
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
File: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft (raw, json)
Hash identifier: UQdmiugQOkAv6Vf8N1zSUTu79KnS+F7ABMal2bAV64s=
Subject key identifier: 36:9B:1F:DB:67:08:53:DF:E7:E2:30:43:27:B3:54:A8:8F:A2:F8:34
Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Certificate issuer: /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Certificate serial: 035F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
Manifest number: 0345
Signing time: Mon 21 Sep 2026 00:48:35 +0000
Manifest this update: Mon 21 Sep 2026 00:48:35 +0000
Manifest next update: Mon 28 Sep 2026 00:48:35 +0000
Files and hashes: 1: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl (hash: fNWxaBqsmvXAu9aXarLYUTe2sByZxGG85LXwI7bd3ME=)
2: 951A6E226D2E11F09539AE2BC4F9AE02.roa (hash: s7tXiYi5ptQxn0vdm+4nmLlWJa9YOADDTGYzCkSoTLc=)
3: 69DD27F6A66111F0BF55D666C4F9AE02.roa (hash: YcKOcplSd86LXVVjUokqFyaziv3wglCFpEtfgHfLdYY=)
4: 6A7B1D3AA66111F0BF55D666C4F9AE02.roa (hash: 5kfmdI+J8ZLTBbwi+uPE2fjs8Eif0tU5cmSDRBoW2qA=)
5: 8696B3CA729111F0B120CD72C4F9AE02.roa (hash: bRhHwOGR+nC6Z6a3Gtjjm9JejuDK/Fy85sqNn6DJQCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 863 (0x35f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Validity
Not Before: Sep 21 00:48:35 2026 GMT
Not After : Sep 28 00:48:35 2026 GMT
Subject: CN=6ab07ee3-a4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:42:c6:45:15:69:86:4f:dc:ad:f7:93:e9:
9f:f8:29:22:aa:48:2a:d6:d6:ff:7a:59:58:9d:23:
bf:c5:d2:9a:4c:86:57:9f:85:2e:36:25:cb:90:7f:
59:70:80:27:bb:8e:8e:49:7b:39:e3:4c:bb:0c:f0:
1c:81:90:3e:22:82:e3:a1:0e:77:6a:66:ff:a5:cf:
bf:63:c6:fc:44:b8:a4:ee:d1:ea:dd:96:64:69:e6:
2c:0f:b0:ad:3d:ef:0f:b1:93:c7:e5:83:95:5e:81:
6b:82:21:33:2c:36:0f:1a:8b:85:61:56:11:eb:2c:
2b:1d:bb:dd:65:8b:02:3e:e1:3f:84:b5:c6:b4:23:
8b:a9:d7:5f:e4:c9:7d:61:03:83:47:2c:08:17:20:
4e:21:9d:2b:58:19:ac:2e:1a:39:b5:77:7e:35:c4:
7a:26:42:3b:15:85:1e:da:79:89:46:1e:08:ca:8f:
65:87:16:41:27:08:0f:41:a7:5a:a8:e9:79:ef:09:
46:a0:62:df:0f:f6:21:07:c7:a2:02:3a:a4:b6:03:
49:b4:c1:00:89:a0:f2:63:ba:d6:6d:7c:16:a2:7f:
5e:79:fb:b3:aa:56:2c:0f:dd:3b:e2:b5:c7:ed:c9:
89:ee:a2:4f:eb:61:c6:32:12:4b:bd:b9:12:b9:92:
53:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9B:1F:DB:67:08:53:DF:E7:E2:30:43:27:B3:54:A8:8F:A2:F8:34
X509v3 Authority Key Identifier:
keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:c0:6c:42:df:b9:c0:19:5f:10:26:8f:50:6f:b7:f4:22:83:
d2:c9:ee:b9:51:be:4e:eb:fe:7c:d4:5f:7f:43:2f:29:69:19:
30:83:cc:f0:2c:c2:4d:5f:fb:fb:61:6e:c6:e0:7b:7b:1a:7f:
92:a4:05:01:a5:e0:16:f1:4f:34:93:d4:c9:35:21:50:0f:ae:
f0:b7:ff:af:93:40:2b:d1:43:35:b8:8c:21:f2:31:2e:9c:88:
6a:52:f5:b6:0d:ab:9e:4c:2c:07:a1:9b:9f:b1:63:37:2d:e6:
a7:dc:1a:61:b0:40:ed:13:97:83:d0:21:f2:e5:78:00:b5:7d:
17:91:a0:f2:39:9e:af:b5:4a:05:c6:e7:b0:f0:51:0d:99:5a:
99:29:3b:58:1f:0d:08:d2:aa:7a:12:d4:e0:99:3b:c5:0d:f2:
af:76:01:7f:a4:3b:24:24:cf:29:ec:d3:8a:a9:6f:d2:f1:4d:
e0:2d:c3:00:8b:c2:d8:c9:e3:8f:b9:fe:bd:9f:6b:5c:99:5d:
4b:90:87:e8:ca:73:8a:0f:36:60:a9:0b:d3:da:b4:4f:20:4d:
f2:ac:0f:85:0e:08:64:42:dc:1b:cd:66:ef:78:1e:7c:25:d9:
8e:1d:9b:50:cb:27:14:bb:13:ce:30:82:6d:1c:46:09:25:b2:
98:9e:7a:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjMyRDcxMTAvBgNVBAUTKDRFMDczNzg2NjdFQzc5RDUzRDY1MEU1MjREMUU4Rjk4
QjA4QzI4RTEwHhcNMjYwOTIxMDA0ODM1WhcNMjYwOTI4MDA0ODM1WjAYMRYwFAYD
VQQDEw02YWIwN2VlMy1hNGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAollCxkUVaYZP3K33k+mf+Ckiqkgq1tb/ellYnSO/xdKaTIZXn4UuNiXLkH9Z
cIAnu46OSXs540y7DPAcgZA+IoLjoQ53amb/pc+/Y8b8RLik7tHq3ZZkaeYsD7Ct
Pe8PsZPH5YOVXoFrgiEzLDYPGouFYVYR6ywrHbvdZYsCPuE/hLXGtCOLqddf5Ml9
YQODRywIFyBOIZ0rWBmsLho5tXd+NcR6JkI7FYUe2nmJRh4Iyo9lhxZBJwgPQada
qOl57wlGoGLfD/YhB8eiAjqktgNJtMEAiaDyY7rWbXwWon9eefuzqlYsD9074rXH
7cmJ7qJP62HGMhJLvbkSuZJTEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDabH9tn
CFPf5+IwQyezVKiPovg0MB8GA1UdIwQYMBaAFE4HN4Zn7HnVPWUOUk0ej5iwjCjh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzJENy9GOTc5NTlDMjI0
MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2VkVTlaUTVTVFI2UG1MQ01L
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RnYzNobWZzZWRVOVpRNVNUUjZQbUxDTUtPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzJENy9GOTc5NTlDMjI0MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2Vk
VTlaUTVTVFI2UG1MQ01LT0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgcBsQt+5wBlfECaPUG+39CKD0snuuVG+Tuv+fNRff0MvKWkZMIPM8CzCTV/7
+2FuxuB7exp/kqQFAaXgFvFPNJPUyTUhUA+u8Lf/r5NAK9FDNbiMIfIxLpyIalL1
tg2rnkwsB6Gbn7FjNy3mp9waYbBA7ROXg9Ah8uV4ALV9F5Gg8jmer7VKBcbnsPBR
DZlamSk7WB8NCNKqehLU4Jk7xQ3yr3YBf6Q7JCTPKezTiqlv0vFN4C3DAIvC2Mnj
j7n+vZ9rXJldS5CH6Mpzig82YKkL09q0TyBN8qwPhQ4IZELcG81m73gefCXZjh2b
UMsnFLsTzjCCbRxGCSWymJ565w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:11:07 2026 by rpki-client