
$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
File: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft (raw, json)
Hash identifier: M8oL8C/oucfFpHzaWZVBQjuVgfw6m06vUynUGxWFbxY=
Subject key identifier: 66:96:3E:BB:7A:D4:6A:F9:42:F0:19:E8:72:92:D4:E6:CC:E8:EC:71
Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Certificate issuer: /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Certificate serial: 0342
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
Manifest number: 0328
Signing time: Mon 27 Jul 2026 02:17:15 +0000
Manifest this update: Mon 27 Jul 2026 02:17:14 +0000
Manifest next update: Mon 03 Aug 2026 02:17:14 +0000
Files and hashes: 1: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl (hash: bHnN8sHNZRLq0CcIf0NaWkJpYrMPidG4S2wS32sf2+s=)
2: 6A7B1D3AA66111F0BF55D666C4F9AE02.roa (hash: 5kfmdI+J8ZLTBbwi+uPE2fjs8Eif0tU5cmSDRBoW2qA=)
3: 8696B3CA729111F0B120CD72C4F9AE02.roa (hash: bRhHwOGR+nC6Z6a3Gtjjm9JejuDK/Fy85sqNn6DJQCM=)
4: 951A6E226D2E11F09539AE2BC4F9AE02.roa (hash: s7tXiYi5ptQxn0vdm+4nmLlWJa9YOADDTGYzCkSoTLc=)
5: 69DD27F6A66111F0BF55D666C4F9AE02.roa (hash: YcKOcplSd86LXVVjUokqFyaziv3wglCFpEtfgHfLdYY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:17:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 834 (0x342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Validity
Not Before: Jul 27 02:17:14 2026 GMT
Not After : Aug 3 02:17:14 2026 GMT
Subject: CN=6a66bfaa-c950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:35:71:93:b6:1b:14:b8:1b:19:99:a1:b2:
27:e6:26:01:5c:df:31:4f:84:f0:f3:5c:23:4f:95:
68:7a:0b:d2:b5:96:42:f3:b9:14:1d:93:06:f1:0f:
b4:c3:2c:5c:61:fc:3c:1a:c5:59:2a:b5:6f:e1:24:
e3:2a:c4:14:71:eb:f7:0a:77:2c:5f:e6:48:43:3b:
8e:6d:21:a5:e9:68:65:d9:ad:8b:ff:44:d5:29:9c:
d5:d4:ff:3a:eb:27:b3:61:67:be:bb:b3:e2:a9:ee:
e3:2b:fc:90:c2:f9:73:34:ea:3a:3a:04:a3:11:30:
a8:a0:3c:59:6a:d6:ae:f7:42:87:3b:03:5a:7b:63:
b0:74:9f:fe:54:57:b2:00:31:9f:b9:25:84:4b:cd:
17:f6:4b:8b:a0:33:9a:19:9c:61:8b:a3:e8:e6:31:
0f:ff:1d:d2:01:47:1a:a1:95:84:6b:d9:28:b7:15:
da:8b:c8:a5:bb:36:92:8a:44:a0:09:67:7d:87:30:
1a:06:63:09:4f:f7:a7:71:f7:8c:e4:36:f8:20:71:
68:9c:20:01:8d:55:a2:86:36:a6:20:47:8a:9a:92:
51:80:a4:46:47:27:bd:b5:40:02:13:d5:79:98:33:
5c:6d:08:ec:53:31:83:69:3a:d1:b9:e6:5f:32:7c:
2c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:96:3E:BB:7A:D4:6A:F9:42:F0:19:E8:72:92:D4:E6:CC:E8:EC:71
X509v3 Authority Key Identifier:
keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9f:ff:af:2d:a8:e0:01:5e:ac:fb:31:4e:c2:19:67:87:df:
94:54:f3:b4:bf:16:16:01:94:44:c7:0a:ff:c0:ca:22:d3:65:
e7:d7:c1:30:81:28:82:19:56:fc:bd:d8:8a:ae:50:d7:e0:28:
71:3b:a1:e7:c7:2d:49:e5:cf:9f:01:3f:33:41:ee:c1:51:7d:
15:0a:a1:28:64:d5:a9:b6:90:4d:41:e0:1c:fe:db:d1:4f:e3:
49:3f:5e:ae:d6:a6:d3:b8:89:52:93:67:11:90:f1:f7:8c:93:
c3:c5:20:56:ba:c9:f0:20:2e:f0:f9:53:9e:17:60:8d:6e:28:
78:79:45:de:08:31:c1:40:5a:b4:6d:5c:05:77:31:45:bd:68:
45:b3:93:06:1d:9f:54:45:4b:34:79:12:02:37:b1:ab:1d:a1:
de:2e:bc:82:a8:b4:02:82:8d:8d:39:0f:2e:56:ec:5b:5f:09:
3a:e4:08:7c:2d:37:08:aa:07:d3:34:55:ed:64:73:56:49:04:
2f:eb:48:75:bc:b2:46:67:01:75:81:fa:e2:c5:03:6e:be:f7:
53:ea:c9:0c:ea:fc:d8:67:fc:fb:38:11:e8:4e:15:2c:89:c1:
1e:7b:73:21:71:5a:34:39:61:20:e2:55:2d:e2:79:80:8d:0e:
7d:e2:86:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:53 2026 by rpki-client