
$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft
File: t0ZCTjTomeFM0znQc7tfSRj9B4c.mft (raw, json)
Hash identifier: 94TrZH3KgRI+4aRsL83sMnKH7fwXXnyBySBHeCFJ1jA=
Subject key identifier: F6:45:38:7F:06:90:AF:4F:E9:CE:9B:9E:4B:65:46:4B:BF:3E:05:B3
Authority key identifier: B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87
Certificate issuer: /CN=A91820CC/serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787
Certificate serial: CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft
Manifest number: CA
Signing time: Sun 19 Apr 2026 06:29:31 +0000
Manifest this update: Sun 19 Apr 2026 06:29:30 +0000
Manifest next update: Sun 26 Apr 2026 06:29:30 +0000
Files and hashes: 1: t0ZCTjTomeFM0znQc7tfSRj9B4c.crl (hash: Zf0jwkGVrreESJW79zxtkAxPYYUGIrupu3RDBwSyfzU=)
2: 675707260BDA11F0A768300AC4F9AE02.roa (hash: K5U/ZtwlK0+IHjWajDokuRev7uLV18wkiHdAryVyPX8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl
rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91820CC, serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787
Validity
Not Before: Apr 19 06:29:30 2026 GMT
Not After : Apr 26 06:29:30 2026 GMT
Subject: CN=69e4764b-6b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c0:a0:a4:21:ce:c2:bb:c7:c1:54:c7:d4:67:
3a:41:6e:56:37:45:4f:0b:db:47:32:a9:33:33:5d:
6f:f1:e6:9a:f4:c2:5d:69:b2:bc:43:19:86:37:2d:
eb:21:01:43:11:60:4b:9f:8a:28:ca:fa:1d:dc:6a:
27:d1:6c:cf:c3:3e:8d:b4:55:02:40:87:c1:ad:e9:
77:57:f5:b0:c1:a5:54:3d:5e:05:0c:0c:49:25:70:
ec:62:38:d3:b1:c5:4f:2b:ca:b7:54:d3:e9:c6:30:
f8:a8:63:53:67:5b:cb:e4:73:ea:ce:bc:e4:09:c7:
f3:1b:7c:e5:03:f1:10:29:36:fa:bd:00:0b:c2:b3:
27:d1:f8:a0:7e:bb:2e:23:19:9a:8a:a2:59:ad:0e:
b6:9a:70:72:2e:11:15:54:54:55:59:54:ec:66:0b:
bd:1f:ba:1a:43:f9:91:6d:16:3f:28:bb:0a:78:73:
db:09:5d:49:7f:5c:2e:32:4c:d5:9d:8f:65:2d:6b:
b8:f6:f5:36:d5:e0:87:e8:a8:cb:82:af:11:17:48:
6b:81:e0:e7:6a:9f:6e:3e:09:15:b6:31:e4:d8:1a:
5a:29:2e:a6:b5:45:f3:65:7d:c9:cf:d5:42:dd:3a:
de:2a:31:0b:ba:00:8c:ab:29:f3:f0:6d:7a:fc:f4:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:45:38:7F:06:90:AF:4F:E9:CE:9B:9E:4B:65:46:4B:BF:3E:05:B3
X509v3 Authority Key Identifier:
keyid:B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:46:50:21:7d:58:cc:c8:fc:2c:aa:00:92:80:0b:58:2c:7f:
61:06:7e:a8:98:4a:c1:d2:83:ad:a6:54:96:7b:63:99:1a:d0:
a0:18:27:01:48:e7:59:d0:cb:8a:5a:6a:4a:d2:70:05:d1:b5:
c4:8a:57:e3:dd:33:14:73:91:43:9a:33:1a:a9:5b:f9:31:8d:
d9:16:b0:eb:a3:d3:fd:fc:4b:0d:9f:05:9f:ec:1c:b1:24:d6:
27:82:3d:70:00:24:b3:b5:fe:94:b6:a8:29:58:8b:7a:9c:4f:
83:df:95:c3:7a:b7:1e:ca:e7:30:f6:dc:3d:17:f3:3e:59:79:
09:e1:05:dc:57:37:84:2f:37:23:76:1b:b7:60:ca:ce:2a:4a:
3e:43:95:23:17:a9:1e:c4:35:05:06:57:a7:02:5c:1d:af:f2:
5c:9b:cc:79:3a:56:cc:52:35:d2:5e:c9:de:c8:98:ac:d6:fb:
82:06:a2:53:f7:85:29:3b:48:7e:e2:a7:d4:90:44:58:64:46:
09:a2:d1:2b:68:33:c9:c6:dc:d8:8a:ea:e2:df:f6:63:37:0b:
de:b3:ca:09:b8:62:19:31:70:e1:05:d2:7c:77:84:2c:5f:68:
e9:b3:e7:8a:90:a8:8e:4e:b1:15:1e:9d:71:e8:a5:fc:30:3c:
85:12:51:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:22 2026 by rpki-client