
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
File: tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft (raw, json)
Hash identifier: zmJCuxPQmGWzVQvCDFTrcCQiKifmQKEHfLQO6GdfCtA=
Subject key identifier: A3:2D:81:B4:66:41:A8:B9:42:E8:F6:ED:15:C3:60:25:2C:48:BC:9C
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Certificate issuer: /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial: 020E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
Manifest number: 01F4
Signing time: Mon 21 Sep 2026 03:37:55 +0000
Manifest this update: Mon 21 Sep 2026 03:37:54 +0000
Manifest next update: Mon 28 Sep 2026 03:37:54 +0000
Files and hashes: 1: tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl (hash: FiK3zKHZud3ZUlIBurgwXdk4uUy26i7oe4NcwBY4GyI=)
2: 6D85335A58BC11F0983EE987C4F9AE02.roa (hash: bdKA7kvKI2THYNjeyi3Lbacr6XK2z8rAQaWiwHnpqT8=)
3: A6AB9D38335211F1960FCBDEC6833773.roa (hash: eXxCFDfnDfAFb+VxnPASq3AvIfkbg/uecOo6gz8yP10=)
4: 657EDAC0003D11F187167F2F4B6F56BC.roa (hash: 4QNpZ4lYAWDyFPtVqSrnEIjMO2wek++7TF/91yII7Vs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526 (0x20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Validity
Not Before: Sep 21 03:37:54 2026 GMT
Not After : Sep 28 03:37:54 2026 GMT
Subject: CN=6ab0a693-0f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:71:81:22:24:cb:ab:61:08:b3:71:8f:08:
c6:ec:f8:db:49:db:2f:79:c8:84:41:b9:5c:08:17:
77:a8:7d:17:96:d4:68:2a:ba:4b:4a:a1:86:72:21:
38:ee:a5:3f:8e:9d:a2:d4:91:8b:d9:e9:80:9a:93:
80:d8:41:9c:a1:d9:98:b9:77:20:61:27:75:10:d1:
79:e7:4b:8a:5e:60:46:12:1c:0c:08:81:90:34:7e:
86:06:d9:5f:86:a1:4d:6d:c2:d4:89:8a:04:70:e8:
90:2d:78:33:15:f6:5e:26:8e:06:d4:82:9b:ba:73:
84:8f:ee:96:58:83:a0:a3:ae:0b:5c:7d:2e:f4:c9:
f8:4a:d1:5f:44:c9:96:70:46:05:de:8e:96:ef:e4:
d7:8b:68:cf:fc:33:17:fa:b8:11:c5:66:fe:12:ca:
c7:05:7f:05:78:30:c3:8c:34:ca:3b:27:a7:ed:89:
98:62:c0:92:2f:04:7c:60:5e:f4:c1:ea:05:c0:d3:
cc:7c:7a:7b:89:71:85:ca:30:4c:32:3a:65:6d:0f:
a9:53:41:92:c1:c4:c7:76:ac:d8:c5:61:d1:93:89:
1e:72:42:f9:48:4f:36:da:f0:1a:27:09:1e:f9:34:
9b:73:18:5b:d5:0e:1f:78:ad:28:41:16:11:0f:9e:
39:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2D:81:B4:66:41:A8:B9:42:E8:F6:ED:15:C3:60:25:2C:48:BC:9C
X509v3 Authority Key Identifier:
keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:90:b3:96:67:4d:e4:37:f9:2e:5b:bb:fd:b3:ea:22:33:7b:
71:b9:9a:f1:77:b3:88:d7:b9:0a:8a:34:07:77:5f:05:8a:40:
e4:8b:fc:09:18:af:d7:3b:96:29:3e:34:e8:bd:06:3b:05:fa:
ae:ac:e8:1f:3a:1d:56:7d:c3:e7:96:c3:d6:e0:dd:f3:47:43:
52:7f:91:0c:25:1f:8f:c8:88:a9:ae:34:90:82:e2:8e:72:bc:
62:98:51:9d:85:17:9c:03:12:49:a3:05:3f:fd:c0:93:8d:43:
1f:14:5c:e6:ce:a5:53:a1:95:7c:1e:10:60:0f:63:37:df:10:
5c:dd:b3:18:d0:5b:e4:3d:63:5d:9d:e9:fb:c8:4d:d9:6c:a8:
79:a1:b3:b4:bb:3d:92:b3:6b:f8:d1:18:59:76:eb:44:50:70:
e4:cb:ba:84:79:ce:a1:ff:05:d0:13:7d:13:10:bb:02:f6:1a:
5a:cd:bb:74:ad:96:c9:f6:21:00:0f:39:a6:8e:70:d6:2f:c6:
6d:4c:80:96:af:ca:ef:ed:9b:e2:be:67:a4:cf:9c:f1:6c:78:
7b:0a:22:07:d7:db:e2:ae:5f:5f:7d:c3:f7:6c:92:86:e0:6a:
3c:a1:09:a1:f7:b0:87:7c:d8:16:6b:4e:1b:dd:7d:d9:b1:b6:
ae:5e:68:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:13:23 2026 by rpki-client