
$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
File: TbOy41mbZG6fMK90pYxmePrx0rc.mft (raw, json)
Hash identifier: ix/k7+EwxnYv0rBM9ptupKM2+dDUeyld+lFWzGujf/E=
Subject key identifier: FB:EE:9A:4E:6B:05:CE:E5:E8:38:07:7D:52:32:F4:5B:DA:C5:35:CC
Authority key identifier: 4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7
Certificate issuer: /CN=A91698EC/serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
Manifest number: 0185
Signing time: Sat 13 Jun 2026 04:33:23 +0000
Manifest this update: Sat 13 Jun 2026 04:33:23 +0000
Manifest next update: Sat 20 Jun 2026 04:33:23 +0000
Files and hashes: 1: TbOy41mbZG6fMK90pYxmePrx0rc.crl (hash: gIaFLmuA3vKyROl2FBQDu7YNExsFaggYulRQwKhp2yM=)
2: F2A90F6A86AE11EF999DAD2FC4F9AE02.roa (hash: vlR6KwXR8TL2mf6RJa/2FvIbd+B9HhzeWeJ+vJVsVYo=)
3: 206DB948214F11EFAB245D49C4F9AE02.roa (hash: TNEM4VNwQk6CJq6g7Tw93nqe1s3+SXsaXip/J0usQiA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl
rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91698EC, serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7
Validity
Not Before: Jun 13 04:33:23 2026 GMT
Not After : Jun 20 04:33:23 2026 GMT
Subject: CN=6a2cdd93-30d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fe:2b:aa:68:11:c7:13:a6:32:88:ac:51:61:
53:fc:8a:07:58:50:63:6a:fe:6b:e6:a4:11:3a:58:
36:20:3f:35:89:44:1b:2a:42:1b:c7:e3:33:5e:e6:
63:0a:86:21:ff:3b:bd:51:9c:28:fa:ba:01:9d:87:
1e:0f:9c:e0:93:a2:0e:92:4a:11:95:d8:66:0c:15:
ae:80:17:ce:21:13:a8:71:87:5a:41:e7:04:89:28:
d2:19:d4:ef:2a:e9:f7:c8:e7:a8:87:79:58:75:51:
1c:75:2b:58:ee:e0:7f:3e:8d:64:17:f3:26:d6:b7:
40:ae:f6:fc:31:9f:d9:b3:ab:93:4d:82:6c:c6:43:
d9:c9:90:a1:9c:eb:d9:ca:88:a0:87:93:2b:b4:e1:
b3:b1:2b:95:63:19:58:d2:65:1b:be:1b:6d:b8:9d:
15:99:b2:90:8e:4a:9d:66:7f:e3:9c:ca:0f:61:18:
28:68:22:01:7f:f5:83:49:29:cb:92:da:0e:bb:be:
3e:16:81:f4:3b:c0:fd:9b:93:8e:80:d2:ac:a9:e2:
bf:47:29:d6:e4:c1:95:f4:22:3e:3a:59:6f:fa:42:
11:95:92:e9:6b:6a:ce:c7:ef:3e:cb:a4:f7:2f:dd:
2e:66:f6:f8:70:12:c1:ab:c1:dd:ed:99:14:6a:0a:
94:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EE:9A:4E:6B:05:CE:E5:E8:38:07:7D:52:32:F4:5B:DA:C5:35:CC
X509v3 Authority Key Identifier:
keyid:4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:7f:20:2d:73:0d:e4:65:a2:d8:0e:84:76:74:ce:76:02:c8:
9c:a7:e8:3e:99:bf:a2:fc:eb:f7:39:de:d0:b3:04:fe:df:dd:
17:ae:9e:3a:27:ef:df:9a:33:cb:b9:67:c5:63:35:c4:dd:25:
f2:da:9e:48:64:53:45:98:a5:d6:ef:fa:11:fa:0f:cc:7b:70:
b9:e7:cc:82:dd:44:d7:90:99:30:a2:47:6e:44:c1:47:a0:2f:
86:1b:94:8b:ca:06:60:47:e2:fd:c3:30:b5:bd:55:0a:a4:24:
4c:40:0f:ad:b1:00:7e:11:f0:35:b0:2f:40:93:e7:1e:b9:7f:
20:6b:eb:ab:24:5e:ec:cb:fc:39:8a:7c:cb:3a:8b:b6:88:83:
38:d9:17:8a:e4:41:b6:a3:08:98:41:46:60:01:d8:ee:80:94:
3e:b5:88:24:25:f1:fc:ac:82:c8:b8:8a:60:6f:92:db:d9:c1:
74:f5:54:ff:7e:cc:29:06:c1:52:8c:d0:aa:f6:66:ec:24:c3:
ba:72:46:f2:ed:35:c8:6e:c1:c4:01:84:60:a0:6c:fe:ee:9b:
79:1c:00:6f:f8:53:1f:63:57:82:95:a6:2a:c0:56:8b:88:08:
72:c5:38:c3:06:54:1e:b9:bd:31:fe:9c:37:dc:c6:ec:84:89:
19:0d:74:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:31:06 2026 by rpki-client