
$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
File: _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json)
Hash identifier: B5UKirFnQJVqFjKk06OrkIUSSi91nEk5rf8TJVGf+q4=
Subject key identifier: 3B:7E:6F:5C:53:15:DD:7C:8C:6A:D0:1C:D0:8D:8B:B3:A2:44:EB:E5
Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80
Certificate issuer: /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880
Certificate serial: 11A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
Manifest number: 0F3F
Signing time: Sat 28 Feb 2026 19:04:30 +0000
Manifest this update: Sat 28 Feb 2026 19:04:30 +0000
Manifest next update: Sat 07 Mar 2026 19:04:30 +0000
Files and hashes: 1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: yONrg2sH+eBsiVGKVK7byokzLbpaW+3f04DunD1yziY=)
2: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: 2DhSKbqHerwHAcJuXyOqA5Uvz8i+b7ElwkCYt1IMjOk=)
3: 52DDE6AEB97F11F085A49519C4F9AE02.roa (hash: yOuWRsyltBFagKzqpGS582aWz7h2FY8ZBcuACxag5X4=)
4: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: dENzJEUKeZTxWU/8nd/lAkN4nDmqFnhB+bpqCZU0QcI=)
5: A547705AF34A11EFA7A4C071C4F9AE02.roa (hash: RJWWol/N3kpabs0RDHnKDFjohXYhNv2bTe01qDy5yFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl
rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4514 (0x11a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91620E0, serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880
Validity
Not Before: Feb 28 19:04:30 2026 GMT
Not After : Mar 7 19:04:30 2026 GMT
Subject: CN=69a33c3e-3574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:c0:51:c9:4e:67:73:30:78:1e:7c:b5:43:
82:a1:ff:9a:af:1a:9b:54:2c:81:08:ef:76:6c:23:
8d:cc:ee:ac:57:da:e7:24:6a:0b:41:fe:97:9a:d9:
d0:9b:dd:01:5f:36:ab:95:56:d6:39:cc:9d:de:6a:
8e:dc:00:9a:bb:1f:07:f3:56:18:07:13:aa:49:12:
49:5c:f1:13:4a:93:72:02:fc:98:3e:47:55:d4:b0:
5e:1f:9e:8b:94:03:0a:37:ba:05:67:ce:17:c3:10:
da:d2:bc:d6:28:72:c9:60:4a:bb:c3:af:11:92:32:
5a:0a:4c:b8:86:ef:b2:28:28:9e:68:f6:db:dd:b2:
b8:f7:36:01:b1:5a:69:fd:7b:ee:10:b4:57:e7:02:
75:e5:43:06:1f:fc:c1:7e:42:ce:b8:50:23:95:d5:
38:7c:a8:65:6a:5d:02:b3:be:f5:66:09:30:25:e8:
0e:b8:5b:ab:9b:e2:21:49:f6:4d:6c:61:c4:6e:be:
be:db:08:48:54:70:50:5c:97:1d:99:e6:a8:fc:15:
20:d8:d4:e8:10:b6:59:b8:88:13:50:ee:c5:9c:0e:
10:7f:f4:8e:b4:c6:89:19:28:5a:b4:6c:0f:23:23:
21:7a:2a:42:77:20:01:30:5d:1c:e2:50:8c:8a:34:
e1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7E:6F:5C:53:15:DD:7C:8C:6A:D0:1C:D0:8D:8B:B3:A2:44:EB:E5
X509v3 Authority Key Identifier:
keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cc:68:6a:09:ea:d1:c5:1a:9a:c0:94:dc:35:cf:c8:a8:ee:
7e:f5:ae:0b:55:dd:0b:8c:fc:0f:82:59:67:9d:e5:d1:fa:7e:
86:c0:2b:d9:11:ba:84:80:d3:80:05:6b:7b:8f:37:6d:55:96:
7f:ac:88:80:c5:c1:20:a6:e5:6e:cb:29:49:7f:58:d1:d1:51:
2d:3c:aa:6b:6f:32:27:d7:12:ad:96:e1:bb:20:e7:33:f3:0b:
e4:3f:9d:00:f3:05:bc:31:49:b4:2f:f4:44:96:81:75:76:c3:
b0:cf:c8:f6:44:8b:71:5e:45:f1:94:19:32:92:8e:e0:89:b7:
72:d9:fd:75:11:b8:a7:48:49:ea:04:b2:a7:2e:e1:35:35:dd:
17:0c:cb:a7:76:75:6f:b9:f1:f2:14:d4:1f:df:78:0e:2a:ee:
15:10:10:ff:94:31:1a:3d:cf:af:ed:fa:6c:cf:2a:84:28:10:
60:94:47:b9:1d:f0:23:8f:17:05:84:51:be:b6:3d:a7:92:5a:
9d:3c:ba:7b:34:60:e2:b5:69:8f:59:80:43:74:e3:bd:48:9b:
23:28:c8:33:9e:79:db:a9:66:10:17:15:e4:f9:70:eb:5d:57:
77:67:0b:2e:a2:75:c0:9a:84:9a:e3:e8:45:5e:31:77:76:5d:
27:e2:8b:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjIwRTAxMTAvBgNVBAUTKEZEM0I0RUY4Rjc5QjBBRTEyN0U3MUU0QjZDMTg2OUQ4
MUIyMkU4ODAwHhcNMjYwMjI4MTkwNDMwWhcNMjYwMzA3MTkwNDMwWjAYMRYwFAYD
VQQDDA02OWEzM2MzZS0zNTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwm/AUclOZ3MweB58tUOCof+arxqbVCyBCO92bCONzO6sV9rnJGoLQf6XmtnQ
m90BXzarlVbWOcyd3mqO3ACaux8H81YYBxOqSRJJXPETSpNyAvyYPkdV1LBeH56L
lAMKN7oFZ84XwxDa0rzWKHLJYEq7w68RkjJaCky4hu+yKCieaPbb3bK49zYBsVpp
/XvuELRX5wJ15UMGH/zBfkLOuFAjldU4fKhlal0Cs771ZgkwJegOuFurm+IhSfZN
bGHEbr6+2whIVHBQXJcdmeao/BUg2NToELZZuIgTUO7FnA4Qf/SOtMaJGShatGwP
IyMheipCdyABMF0c4lCMijThYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDt+b1xT
Fd18jGrQHNCNi7OiROvlMB8GA1UdIwQYMBaAFP07Tvj3mwrhJ+ceS2wYadgbIuiA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFMC9FMUEzODRBQzMx
MEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1RW41eDVMYkJocDJCc2k2
SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19UdE8tUGViQ3VFbjV4NUxiQmhwMkJzaTZJQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MjBFMC9FMUEzODRBQzMxMEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1
RW41eDVMYkJocDJCc2k2SUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAesxoagnq0cUamsCU3DXPyKjufvWuC1XdC4z8D4JZZ53l0fp+hsAr2RG6hIDT
gAVre483bVWWf6yIgMXBIKblbsspSX9Y0dFRLTyqa28yJ9cSrZbhuyDnM/ML5D+d
APMFvDFJtC/0RJaBdXbDsM/I9kSLcV5F8ZQZMpKO4Im3ctn9dRG4p0hJ6gSypy7h
NTXdFwzLp3Z1b7nx8hTUH994DiruFRAQ/5QxGj3Pr+36bM8qhCgQYJRHuR3wI48X
BYRRvrY9p5JanTy6ezRg4rVpj1mAQ3TjvUibIyjIM55526lmEBcV5Plw611Xd2cL
LqJ1wJqEmuPoRV4xd3ZdJ+KLUw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:48 2026 by rpki-client