
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
File: TC5icWMgr9SgFwBna-i_kmT0XkI.mft (raw, json)
Hash identifier: us9Y7MB62On6jvoRU0jRT8RbqeqHeSq3NJ6Z2USIS/I=
Subject key identifier: 48:67:8A:AA:6E:1A:6F:3D:67:33:B2:6B:FE:A5:A0:33:FC:64:43:1A
Authority key identifier: 4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42
Certificate issuer: /CN=A91A10E4/serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42
Certificate serial: 18BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
Manifest number: 18A6
Signing time: Sat 18 Apr 2026 16:24:04 +0000
Manifest this update: Sat 18 Apr 2026 16:24:03 +0000
Manifest next update: Sat 25 Apr 2026 16:24:03 +0000
Files and hashes: 1: TC5icWMgr9SgFwBna-i_kmT0XkI.crl (hash: uknBiDqyh0rn1wap0i+t8/BS5r4RnB7kaJZyAfgDYYY=)
2: 221560BEAF3711E98F7FF448C4F9AE02.roa (hash: TAF/4rrr92fj80k4rXF09UZ7GAsTjO+mKvPw6lKrblE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl
rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 16:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6334 (0x18be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A10E4, serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42
Validity
Not Before: Apr 18 16:24:03 2026 GMT
Not After : Apr 25 16:24:03 2026 GMT
Subject: CN=69e3b024-f0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e2:2d:cd:15:8f:a7:53:1d:87:81:c4:ce:de:
7d:1b:b9:a9:76:64:05:e6:e8:22:5f:8d:5a:0a:7c:
6d:10:35:f4:3b:72:69:fb:0c:40:4f:e4:67:19:b4:
b9:22:18:fe:92:b8:a8:07:45:72:82:da:9f:e9:01:
db:f6:93:12:86:9b:7d:45:6d:74:91:91:b2:bb:72:
e6:dc:6d:8e:d1:ae:a0:5e:db:7c:9d:12:e1:1a:a6:
e9:45:5b:a9:43:bb:05:a8:ba:e8:54:8d:f1:42:73:
29:f9:1e:99:5b:40:f4:06:50:45:b6:f5:d1:52:10:
dd:5c:f1:41:43:e3:9d:13:e3:8c:a5:82:3d:11:f9:
eb:94:58:5d:96:01:9b:e3:70:3a:50:b0:05:53:23:
a3:b7:42:4f:01:d1:5e:32:6b:50:cd:9c:ba:5d:4b:
be:78:72:f1:ea:e4:5e:f6:5d:3f:05:f7:8c:4d:c1:
15:f7:01:04:b8:df:5d:d5:c3:a1:d8:9b:f9:23:0d:
dc:2c:ef:21:a9:22:4f:24:c8:e7:8e:6b:67:db:ac:
17:96:01:f7:1c:86:d9:68:b3:ba:c5:1c:dc:91:b8:
3c:07:00:30:ec:84:73:87:20:d1:52:9d:7e:17:0a:
08:62:be:15:78:9b:6d:22:08:4e:77:8b:20:4d:96:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:67:8A:AA:6E:1A:6F:3D:67:33:B2:6B:FE:A5:A0:33:FC:64:43:1A
X509v3 Authority Key Identifier:
keyid:4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:bc:38:6b:2f:80:9b:1a:22:a1:d2:1e:f4:80:0f:23:33:f3:
5a:c0:2a:0c:84:55:32:30:08:0a:8e:5a:f2:3a:05:62:2f:e9:
c8:31:15:39:b0:85:fd:f8:ae:a9:b8:1a:4c:fa:d2:2e:1d:0a:
ae:31:f9:b4:39:77:09:9c:36:0a:0e:64:b8:66:6b:7b:ef:93:
34:4a:85:a9:29:29:e9:60:b6:2f:e8:70:7b:7d:b5:3a:d8:80:
1c:f3:f9:3f:07:46:e3:77:e8:ae:0d:51:68:c9:98:97:9d:36:
de:43:a6:27:51:55:f6:6c:e8:d1:b1:7d:f1:2a:79:79:40:23:
6c:33:e6:e1:7b:92:3c:4b:28:08:01:13:26:68:d8:f1:d4:01:
b3:ad:34:37:bb:1e:c5:a5:c1:c1:3b:a8:f9:77:7a:fa:c8:77:
6e:f2:15:0a:26:b2:1a:0b:f8:89:29:d2:99:1c:ae:1b:bd:d5:
33:f9:4a:f1:a2:ab:9d:6b:df:cf:3d:73:48:22:11:57:d5:f0:
25:3d:84:90:ef:fb:db:97:e8:37:2e:09:ad:d6:c3:5b:21:2d:
db:11:80:57:59:71:9e:00:dc:23:69:c8:ca:61:5d:16:20:81:
26:85:73:d4:60:f6:70:ab:2d:70:93:00:72:ab:f1:eb:ae:d9:
95:61:8c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:54 2026 by rpki-client