
$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
File: _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json)
Hash identifier: d2RsEypADRS0MYwVp8eSGzT9A3A4XK/osaTiwJ/paqs=
Subject key identifier: BD:C7:BA:5C:AD:E3:46:23:B1:10:61:BE:D3:C3:38:68:C4:80:69:FF
Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80
Certificate issuer: /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880
Certificate serial: 1216
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
Manifest number: 0F9D
Signing time: Tue 28 Jul 2026 18:57:38 +0000
Manifest this update: Tue 28 Jul 2026 18:57:38 +0000
Manifest next update: Tue 04 Aug 2026 18:57:38 +0000
Files and hashes: 1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: jVKkjiu8zglT/Hgf6KknLvOiMN+Tqt+T6bIv/6ncdIE=)
2: F6F6AB786FDB11F1B43A108286A30FBC.roa (hash: 6YnZp3m195z7DFut9A3AynaAgoS3S+vPjlQoXwqe24k=)
3: A547705AF34A11EFA7A4C071C4F9AE02.roa (hash: BkPr25yKFO4OSu24mLv1IXHgIlBp7q8A5b/1fep419U=)
4: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: 3wvmSVm24Be4PT+QoB6fmiVi8khIAb17IJdvXSMd/Sk=)
5: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: FjzFovZu6aXM8z/dlqSuAPqXLgKsrC/1lTjiwdyZmIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl
rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4630 (0x1216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91620E0, serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880
Validity
Not Before: Jul 28 18:57:38 2026 GMT
Not After : Aug 4 18:57:38 2026 GMT
Subject: CN=6a68fba2-3304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e8:65:ba:fe:b8:ee:8b:bd:b8:52:ba:e0:28:
f4:55:3b:1c:5f:9c:4d:36:9d:69:72:c7:51:eb:00:
f6:ed:bb:4b:c0:13:16:fb:2b:16:eb:c9:bc:9b:45:
f4:b7:cf:e5:ae:35:4a:70:5b:0a:c6:b9:a7:cc:46:
65:20:6b:1f:de:b4:2e:f3:c9:df:f3:3b:ee:df:41:
f1:84:1e:93:d9:ff:64:1e:87:01:0d:c8:44:58:09:
3e:95:71:d6:b1:48:41:08:fc:ce:1a:2f:e0:cc:e8:
f9:a9:d4:24:33:07:61:c9:d4:fc:b2:28:40:4a:42:
db:2b:39:b0:17:e0:64:cd:c8:cc:52:d6:91:85:9a:
1b:2f:49:20:d7:80:1b:45:49:4e:1a:0e:b3:41:7f:
35:30:d7:11:5f:ea:f8:af:92:a9:4d:cc:33:62:d6:
00:1b:0e:20:f0:ad:43:4b:2a:3d:a4:5c:02:31:63:
4f:6b:37:85:a4:7b:3c:6e:65:6e:12:be:57:28:05:
bd:48:d5:fc:09:50:71:74:18:82:3b:38:db:e0:01:
bd:2e:b1:1a:09:f8:c7:06:1e:d2:37:4a:a6:c4:df:
16:6b:f4:4e:8c:ea:f8:2e:ff:04:ca:f7:de:b1:93:
37:de:5c:be:d6:6b:b9:cf:54:77:01:e0:6b:5b:bc:
5c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C7:BA:5C:AD:E3:46:23:B1:10:61:BE:D3:C3:38:68:C4:80:69:FF
X509v3 Authority Key Identifier:
keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:bc:f3:d8:d8:fe:53:22:25:a2:f9:54:e1:b0:0a:58:22:58:
7a:f4:c2:c4:b6:cf:e1:38:1f:c5:f9:40:7c:b0:0e:6c:0c:51:
c3:3c:77:8c:7b:2d:65:74:1e:af:8c:83:f7:84:af:0a:40:28:
be:f3:73:3e:ac:0f:a8:66:ea:a7:f6:9d:84:7b:3a:24:83:dd:
69:c7:47:79:f7:c5:83:f0:b9:4f:82:50:61:f7:cf:be:08:0e:
d7:85:47:61:22:86:f6:6c:09:8f:f9:33:e1:68:be:56:bf:19:
0b:54:3f:ad:88:a9:cc:ea:c3:89:f6:ee:55:86:83:55:40:da:
87:ee:ec:a2:5c:a1:4a:b4:b7:68:fb:a0:1d:d9:1b:8f:70:fe:
ee:a9:f8:32:77:11:f4:32:49:30:44:d1:91:70:7c:59:6d:6d:
bb:27:26:fe:a8:a1:55:2e:e7:d3:59:b0:5f:4d:03:e2:e6:33:
ed:06:63:86:52:34:45:05:23:c7:ba:19:13:bf:25:65:34:e7:
ff:2e:7d:92:5d:e0:69:c5:30:4f:88:98:d9:ac:f9:b9:21:c2:
38:35:cc:f8:96:68:99:b2:6c:df:7b:d6:8c:70:b4:3f:02:d9:
05:b3:7a:27:09:f7:d4:91:83:61:c6:1c:45:f6:af:88:e0:c4:
9d:af:df:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:24 2026 by rpki-client