
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
File: TeFRsMiiGEElxljjJzHNoaojRwA.mft (raw, json)
Hash identifier: zao2e5kwIQhy2QUgIcJVIRWDOqeO0s3eEB7HnHotJGE=
Subject key identifier: 3C:C4:8B:B1:C1:0A:61:02:D4:A1:23:6C:50:5A:02:FB:BD:49:60:14
Authority key identifier: 4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00
Certificate issuer: /CN=A91AE9FF/serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
Certificate serial: 044F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
Manifest number: 043F
Signing time: Sun 01 Mar 2026 01:02:48 +0000
Manifest this update: Sun 01 Mar 2026 01:02:47 +0000
Manifest next update: Sun 08 Mar 2026 01:02:47 +0000
Files and hashes: 1: TeFRsMiiGEElxljjJzHNoaojRwA.crl (hash: 8R7F7h2jHJbODt3NCyafFwkODv3saadqpJXQSO5tviM=)
2: 4FED5C22A1C311EC960A4D2BC4F9AE02.roa (hash: o/h9t6dto3RR9iUYCBWuwk5m/sVDjVA7sDNry2jRXMM=)
3: 50A8AF54A1C311EC960A4D2BC4F9AE02.roa (hash: 2KtkkHGjYM6B4NJArJW7J81dwWOAgC3BbrS1q16b7zA=)
4: E7AA9622DAFF11ECA67DA10BC4F9AE02.roa (hash: 23pzBzVb/LUnDvjs9zEX9C14poyur9Xh61CsW7xpwuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl
rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1103 (0x44f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE9FF, serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
Validity
Not Before: Mar 1 01:02:47 2026 GMT
Not After : Mar 8 01:02:47 2026 GMT
Subject: CN=69a39038-d4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:37:5b:41:67:91:26:70:48:34:57:73:e1:
ce:fb:85:62:cc:04:a0:6c:ff:6a:35:de:3b:46:88:
aa:8a:64:09:02:9c:74:5f:78:6a:52:4f:69:07:d9:
dd:0b:6e:31:36:01:7c:a5:0a:6d:06:9e:63:36:81:
ee:4c:12:d1:aa:fa:cb:f1:0a:aa:02:b0:6c:1e:b9:
1d:51:46:ef:50:81:74:8b:9c:29:16:b2:0a:12:9f:
e8:d9:49:5a:c8:29:ae:e7:0f:c7:dc:ee:8d:11:83:
35:14:b5:7b:b5:b0:a5:63:ee:8c:d2:f8:5a:56:c6:
a9:4c:db:c7:48:ef:d3:73:6b:26:f2:71:f7:12:5b:
4f:a5:40:52:7f:c6:c1:11:d0:68:94:d9:79:09:0a:
e5:ac:b4:2b:b4:d6:73:62:a1:5a:c5:9c:2e:a6:8a:
f7:09:bb:bb:c6:5f:83:08:27:9d:04:6f:e2:cb:b4:
2f:f1:d7:c6:e7:35:a9:21:cf:ab:ef:7c:94:99:be:
1f:4b:4c:33:a6:e1:67:02:a8:20:9c:cd:de:28:0b:
cf:a1:b5:26:01:5c:18:0b:3f:7e:1b:7d:88:5b:2f:
e6:a1:18:d6:d4:75:cf:69:1a:5a:8f:8f:2f:20:fe:
4e:85:07:df:00:c1:8d:41:55:35:8d:51:b8:70:35:
57:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C4:8B:B1:C1:0A:61:02:D4:A1:23:6C:50:5A:02:FB:BD:49:60:14
X509v3 Authority Key Identifier:
