
$ rpki-client -vvf rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
File: TCISGt-uP1dSgBZRUcP9MOOq_QE.mft (raw, json)
Hash identifier: WFheOWpojD30303xtW4dq+5dfRSv/h+tyK0kRbtUO7Y=
Subject key identifier: 39:24:6F:66:B2:95:9A:F1:83:03:0B:7B:9C:B7:93:49:5E:D4:FF:E4
Authority key identifier: 4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01
Certificate issuer: /CN=A91466E8/serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
Manifest number: C0
Signing time: Sun 01 Mar 2026 08:10:43 +0000
Manifest this update: Sun 01 Mar 2026 08:10:42 +0000
Manifest next update: Sun 08 Mar 2026 08:10:42 +0000
Files and hashes: 1: TCISGt-uP1dSgBZRUcP9MOOq_QE.crl (hash: YiWLNrARQUampXnN5eNyfO/xkoNZLs/jwYZ6LEgoUk8=)
2: 67CB5FC0629411F0B7FA070FC4F9AE02.roa (hash: ezXoOJmaQ+T0/SBG+83qcx+7CgpMAs0wB76/qo16lME=)
3: 02640B0CF97911EF99F9BE80C4F9AE02.roa (hash: NYtoABq9iaZ7RDTNr8tHyhssdbHGRtrQu/5JhSbINm0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl
rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91466E8, serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01
Validity
Not Before: Mar 1 08:10:42 2026 GMT
Not After : Mar 8 08:10:42 2026 GMT
Subject: CN=69a3f483-414e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b3:6d:b9:14:ce:37:48:08:1c:e2:f8:4d:4a:
0d:45:70:53:2c:d3:58:33:1e:47:21:56:02:79:aa:
99:dc:56:33:82:10:4f:78:51:75:6e:e1:ea:c1:4f:
3e:58:bf:d6:8a:a3:16:a3:ee:ef:09:8a:ca:96:f9:
11:b3:10:3e:86:8c:d8:95:ed:92:48:43:b9:1a:a6:
cb:97:11:55:8d:12:96:a5:62:c1:4f:e4:8a:d6:ea:
3d:f8:d0:a9:30:bd:3a:d6:1e:42:a1:c8:33:25:ab:
b3:9f:3d:0c:a7:71:cd:64:59:f5:cd:6f:ae:0e:54:
8e:89:01:9a:8d:80:c9:36:42:99:46:75:ab:ae:6f:
58:74:6e:58:8b:69:41:f3:2f:84:64:54:83:df:96:
b5:b8:c9:a9:1a:d0:cb:b2:6e:45:a3:85:b3:61:50:
d6:5a:be:94:37:76:bb:84:81:92:db:b1:50:08:d2:
78:10:0c:3f:45:f2:85:5e:9e:b6:65:f5:80:2f:b9:
b5:07:f7:dd:65:91:b1:88:cc:47:7b:61:80:ef:d9:
ae:11:86:67:7e:5a:2a:ae:59:b7:a0:53:17:2e:4b:
c1:6c:01:da:8b:9a:3a:47:4e:51:60:30:74:f0:9d:
b3:4d:f5:2e:16:10:b1:3b:24:98:39:71:58:94:4e:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:24:6F:66:B2:95:9A:F1:83:03:0B:7B:9C:B7:93:49:5E:D4:FF:E4
X509v3 Authority Key Identifier:
keyid:4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:3c:66:b7:23:99:b3:aa:28:c9:c0:8d:6f:33:4e:6a:67:73:
a4:c7:d1:2a:31:3d:90:11:44:88:65:2f:28:c3:69:d1:cc:71:
15:18:3d:8e:5c:2b:94:27:d4:aa:87:5c:dd:76:0f:43:76:f4:
f1:30:e5:62:40:75:97:3f:93:c2:f7:5d:d7:78:06:6a:44:9d:
9b:d1:5a:9c:89:81:13:43:c4:d3:9f:a1:50:ad:49:5c:84:39:
d8:31:be:7b:09:ed:57:0e:b2:1a:08:d0:c2:b9:69:ed:83:9b:
85:08:96:89:50:74:c1:e6:e1:66:a4:da:6e:0c:3f:52:3f:fa:
25:c3:b7:4c:a6:78:a9:a3:1e:5c:76:ad:fa:54:5c:2c:4e:a8:
85:a7:81:bf:dd:88:92:56:9d:e4:f1:38:18:22:26:84:f2:bb:
4e:d6:7c:6f:59:f6:c7:40:8b:dd:a4:33:9f:a4:eb:3f:f8:de:
8c:72:22:0c:f4:59:02:55:ec:9a:25:f0:c1:64:c5:68:2f:1d:
32:d8:36:6a:db:11:85:3e:c9:51:be:e3:b3:30:a6:a4:5b:d1:
a4:3b:f0:e7:d7:b7:1c:a0:88:6e:8f:51:9a:ef:66:ad:f1:dc:
99:08:fd:09:9b:23:74:d8:4c:4b:2e:8e:45:94:60:6a:0a:5b:
24:a7:ef:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:33 2026 by rpki-client