
$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
File: TbOy41mbZG6fMK90pYxmePrx0rc.mft (raw, json)
Hash identifier: VVRZVJLXdxWDX1hBElTcapqQz8VQXkeGDWIkqBBly70=
Subject key identifier: B2:27:BD:C2:17:84:7D:3F:03:08:0F:47:0E:30:0E:72:26:96:8A:C5
Authority key identifier: 4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7
Certificate issuer: /CN=A91698EC/serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
Manifest number: 0169
Signing time: Fri 17 Apr 2026 04:35:28 +0000
Manifest this update: Fri 17 Apr 2026 04:35:28 +0000
Manifest next update: Fri 24 Apr 2026 04:35:28 +0000
Files and hashes: 1: TbOy41mbZG6fMK90pYxmePrx0rc.crl (hash: NijPvpn1zxewTBzBarSVH3LZcwtabwKLh0xhFTMOyfs=)
2: F2A90F6A86AE11EF999DAD2FC4F9AE02.roa (hash: vlR6KwXR8TL2mf6RJa/2FvIbd+B9HhzeWeJ+vJVsVYo=)
3: 206DB948214F11EFAB245D49C4F9AE02.roa (hash: TNEM4VNwQk6CJq6g7Tw93nqe1s3+SXsaXip/J0usQiA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl
rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91698EC, serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7
Validity
Not Before: Apr 17 04:35:28 2026 GMT
Not After : Apr 24 04:35:28 2026 GMT
Subject: CN=69e1b890-bbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:61:64:d2:5b:40:71:a1:af:ec:a0:01:b6:
25:12:d0:63:87:d6:f9:eb:61:81:e0:c0:14:7f:84:
cd:e0:95:3a:9b:53:63:cb:8d:21:7d:a1:ae:f1:68:
0f:b9:ab:c5:d1:db:2b:2d:38:4d:ec:c9:f0:7c:44:
47:4f:4c:de:a5:78:c9:03:98:71:f9:a5:72:81:e2:
01:a7:1c:b2:9c:a3:35:2c:08:6f:49:05:ec:33:b9:
0c:22:89:67:26:5d:72:ab:65:6c:07:7b:70:92:03:
3e:41:ad:ee:04:90:c7:09:57:c4:8a:05:85:2a:5d:
b5:c7:36:e5:57:82:c7:55:d9:84:46:2a:e3:6f:3b:
4a:b7:35:80:f3:67:a9:2a:61:4a:d0:48:c6:96:26:
d8:3a:cf:ed:de:e0:83:ff:d8:32:aa:97:eb:ff:a9:
13:60:33:bb:37:a7:9c:3a:5b:9b:69:e9:b7:f5:11:
62:26:18:17:cd:18:ef:72:7f:ab:ac:cf:7d:90:23:
f7:a4:e1:95:f4:b9:29:00:5c:fa:3c:d0:3c:3a:f5:
74:d4:e4:04:19:6e:2b:34:2c:66:9e:25:35:39:b9:
e3:50:ba:ea:ad:72:8e:30:df:b5:15:b8:35:94:01:
06:d0:59:14:da:30:14:61:1c:c4:73:aa:84:f6:20:
67:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:27:BD:C2:17:84:7D:3F:03:08:0F:47:0E:30:0E:72:26:96:8A:C5
X509v3 Authority Key Identifier:
keyid:4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ed:9d:c2:a1:71:5b:d2:52:11:07:68:97:44:f5:ca:cd:1f:
75:91:9d:29:95:11:87:c3:ca:4f:72:66:e2:ab:b1:c9:5f:69:
76:0b:5d:1a:cc:b8:f9:94:27:ec:3c:ae:62:ef:f6:31:1d:52:
44:67:c6:78:2b:91:e4:77:23:e9:50:1b:dd:17:e5:7f:da:8f:
c9:9a:d0:b8:5e:f1:5c:86:f8:de:6d:c6:52:78:70:cd:70:8b:
24:6d:7d:c0:ba:3d:28:bb:cf:f4:91:53:7c:df:38:ff:e6:4f:
0b:37:84:50:54:4d:9e:30:3f:9e:60:c3:e8:37:6c:09:83:31:
d9:89:4c:b1:9c:1d:08:ea:6f:e8:43:2c:82:ad:62:d2:19:a1:
3a:f5:30:e0:4c:b3:7a:83:ad:93:37:61:fd:58:b5:db:72:7e:
71:3d:81:64:b1:bd:6b:f4:1c:09:5c:8a:fa:99:63:5d:98:5c:
df:f6:b0:e4:5b:a0:53:a0:15:e5:90:63:90:1f:04:1c:55:82:
12:a3:bf:c0:cb:86:91:1c:ea:9b:aa:f2:b6:9e:fc:2f:fa:90:
1f:b4:41:ab:df:a6:8d:56:d0:d4:8a:d1:96:a6:87:f5:6e:56:
43:00:b3:52:1c:df:0f:62:f8:17:26:66:08:bb:b6:e6:5c:52:
66:89:69:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:21:32 2026 by rpki-client