
$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
File: TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft (raw, json)
Hash identifier: 8eYEvqLSuzOWRYbtg8xh9a73FSuMeOoEDmdyM1z9OtY=
Subject key identifier: 35:FB:AA:3D:8D:42:F0:C5:C1:2E:53:AE:E3:09:55:07:39:55:A7:25
Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7
Certificate issuer: /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
Certificate serial: 049E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
Manifest number: 0490
Signing time: Mon 02 Mar 2026 03:08:41 +0000
Manifest this update: Mon 02 Mar 2026 03:08:40 +0000
Manifest next update: Mon 09 Mar 2026 03:08:40 +0000
Files and hashes: 1: TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl (hash: yhOMO2+AI8N5/hDjQYypBKN9mJirAS3JXQ0Uht8L6pw=)
2: E2348176D54D11EF8A899250C4F9AE02.roa (hash: 9llJReApVBmo5bvUcRrTyqYgxX0J7Rw+SzZuoT8YjSw=)
3: 75FC6CC2753711EC9091CB62C4F9AE02.roa (hash: UZnHMueWtrpb+JywnXsopY8oC5x4rGsb8m2Kk1OPC6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl
rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1182 (0x49e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
Validity
Not Before: Mar 2 03:08:40 2026 GMT
Not After : Mar 9 03:08:40 2026 GMT
Subject: CN=69a4ff39-4543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:09:d7:17:b0:18:d8:c2:47:8d:af:2d:a7:66:
aa:15:5b:7e:8b:be:92:53:1c:06:0b:a5:b7:49:77:
1d:49:f8:84:ad:99:9c:f1:5b:cd:e9:99:6a:ca:e9:
b1:6a:53:fd:af:13:71:d5:73:1f:5b:cf:54:6b:dc:
39:91:64:81:98:9b:5f:0b:60:df:5a:d1:42:06:ed:
57:be:11:5c:53:29:32:bc:5d:5e:14:d6:5a:cd:aa:
1c:ad:0d:66:29:1f:19:f7:11:da:19:41:30:61:45:
90:a9:8d:a1:c6:77:9e:af:74:9d:89:9a:a0:d7:cc:
af:1b:f1:7c:e5:b9:0a:9c:e9:cb:c0:41:aa:a8:6d:
11:63:30:7c:b0:45:31:bf:97:9f:d2:f0:7b:46:7e:
29:5a:45:87:4a:34:ae:57:9b:e3:18:24:a0:6b:0f:
55:94:8a:95:5d:85:7a:cc:13:f1:4b:22:f5:af:d8:
46:92:d2:76:a9:81:47:c0:d6:12:80:af:68:9d:fb:
1f:ea:8d:dd:61:34:13:7a:33:be:47:27:65:99:f6:
99:af:ab:61:c5:c3:eb:5d:6f:1e:e6:77:12:bc:a7:
47:5b:44:fd:09:28:36:5d:7d:c2:23:f0:75:36:1c:
b1:e8:11:41:87:45:58:af:80:f3:81:b7:f7:77:d2:
57:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FB:AA:3D:8D:42:F0:C5:C1:2E:53:AE:E3:09:55:07:39:55:A7:25
X509v3 Authority Key Identifier:
keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:00:6b:26:b8:7e:7b:50:09:8c:c4:a5:4d:a7:13:07:a4:44:
6e:14:ce:76:3c:1d:42:fd:6b:14:dc:50:96:e2:dd:2b:1e:29:
c0:37:41:d1:87:52:e9:db:bb:d2:21:59:6d:37:eb:ba:30:26:
af:c0:4f:9a:08:aa:fd:78:ad:23:99:9f:70:a1:2a:ee:d2:02:
1e:29:7d:19:0d:7a:7c:51:c3:b1:28:f0:ff:b7:98:a7:5a:16:
0d:19:69:1d:79:86:77:31:76:e0:83:9c:c8:91:4c:fd:10:68:
3b:d9:22:8d:a3:9b:e0:ee:26:c6:60:fc:a3:98:bb:c5:19:94:
2f:6a:79:e0:21:68:4f:43:d9:de:ac:88:b6:76:f2:17:7f:e9:
fe:17:b1:ba:8f:77:03:e6:1a:29:81:7b:14:be:25:b4:cd:c4:
87:40:b4:57:77:be:f0:3d:1b:7b:46:f5:73:18:70:15:6a:9a:
0d:b8:e9:8a:38:66:ff:4d:8b:8b:69:ad:29:82:71:7f:c6:cb:
aa:b0:42:08:5a:cf:9f:40:63:3e:4f:1f:57:c2:5e:88:55:a9:
2d:28:02:ea:1f:07:8b:0b:53:44:6e:7f:a0:3c:39:57:7e:91:
27:58:e4:d9:83:92:78:d3:76:fe:e1:23:0c:84:80:d4:d1:4b:
fe:f3:d6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:19:15 2026 by rpki-client