keyid:4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ae:ff:5b:92:43:5a:0c:30:64:58:5b:4f:3d:49:24:c1:86:
35:7a:bd:88:a3:63:f0:20:e1:4b:3f:54:11:b0:36:a2:03:2e:
b3:81:50:1b:ff:f5:e6:05:5f:42:d7:5e:3d:1b:35:ca:80:6a:
bd:ca:ff:2c:78:0d:11:e1:da:d3:a9:d2:02:8e:25:7c:68:93:
35:fe:d1:e8:4e:c6:99:d8:d2:1e:60:05:df:1b:4d:79:56:23:
00:ac:3b:09:c9:e7:2c:1a:53:12:4f:77:84:6c:34:a2:72:4c:
aa:97:a3:e8:7e:d7:96:1a:57:92:5d:1d:95:ab:de:c2:dd:aa:
6a:f2:b8:1c:f0:40:8c:41:4a:a1:4d:06:30:01:0c:b7:99:22:
42:8d:40:ad:7d:0b:1c:0e:67:50:f1:de:1d:1f:c7:6c:6b:a4:
96:5b:2e:19:39:0b:53:5a:a6:a5:25:60:e9:6d:b2:2e:23:1d:
d2:e2:df:8a:d2:1e:f4:37:43:35:5c:b5:f1:81:5f:46:84:3c:
ad:7d:32:3f:4d:f6:80:be:87:59:b3:c1:1e:84:3c:09:bd:e6:
9d:b3:6e:2d:d9:2c:df:43:26:a4:a6:4d:ae:99:be:bb:ef:f2:
a7:f2:78:6f:45:3d:14:23:35:d6:e5:51:01:e2:3c:ae:41:f5:
8a:a4:94:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUU5RkYxMTAvBgNVBAUTKDRERTE1MUIwQzhBMjE4NDEyNUM2NThFMzI3MzFDREEx
QUEyMzQ3MDAwHhcNMjYwMzAxMDEwMjQ3WhcNMjYwMzA4MDEwMjQ3WjAYMRYwFAYD
VQQDDA02OWEzOTAzOC1kNGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqYc3W0FnkSZwSDRXc+HO+4VizASgbP9qNd47RoiqimQJApx0X3hqUk9pB9nd
C24xNgF8pQptBp5jNoHuTBLRqvrL8QqqArBsHrkdUUbvUIF0i5wpFrIKEp/o2Ula
yCmu5w/H3O6NEYM1FLV7tbClY+6M0vhaVsapTNvHSO/Tc2sm8nH3EltPpUBSf8bB
EdBolNl5CQrlrLQrtNZzYqFaxZwupor3Cbu7xl+DCCedBG/iy7Qv8dfG5zWpIc+r
73yUmb4fS0wzpuFnAqggnM3eKAvPobUmAVwYCz9+G32IWy/moRjW1HXPaRpaj48v
IP5OhQffAMGNQVU1jVG4cDVX/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzEi7HB
CmEC1KEjbFBaAvu9SWAUMB8GA1UdIwQYMBaAFE3hUbDIohhBJcZY4ycxzaGqI0cA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGRi9EM0E1NDREMjk0
NUIxMUVDODI5NURCNDVDNEY5QUUwMi9UZUZSc01paUdFRWx4bGpqSnpITm9hb2pS
d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RlRlJzTWlpR0VFbHhsampKekhOb2FvalJ3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTlGRi9EM0E1NDREMjk0NUIxMUVDODI5NURCNDVDNEY5QUUwMi9UZUZSc01paUdF
RWx4bGpqSnpITm9hb2pSd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASq7/W5JDWgwwZFhbTz1JJMGGNXq9iKNj8CDhSz9UEbA2ogMus4FQG//15gVf
QtdePRs1yoBqvcr/LHgNEeHa06nSAo4lfGiTNf7R6E7GmdjSHmAF3xtNeVYjAKw7
CcnnLBpTEk93hGw0onJMqpej6H7XlhpXkl0dlavewt2qavK4HPBAjEFKoU0GMAEM
t5kiQo1ArX0LHA5nUPHeHR/HbGukllsuGTkLU1qmpSVg6W2yLiMd0uLfitIe9DdD
NVy18YFfRoQ8rX0yP032gL6HWbPBHoQ8Cb3mnbNuLdks30MmpKZNrpm+u+/yp/J4
b0U9FCM11uVRAeI8rkH1iqSU+g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:08:24 2026 by rpki-client