
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
File: tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json)
Hash identifier: WHLaWYt4h2dKYMpouPDcCdw/jdAL8L5W2bfB7is67Nk=
Subject key identifier: C1:4F:46:BF:08:14:92:36:DF:90:17:09:CD:D8:ED:CB:30:54:C1:A8
Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
Certificate issuer: /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Certificate serial: 01EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
Manifest number: 01CE
Signing time: Sat 03 Oct 2026 04:26:06 +0000
Manifest this update: Sat 03 Oct 2026 04:26:05 +0000
Manifest next update: Sat 10 Oct 2026 04:26:05 +0000
Files and hashes: 1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: 5jpORW0nO8MdikUD8yKGMrNxfsKc0CvQnJ5nYiI/2S8=)
2: C27BAE1E63B411EF9A87155DC4F9AE02.roa (hash: +2GaHe5cWbVmXD0EaHkbTYfFj1TTwinsmIfZx+qjcRc=)
3: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: vRQ6HdkSj/Wf7+vduG5A9cFn7YJoyEBj6p0aYIaPJ/w=)
4: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: SsVxQtDk/Oa1shqSFxMi2LpzccLXqJhR2Mhs5lXheR4=)
5: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: 5D/Ry/8ZP2E54WupdxSy/KsQmqjx8wwM6c9M/jH7pYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 04:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490 (0x1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Validity
Not Before: Oct 3 04:26:05 2026 GMT
Not After : Oct 10 04:26:05 2026 GMT
Subject: CN=6ac083de-1dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cd:ad:11:3d:56:d0:41:a7:e0:67:1d:98:e4:
b6:22:73:75:77:0e:3c:90:f3:75:97:13:bb:4e:88:
06:95:18:c6:db:86:7f:32:fa:13:ad:49:cb:42:e3:
96:c0:45:5d:92:3c:1e:c7:cf:ea:23:99:0b:69:33:
92:50:3e:61:2f:6e:2e:b0:15:07:17:9e:eb:87:33:
ac:02:75:d0:03:77:a4:ae:f6:bc:c8:c6:3f:a7:e5:
80:96:9d:cc:bb:2f:20:3e:ca:1d:d9:87:b4:33:71:
45:ed:1b:f1:4d:18:a2:94:f1:ce:dc:3f:84:15:cc:
17:f0:11:0c:98:bd:77:75:53:49:a6:f8:42:7e:34:
47:b6:af:ba:d4:d6:c3:db:8f:57:f1:33:f4:b5:3d:
54:f3:31:a6:b2:f0:75:c3:4e:fe:9d:d4:46:ba:7b:
3a:76:f9:19:ae:c9:94:4e:25:82:6a:49:5f:aa:56:
6a:78:80:73:53:57:c3:5f:da:23:2d:3b:30:0a:96:
9c:d6:b8:92:c5:63:8c:b9:e0:4c:19:41:60:ea:e2:
aa:dd:12:7a:52:ca:dd:73:c9:07:7f:ce:2b:0d:f7:
92:4c:26:41:b8:09:ee:ad:0f:a8:1e:5a:b0:d9:f2:
2c:0b:4d:61:96:4b:87:a5:6f:e8:bc:45:27:fc:ef:
e0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4F:46:BF:08:14:92:36:DF:90:17:09:CD:D8:ED:CB:30:54:C1:A8
X509v3 Authority Key Identifier:
keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:23:f6:c2:c9:ed:a7:66:11:be:da:37:d2:f9:b8:8a:1c:55:
3b:0f:ee:c2:e8:d4:40:be:af:20:3b:c2:9c:46:2b:15:73:ea:
23:f0:25:f6:64:2c:27:c4:46:2f:75:0b:00:33:27:c8:c5:1b:
97:ba:37:ce:ec:e3:71:e9:70:9c:0a:c1:30:9d:20:c6:55:58:
26:24:33:46:7f:9e:67:dd:f6:1a:1b:91:b2:d1:c7:ce:43:8f:
bd:bc:52:d6:32:d7:f5:7b:06:e1:8f:d7:20:91:0c:35:df:19:
06:32:8f:4e:94:54:ea:ee:c1:de:9e:64:64:05:c1:e5:40:4a:
e3:40:28:5b:ec:ae:a1:97:73:d1:16:38:a8:1c:c7:0c:82:ea:
ba:83:01:ff:3f:89:94:0b:75:fb:c3:11:15:5d:2b:77:a3:d4:
99:33:aa:44:95:30:11:f9:3a:a7:f6:c5:8f:94:d0:55:c2:10:
65:9d:97:aa:2a:4c:c0:5f:db:62:1d:e0:e9:30:5b:9a:48:be:
ee:b9:f1:87:6e:ac:e4:a3:a0:35:4a:fb:38:d8:3f:11:a9:3b:
97:50:73:c8:b8:be:7d:df:7a:e0:e3:01:45:3a:25:62:99:13:
a9:32:51:b5:9a:ed:dc:ad:44:a5:d2:fb:cd:64:63:9c:45:dd:
46:29:41:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNGNUQxMTAvBgNVBAUTKEI0MDgxODE1QzZCQUVEOThBMUNDOTUwQUM2RkExMEJD
NjAwNTg5MDIwHhcNMjYxMDAzMDQyNjA1WhcNMjYxMDEwMDQyNjA1WjAYMRYwFAYD
VQQDEw02YWMwODNkZS0xZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0c2tET1W0EGn4GcdmOS2InN1dw48kPN1lxO7TogGlRjG24Z/MvoTrUnLQuOW
wEVdkjwex8/qI5kLaTOSUD5hL24usBUHF57rhzOsAnXQA3ekrva8yMY/p+WAlp3M
uy8gPsod2Ye0M3FF7RvxTRiilPHO3D+EFcwX8BEMmL13dVNJpvhCfjRHtq+61NbD
249X8TP0tT1U8zGmsvB1w07+ndRGuns6dvkZrsmUTiWCaklfqlZqeIBzU1fDX9oj
LTswCpac1riSxWOMueBMGUFg6uKq3RJ6Usrdc8kHf84rDfeSTCZBuAnurQ+oHlqw
2fIsC01hlkuHpW/ovEUn/O/gHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMFPRr8I
FJI235AXCc3Y7cswVMGoMB8GA1UdIwQYMBaAFLQIGBXGuu2YocyVCsb6ELxgBYkC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Y1RC8xMEY5NEVGMDA2
QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjdaaWh6SlVLeHZvUXZHQUZp
UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RBZ1lGY2E2N1ppaHpKVUt4dm9RdkdBRmlRSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
M0Y1RC8xMEY5NEVGMDA2QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjda
aWh6SlVLeHZvUXZHQUZpUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADSP2wsntp2YRvto30vm4ihxVOw/uwujUQL6vIDvCnEYrFXPqI/Al9mQsJ8RG
L3ULADMnyMUbl7o3zuzjcelwnArBMJ0gxlVYJiQzRn+eZ932GhuRstHHzkOPvbxS
1jLX9XsG4Y/XIJEMNd8ZBjKPTpRU6u7B3p5kZAXB5UBK40AoW+yuoZdz0RY4qBzH
DILquoMB/z+JlAt1+8MRFV0rd6PUmTOqRJUwEfk6p/bFj5TQVcIQZZ2XqipMwF/b
Yh3g6TBbmki+7rnxh26s5KOgNUr7ONg/Eak7l1BzyLi+fd964OMBRTolYpkTqTJR
tZrt3K1EpdL7zWRjnEXdRilBIg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:29:12 2026 by rpki-client