
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
File: TbOy41mbZG6fMK90pYxmePrx0rc.mft (raw, json)
Hash identifier: 3VrYtAFXP9950hMZo7JBUpAvhuWLqa+8xB89Tt7hIdQ=
Subject key identifier: CD:4E:FD:63:6C:F8:EB:1C:D4:E0:68:41:5F:96:71:4E:EF:60:4A:15
Authority key identifier: 4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7
Certificate issuer: /CN=A91698EC/serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7
Certificate serial: 01CA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
Manifest number: 01BF
Signing time: Fri 25 Sep 2026 04:01:53 +0000
Manifest this update: Fri 25 Sep 2026 04:01:52 +0000
Manifest next update: Fri 02 Oct 2026 04:01:52 +0000
Files and hashes: 1: TbOy41mbZG6fMK90pYxmePrx0rc.crl (hash: 6mA6gAStyDcGdkbAu0XxPD1a+UPuS074Iwa1R5fBE/8=)
2: F2A90F6A86AE11EF999DAD2FC4F9AE02.roa (hash: ldVTUduJM4awD22oX4Wh1DDTuXz753kcX+6QqQWssrU=)
3: 206DB948214F11EFAB245D49C4F9AE02.roa (hash: lrxbuGY2PK1BQs//qiBiMMewL0JNYkGU90gNllT/uBc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl
rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458 (0x1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91698EC, serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7
Validity
Not Before: Sep 25 04:01:52 2026 GMT
Not After : Oct 2 04:01:52 2026 GMT
Subject: CN=6ab5f230-8c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:b5:3f:99:79:fd:fc:2b:ed:e0:49:13:c9:
a5:29:86:6c:82:d9:19:dd:5f:18:a4:f7:25:0c:a6:
97:4e:02:1a:7c:3e:ea:a4:e6:02:a6:8d:8f:56:84:
e8:20:1a:09:e8:b3:a1:ce:ad:40:eb:d1:f5:57:81:
e1:c1:f3:0b:74:96:70:85:7d:b8:8c:52:69:94:63:
a1:f5:c9:e1:7a:db:37:46:66:fd:68:9c:04:9b:56:
cc:2a:5a:0f:a6:3a:4d:cd:da:98:7c:4a:12:86:38:
0a:7a:c0:ba:b4:05:a2:f0:07:0e:cc:cb:61:fc:a0:
ed:21:43:78:27:a6:78:7a:1e:7a:c4:60:4b:ba:c6:
7b:0b:4e:bf:e2:15:8f:5c:37:6d:14:83:48:ad:04:
f4:d8:47:e1:68:da:2e:aa:1c:7f:01:dd:26:44:e7:
89:eb:0f:34:b4:19:32:d8:02:96:63:57:8a:9b:8a:
9b:5c:75:99:f7:4e:0c:4a:5a:f0:74:4a:1c:f0:53:
3d:ae:47:07:b4:93:59:93:bb:e7:e5:25:01:76:1e:
f8:bb:4c:94:c8:b6:1e:27:49:57:7c:e8:cb:88:fe:
83:34:ec:b5:ad:0a:65:99:be:59:6f:b5:16:8d:ed:
87:ac:40:c6:02:55:28:e9:4c:52:f1:24:98:1f:0d:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4E:FD:63:6C:F8:EB:1C:D4:E0:68:41:5F:96:71:4E:EF:60:4A:15
X509v3 Authority Key Identifier:
keyid:4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:5f:9c:5f:ba:9d:0f:cd:0b:87:65:e9:e2:a3:cf:74:2a:7d:
a1:f0:10:3b:da:32:0b:9f:51:5f:79:b8:e3:f2:5a:0d:0c:23:
11:00:d3:c3:57:66:2b:e5:96:51:62:8a:af:55:a6:9b:0e:48:
4c:1a:01:6d:8a:84:dd:1c:e1:a1:11:27:61:52:a0:b3:dd:d7:
84:a7:f1:35:16:6c:10:89:6d:1f:18:de:c1:1d:7c:45:6b:cd:
60:98:d7:32:8e:2b:0d:a8:0e:c1:5f:d8:97:3e:c2:2c:1b:0d:
a3:32:3d:60:56:d3:eb:6d:02:0d:59:e7:1b:6e:30:ae:64:a1:
7a:7b:b1:7f:4d:ac:ee:04:34:09:fa:55:ee:54:e6:17:14:5d:
e6:05:73:22:29:b3:21:a8:6c:4e:d5:29:4a:5a:54:d7:e5:9f:
f2:9a:d5:05:65:cc:b8:bd:96:df:2c:ad:9d:c7:3b:56:f0:59:
88:d5:ad:28:2e:34:6b:ad:1a:3e:27:7a:2b:36:df:69:75:07:
97:46:7c:d2:8f:71:21:ba:33:c1:0a:41:62:4a:81:fe:e5:c3:
15:6c:d3:f6:e7:c1:d7:b5:e6:fc:0b:d8:94:92:49:ea:9e:8d:
a8:d5:b8:db:ab:db:12:2f:ce:be:5f:37:c5:c4:c6:b3:ba:04:
99:27:b3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:34:30 2026 by rpki-client