
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
File: tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json)
Hash identifier: KG/MXAlQE46um5Yx24u3Whxf28Km0zzLBSLUk9GcYRY=
Subject key identifier: 08:53:70:C0:B1:A3:CB:12:AD:CD:88:16:71:C3:1E:CB:A3:7D:A5:15
Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
Certificate issuer: /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
Manifest number: 015D
Signing time: Sun 01 Mar 2026 06:02:14 +0000
Manifest this update: Sun 01 Mar 2026 06:02:14 +0000
Manifest next update: Sun 08 Mar 2026 06:02:14 +0000
Files and hashes: 1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: 41PT2AyGYmz41GsMTs/mY9Svi1ABCradP+Idhr/gHmY=)
2: C27BAE1E63B411EF9A87155DC4F9AE02.roa (hash: SSYQhoePXSEZdBWsz2dSUFdjtoPBSwBZmvZLvzmRmE0=)
3: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: 81XCmtMAkz8d5MFKkbARa3r3fmwCBxTjGKLV+BXxDFc=)
4: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: P3/wZ7DQvbJJfKWvdajqCfHfPIC9vT8MvrKGyjWYukc=)
5: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: ZSCw86aRTNxpcp5h59Ua7FuiYhnQ7JZYo+fxXzI0qEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Validity
Not Before: Mar 1 06:02:14 2026 GMT
Not After : Mar 8 06:02:14 2026 GMT
Subject: CN=69a3d666-5b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:2f:fd:d6:96:e4:00:4a:b8:f7:74:67:b5:
50:08:20:34:29:de:ed:6c:ef:d3:f8:de:62:ef:10:
d5:b7:6d:0b:64:76:ed:19:cf:0f:64:9f:d7:7d:04:
35:33:e6:f4:2e:3d:a6:5b:65:8e:50:dc:06:d1:18:
56:3e:ea:62:8e:cd:88:4f:6f:72:f3:bd:9b:be:ed:
c1:1a:89:8f:66:c3:26:6d:f6:48:c0:b4:e9:38:95:
0b:86:ab:c6:6d:ae:cc:45:22:5c:b4:28:a2:9d:34:
3f:23:07:f1:1d:80:a1:e7:68:dc:de:b1:a8:c5:4e:
1e:7b:b4:da:a8:1f:1d:55:f5:b9:a7:e1:7f:29:77:
e9:08:ee:33:f5:ad:35:f3:8f:a6:2b:10:4a:f2:52:
9c:4d:4f:00:7c:5c:a7:96:bc:25:2c:15:95:d2:9e:
23:e5:ab:81:e3:56:0f:dd:ef:b5:22:4a:54:73:95:
9f:61:9b:fb:b3:20:98:63:6e:ba:e2:d7:d2:4e:4e:
b6:87:b1:a6:44:fc:48:20:af:b4:1f:ed:c4:33:64:
17:34:9b:1b:6f:77:fc:9f:85:ca:57:64:1d:1f:27:
0e:fa:df:3b:42:0c:6e:2d:46:e2:83:45:bf:18:b7:
ef:2f:01:40:c3:36:82:3f:89:05:98:0e:5a:0a:27:
5a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:53:70:C0:B1:A3:CB:12:AD:CD:88:16:71:C3:1E:CB:A3:7D:A5:15
X509v3 Authority Key Identifier:
keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:79:9a:c0:36:3f:c1:4f:0a:16:80:27:f9:1a:ac:b1:72:c5:
1c:7c:d8:19:90:fa:fe:e4:4d:12:8b:55:b3:a1:c0:bd:2b:e1:
97:5d:c1:8d:cb:2d:c0:c1:75:95:ea:e7:e5:3d:ec:eb:e4:bb:
7e:d7:6a:5e:cf:ae:d9:23:49:e8:01:bc:51:9c:34:76:db:0c:
8e:3d:9a:23:4b:df:4a:90:75:9c:75:74:a8:ae:7d:28:c3:fe:
d4:fe:fe:b9:bb:67:cf:83:d9:34:3d:a2:ac:cf:39:8d:98:b3:
26:45:91:6e:88:3e:44:85:c1:06:32:ac:0f:fe:2c:1f:03:84:
b1:2c:10:5c:c2:7f:2c:ff:0b:98:9e:f6:3f:f3:84:81:d8:55:
ce:cf:b1:78:b5:1e:94:cf:c3:6a:8d:da:98:d2:d4:54:64:f2:
ea:b3:5f:4f:e2:0f:ee:fc:61:1e:fb:3a:39:d2:e6:40:cc:f0:
e4:fe:45:0a:82:ff:f4:d9:17:15:6e:22:b0:6d:7b:b2:35:23:
31:ad:cf:0c:20:a4:e2:96:0a:fa:b8:08:bb:70:d0:77:98:42:
ba:4b:d7:7f:f7:d6:7c:df:a9:e4:41:05:2e:6a:fa:ce:ff:b1:
49:a7:6d:dc:bf:69:d8:b4:b4:22:71:43:c3:28:0b:13:23:a7:
36:3f:33:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:49:17 2026 by rpki-client