
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
File: _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json)
Hash identifier: aOaSW7jPqC0Arc9sOlQ2jVAabzpTg0AH0wW5R2s19iA=
Subject key identifier: A5:0F:34:B6:1E:1F:84:C9:8C:F9:ED:DF:41:4B:17:45:20:FC:27:38
Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80
Certificate issuer: /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880
Certificate serial: 1250
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
Manifest number: 0FC8
Signing time: Tue 22 Sep 2026 06:06:29 +0000
Manifest this update: Tue 22 Sep 2026 06:06:28 +0000
Manifest next update: Tue 29 Sep 2026 06:06:28 +0000
Files and hashes: 1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: +RbtDCyDGEl1xYL9rnrC6EqtfY9Dgq+pCdFjJ3a+Zs4=)
2: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: FjzFovZu6aXM8z/dlqSuAPqXLgKsrC/1lTjiwdyZmIg=)
3: A547705AF34A11EFA7A4C071C4F9AE02.roa (hash: BkPr25yKFO4OSu24mLv1IXHgIlBp7q8A5b/1fep419U=)
4: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: 3wvmSVm24Be4PT+QoB6fmiVi8khIAb17IJdvXSMd/Sk=)
5: 50949534AAAE11F187CB4A693811F970.roa (hash: l0h/p7DjdnRmynh+nAyYMbP0S4Gi0gc2IDzle3zcR2A=)
6: E8CADC8EAACA11F1994AAEBB4511F970.roa (hash: sGlIm7n15nGUX3w4RSWt79+SmHQ1cDTRX06zpcJ8ftA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl
rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 06:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4688 (0x1250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91620E0, serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880
Validity
Not Before: Sep 22 06:06:28 2026 GMT
Not After : Sep 29 06:06:28 2026 GMT
Subject: CN=6ab21ae5-3225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:a7:36:39:5b:05:0a:8b:f3:db:8a:29:41:
33:c6:f0:f9:fe:17:ee:9d:19:0a:24:d7:79:a7:d8:
ac:d5:8b:bf:65:e2:62:0a:5e:1c:c7:86:22:72:f0:
e1:bd:9f:c6:f0:d9:33:9a:b8:51:7b:4f:ed:bf:a8:
89:aa:aa:e8:fb:3e:e1:72:95:7e:bd:72:30:85:30:
d2:56:ae:3b:5f:58:83:e9:02:26:c1:40:39:20:8e:
56:da:f5:72:99:8e:82:2c:3d:82:3a:1c:5b:5d:ab:
d1:ac:d3:ee:cb:b1:2b:65:7b:29:28:e2:20:2c:6a:
9e:3e:95:a1:14:71:6b:fa:67:ce:9c:1e:6b:64:e3:
61:19:3a:f2:37:56:df:e4:0d:0b:74:e8:7a:85:18:
75:0d:77:f5:53:aa:a2:c1:ba:e4:14:cb:f8:3b:b6:
01:e9:19:4f:ee:79:26:48:68:55:14:ae:62:84:05:
38:3d:2e:6f:8d:e8:be:97:d0:25:21:ac:2c:56:2d:
c6:ba:53:59:39:5f:5b:f5:18:ad:2b:6b:1a:06:44:
04:d8:85:f8:62:3e:73:fc:85:be:af:cc:55:cc:dd:
11:75:af:b1:83:87:47:af:b9:be:67:fd:ef:a8:14:
3b:e7:9d:9d:e8:c2:89:f8:a9:dd:a5:75:27:0f:58:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0F:34:B6:1E:1F:84:C9:8C:F9:ED:DF:41:4B:17:45:20:FC:27:38
X509v3 Authority Key Identifier:
keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:e4:b0:13:56:26:e2:8f:58:4f:4c:c5:df:eb:70:76:be:88:
6f:4f:35:87:95:62:05:fd:2c:f7:c0:97:be:ed:23:ad:8a:e6:
c0:8e:61:32:90:1b:ac:78:b9:08:d8:6d:73:fd:0c:8c:03:63:
e6:7b:5b:9c:19:9d:a3:33:5f:e6:ca:e2:9e:75:0e:7b:c8:f3:
1b:66:34:a0:56:f5:9c:04:85:28:21:4f:3c:d4:2e:bb:aa:cf:
c1:58:a3:7b:85:44:c1:23:10:a7:50:c2:9a:b4:26:bf:67:15:
0c:81:9d:e7:24:b2:13:a7:b1:c1:27:ff:3b:b4:7b:b4:72:e1:
5e:d2:55:9f:cb:c5:46:22:89:ac:9b:cc:1d:b8:fb:fe:ac:df:
bb:6a:0f:92:b2:a4:b5:66:40:80:23:3a:95:fc:0c:0d:dc:f4:
b0:52:50:fc:16:91:06:4a:fa:fe:d3:3c:f5:50:1d:27:dc:4d:
d2:e6:f6:49:52:e7:89:f2:8b:b7:8e:d0:c8:f6:80:39:b2:61:
e7:87:f8:c2:a5:cc:d0:06:b5:a7:0d:ec:ca:99:19:8a:a2:1a:
bb:58:64:7c:13:f7:00:fe:db:ee:88:1d:4d:92:af:40:3e:a9:
8b:2e:cc:df:71:8a:c1:b5:a7:f9:e8:df:e7:27:dd:84:6a:f9:
4c:81:36:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:23:12 2026 by rpki-client