
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
File: Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft (raw, json)
Hash identifier: HqZaXqcduJtQi5+wplgeq+dnT+nwCmWEdU3MfKzqfGQ=
Subject key identifier: A0:A5:EF:D2:06:80:A7:44:B6:08:AA:C5:E6:95:5E:84:DC:74:7C:BF
Authority key identifier: 4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4
Certificate issuer: /CN=A91392AE/serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
Certificate serial: 1AF2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
Manifest number: 1ACC
Signing time: Sun 20 Sep 2026 16:16:50 +0000
Manifest this update: Sun 20 Sep 2026 16:16:49 +0000
Manifest next update: Sun 27 Sep 2026 16:16:49 +0000
Files and hashes: 1: Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl (hash: EFn5JoXth+bSbsWWJUF81KiJSShH2pFkcb6DdLzv0OM=)
2: 1F34B5C0250011F1A608795FB9833773.roa (hash: jnHfdZlGP05uzRK0sOEtj3YTXYZ0eMDyTxoVg2Tsfa8=)
3: 185EA954250011F192DC095DB9833773.roa (hash: 9EdyDv/MVn8x73r1PoQ2hUZDh9n0G9GLA9V6/QPeY90=)
4: 17751640250011F192DC095DB9833773.roa (hash: GOnhgQWq/EDuV1igxZiwLVEbckW/7W3D9W12bCycdmQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl
rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 16:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6898 (0x1af2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91392AE, serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
Validity
Not Before: Sep 20 16:16:49 2026 GMT
Not After : Sep 27 16:16:49 2026 GMT
Subject: CN=6ab006f2-0aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:8d:09:c3:3d:fc:bd:c5:0d:5c:b6:31:57:
c3:99:04:7d:c9:fe:1a:a3:57:17:89:b4:47:db:7a:
5e:69:0e:e0:f1:6c:50:dd:40:b6:c0:4d:21:8d:b8:
9f:62:7a:32:49:58:7d:bd:1e:2e:5d:58:92:6f:25:
35:4d:9f:5e:82:b0:ef:57:ba:b3:1f:7e:ba:3e:c7:
fc:a9:23:37:b0:52:af:18:57:87:2a:17:bd:2a:60:
29:b3:b0:e9:21:30:e0:e6:ec:80:3e:b9:7b:e7:8a:
dd:de:21:3c:db:34:9a:53:be:46:bb:0b:7a:b8:35:
3d:b7:9f:9a:62:ef:e0:91:8b:52:da:bf:64:8b:e3:
66:40:e2:69:16:73:4e:d3:b2:19:8c:0b:cf:9d:6f:
21:03:11:86:12:f8:a7:c2:2f:b1:28:b5:96:d8:a8:
7b:7e:73:5c:0d:aa:7f:b6:bb:bb:15:da:b0:b1:0b:
a8:83:21:4d:94:f8:d3:67:1d:60:ef:f4:55:e2:03:
ac:a1:29:bb:64:e8:69:35:0c:46:5a:05:56:c9:98:
3b:ee:83:79:88:26:f9:4f:fb:54:e4:da:1a:99:84:
18:65:b6:45:7a:ca:aa:45:d9:a7:e4:af:ce:3b:ff:
9d:ab:14:b3:9d:4e:c1:e2:c7:03:cf:f9:8e:c7:1e:
2b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A5:EF:D2:06:80:A7:44:B6:08:AA:C5:E6:95:5E:84:DC:74:7C:BF
X509v3 Authority Key Identifier:
keyid:4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:7c:70:a3:06:85:c0:62:a1:8f:3d:11:da:42:4f:6f:42:7e:
02:8b:22:dd:dd:91:37:45:82:a2:ae:44:0a:be:30:8a:d4:89:
13:08:98:d8:22:79:93:da:8c:06:4c:91:73:f4:98:5f:2b:99:
af:bd:7a:e7:1c:d8:f7:05:17:c1:dd:26:0d:c5:05:2f:88:9a:
2d:2e:60:a2:28:e5:14:fd:16:c7:1a:f1:97:23:e0:4f:1a:5e:
58:93:5e:85:d3:02:05:20:44:6a:05:00:97:d4:1e:9f:09:73:
c4:05:3a:c8:d0:b3:b1:07:a3:83:a4:3f:da:34:ea:b5:cc:db:
3c:fe:73:b1:46:de:f2:3d:3f:fa:32:a8:53:fe:ef:7d:95:4a:
94:58:f4:40:b8:f0:1d:a2:5a:31:59:e7:dc:a1:3e:91:86:06:
ef:a5:b9:82:7a:49:da:08:71:0b:69:a1:38:65:cd:df:1d:8c:
5b:37:27:ea:f2:fe:0a:74:9f:ae:c0:2e:c5:55:91:c9:de:a9:
69:d4:c1:79:a8:6a:45:4e:93:45:87:33:f5:60:4b:2c:3f:01:
e0:a9:88:25:e1:1e:d3:b5:2e:b4:93:b2:b1:ab:04:21:39:a7:
d9:0e:7e:bd:a7:90:fa:85:0a:b4:c1:3b:e6:22:63:39:6f:27:
d3:a4:a7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:07:17 2026 by rpki-client