be:69:1f:13:
34:c8:50:b1:c3:74:7d:50:16:94:4e:c1:da:29:25:
f9:86:f4:47:25:64:63:9c:82:8d:c5:0f:ec:e3:32:
0b:41:ff:4e:76:54:99:73:ca:db:11:5b:36:e7:cf:
bd:21:c6:71:3e:b3:e2:3a:34:37:88:5f:58:39:17:
74:ec:8b:3a:a0:8b:f9:5b:27:12:c6:51:ab:da:5f:
4e:67:44:81:fe:bc:ad:4f:d3:51:a4:10:0b:df:bf:
eb:67:62:c5:f8:41:b3:da:d4:8a:ad:b0:10:b6:ed:
9e:6b:cc:70:dd:8e:6b:96:51:85:2c:e0:23:8e:87:
d2:d9:c0:25:58:f9:bd:04:c9:25:a0:d2:d8:50:d2:
fc:5a:25:11:ea:ec:3c:8a:a6:8e:0d:61:13:87:1e:
7d:5c:02:f6:5f:aa:5e:ba:e2:7e:f6:2b:84:41:ce:
85:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:78:EE:38:99:11:26:AD:2A:20:53:1B:75:0F:76:94:86:5D:CD:35
X509v3 Authority Key Identifier:
keyid:4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:fc:67:0e:5b:25:0d:f8:aa:11:b3:1d:8a:24:8b:eb:dc:4f:
d7:b0:75:55:02:f2:fd:a3:de:44:47:6a:c6:00:b3:15:9c:a9:
b7:13:72:f7:b0:df:6c:81:f2:85:d6:56:23:d2:e7:78:7d:62:
19:bb:62:b4:30:54:82:41:e5:24:99:93:08:57:2a:3e:c4:23:
c3:c0:ec:47:13:ff:bb:83:cc:6a:c3:9b:86:57:1d:43:cc:50:
af:9c:e2:9c:52:5b:68:d6:c3:c1:46:ad:10:b1:e6:95:2c:21:
f1:2f:d9:bd:22:23:61:56:07:d6:5d:e5:48:08:c6:61:f6:dd:
92:67:eb:b0:5b:29:a6:86:69:6e:6b:aa:9e:26:f5:bc:88:f9:
f8:e5:36:c3:3d:8b:0d:db:80:66:47:1a:e3:1f:2f:ac:a2:a3:
e6:79:92:d2:e1:ad:cc:1c:f0:29:5b:0e:5a:2a:cb:71:21:ca:
fd:c1:43:45:94:71:cb:fc:bc:7f:6d:22:68:fb:dd:dd:2c:5b:
cd:ba:cf:94:3c:1a:eb:ce:fd:3a:74:a5:f4:6e:ed:fc:52:1b:
06:57:41:1e:79:85:0f:0b:eb:85:50:23:96:be:19:78:6e:08:
ef:78:40:ef:10:c1:c8:ad:b6:52:b7:0c:40:f8:cf:6e:a4:ae:
f2:b3:8f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:08 2026 by rpki-client