
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
File: TG4jrAOOQ4__sH5li6xvKCFTRPs.mft (raw, json)
Hash identifier: BH1eS5MAVf4WLMtGBQV3SE7/3kdkHc3F+WsGeslL3VU=
Subject key identifier: 56:DE:76:BE:AB:79:AD:31:19:53:9C:1C:01:89:C1:0E:FC:F4:5E:52
Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB
Certificate issuer: /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB
Certificate serial: 1071
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
Manifest number: 1065
Signing time: Sat 28 Feb 2026 17:29:40 +0000
Manifest this update: Sat 28 Feb 2026 17:29:40 +0000
Manifest next update: Sat 07 Mar 2026 17:29:40 +0000
Files and hashes: 1: TG4jrAOOQ4__sH5li6xvKCFTRPs.crl (hash: mJ8B0C2PNvpOnTpZmvCt7Y//QqM50ksu/fvLzoR8xlI=)
2: 159F22549D1B11ED96607C22C4F9AE02.roa (hash: ud9Bxa6I3Lg7uR5uUGw9rl68XdwSN3BQlbT+nAu1Wxo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl
rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4209 (0x1071)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A793A, serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB
Validity
Not Before: Feb 28 17:29:40 2026 GMT
Not After : Mar 7 17:29:40 2026 GMT
Subject: CN=69a32604-817d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:79:83:f9:f6:8e:ba:bc:e4:cd:17:9b:1a:6e:
87:4c:41:f1:3e:d9:fe:e0:5b:38:99:93:76:ae:82:
c2:6e:a7:d4:91:9f:cc:2b:55:be:2a:29:f2:eb:9d:
d1:c1:fc:79:11:5c:55:a5:fa:b6:bf:26:20:94:3b:
89:93:62:69:bf:f2:4b:01:c8:18:6a:05:6a:8c:3c:
e4:f3:a4:90:c2:10:3d:a8:46:fc:f6:a0:6c:71:de:
6d:43:8a:99:7e:c8:42:23:02:5c:ae:f0:6e:14:e4:
d1:60:2a:98:b0:50:cf:3a:62:56:44:93:a3:fc:0e:
cb:2f:aa:32:93:fa:7a:fb:38:62:28:02:41:d0:be:
17:be:73:ce:fb:89:ca:8a:03:31:d4:ae:eb:d4:f0:
37:29:6d:20:4f:ed:04:38:9e:f6:0a:d0:e0:6e:38:
c0:4e:3e:40:62:d2:98:e8:2e:e4:58:a8:bc:9a:3a:
02:40:1d:32:34:80:f7:a4:79:dc:4c:86:d7:bc:42:
82:41:24:b6:d0:e4:4f:47:aa:95:12:2d:45:df:4a:
01:60:36:fe:b0:91:aa:33:54:e7:98:b2:92:e2:21:
1c:c3:2a:f2:97:88:7d:ce:31:a1:c1:d9:75:b6:7b:
d4:00:a5:c2:dd:8d:ac:c5:8e:0c:37:ca:51:99:7f:
26:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DE:76:BE:AB:79:AD:31:19:53:9C:1C:01:89:C1:0E:FC:F4:5E:52
X509v3 Authority Key Identifier:
keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:a4:b0:20:ff:0e:cd:c6:74:a2:b4:c7:8b:8e:48:40:13:d5:
dc:1b:9e:31:dd:a8:9e:64:5d:0f:98:5e:c4:a1:bf:6e:3f:80:
bc:f4:a5:2b:f6:95:25:78:f9:fa:cb:ae:3a:95:40:09:c5:c8:
a0:33:e8:d8:9e:08:71:ac:47:86:b9:c7:5a:dc:78:c0:77:8f:
f1:47:f8:36:43:d7:44:f5:66:34:48:3c:88:06:a3:e6:7b:64:
7a:46:e9:a2:01:63:c2:6c:74:69:6c:6e:83:ea:fe:90:47:46:
4f:36:1d:eb:19:51:aa:d1:97:73:43:dc:ec:53:1f:89:d1:c2:
6a:80:c8:a7:52:19:b0:f0:8a:80:45:69:88:c8:ab:af:81:ce:
5f:17:df:bd:8d:06:77:3d:f0:d9:d4:a2:98:e3:50:a5:c4:c9:
38:fa:c0:ab:9d:63:a7:8e:69:b3:5f:3e:6c:68:13:e3:56:3c:
16:07:74:65:50:11:98:43:e6:76:a4:73:f5:69:3f:89:cf:92:
c8:b7:7b:eb:be:10:d6:57:e7:2b:e9:07:8c:89:df:35:14:4f:
05:a3:af:01:22:35:8a:e4:e9:61:55:34:f2:44:26:33:5d:d3:
a6:5d:55:11:7e:47:08:a1:8e:6f:42:9f:89:60:77:8f:a2:3d:
f2:a2:65:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:15 2026 by rpki-client