
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
File: TC5icWMgr9SgFwBna-i_kmT0XkI.mft (raw, json)
Hash identifier: S47bHUlm37kirjkqcWcNbKv6T0PsxwpfYq+NoZcEBcE=
Subject key identifier: 2F:90:54:B0:AE:CF:57:9A:ED:86:DD:5F:6B:E4:4A:A5:2C:88:C0:B5
Authority key identifier: 4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42
Certificate issuer: /CN=A91A10E4/serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42
Certificate serial: 190E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
Manifest number: 18F6
Signing time: Tue 22 Sep 2026 16:23:31 +0000
Manifest this update: Tue 22 Sep 2026 16:23:31 +0000
Manifest next update: Tue 29 Sep 2026 16:23:31 +0000
Files and hashes: 1: TC5icWMgr9SgFwBna-i_kmT0XkI.crl (hash: TYSWJCZPa+HFA/XH/Eb0uYWscKe9eLDH5tGeRCR/qNo=)
2: 221560BEAF3711E98F7FF448C4F9AE02.roa (hash: TAF/4rrr92fj80k4rXF09UZ7GAsTjO+mKvPw6lKrblE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl
rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:23:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6414 (0x190e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A10E4, serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42
Validity
Not Before: Sep 22 16:23:31 2026 GMT
Not After : Sep 29 16:23:31 2026 GMT
Subject: CN=6ab2ab83-8532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:91:be:d7:24:f8:a8:8c:1a:53:33:39:7d:50:
c0:76:d9:64:43:04:dd:20:69:f9:6a:73:19:9a:ea:
37:91:9e:bf:45:5b:5e:16:65:57:98:d8:00:67:a8:
b3:79:cf:fb:4e:15:40:d2:ca:31:2c:ef:fe:e7:e8:
a5:e2:74:e9:dc:4b:eb:4f:97:f9:dd:0c:8d:6f:1b:
6f:4f:35:04:1b:d1:ba:43:1e:4c:94:a5:ba:9d:70:
9f:08:86:55:b3:b5:75:0e:46:91:49:5e:86:fc:bb:
94:30:b5:d4:29:bd:69:58:ab:e4:9f:ca:2b:d1:f3:
ee:46:87:a4:9a:fd:55:81:10:56:e4:8e:25:70:e2:
1b:ce:fa:bf:74:3d:e2:a1:4c:85:a2:95:fc:8b:00:
9d:64:7a:f4:0b:b1:8a:b7:8b:c8:b0:34:11:ab:eb:
3c:13:7e:e3:14:6a:a1:f6:2e:ad:66:4b:b0:79:71:
06:f8:66:a4:ae:c0:59:93:46:d5:46:1b:8c:33:a5:
3c:b9:0a:c7:1f:e5:3e:7d:e1:82:23:10:c2:38:92:
93:67:0d:7e:3d:36:e3:5f:96:32:42:6c:94:cc:5c:
90:4f:6a:9a:82:9d:39:53:8c:a7:9e:6f:8a:64:04:
fa:02:e6:6b:e8:44:39:35:2b:a1:cb:79:c6:2c:af:
75:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:90:54:B0:AE:CF:57:9A:ED:86:DD:5F:6B:E4:4A:A5:2C:88:C0:B5
X509v3 Authority Key Identifier:
keyid:4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:89:b6:2a:2f:c8:da:4d:b7:f1:90:0b:94:b5:87:bd:27:95:
34:cf:51:33:c4:32:04:8d:37:a0:77:9d:93:cc:5f:1b:18:d0:
40:82:0d:15:fc:9d:f2:49:14:1b:9e:97:48:bd:6a:6b:f7:0b:
28:76:cc:09:08:db:77:4f:66:ef:93:f2:7d:82:31:a1:9b:df:
9d:a5:ba:5f:a0:73:8d:31:a3:0b:a6:c7:1d:85:a6:1c:ba:83:
28:10:6f:3e:9c:51:2d:44:be:5a:45:8d:1e:1b:51:f6:c6:8c:
09:63:d4:02:a7:56:c9:fa:db:15:f8:96:c9:24:00:a7:ff:0d:
62:72:b3:57:dc:a0:6c:2a:39:83:0e:20:2d:aa:6b:b3:4d:18:
ed:d5:c3:4a:04:e3:0c:fa:a9:5a:01:8c:46:ea:a4:42:3c:6d:
08:2e:cf:25:32:18:08:7c:00:36:bc:00:85:a1:de:af:a2:45:
b3:78:de:09:5d:4e:f5:aa:9f:d9:97:36:4d:34:65:a3:6d:5c:
b4:bf:78:d4:2d:ec:b2:d7:b1:c5:a4:f1:63:fa:de:e4:81:8a:
e8:f2:42:a3:45:b0:27:8b:4c:bc:4f:20:a8:94:42:11:69:db:
fb:4f:d7:b7:bf:a5:f7:49:aa:3d:d2:ae:8c:4d:92:6e:e6:7a:
4a:cc:95:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:45:44 2026 by rpki-client