
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
File: TT_EcGT06hvcqym55lsx103iZOA.mft (raw, json)
Hash identifier: uPXymW5txa5nJA1pAT40NgUtfY3/8TDtk0BbxOeqtL8=
Subject key identifier: BE:CA:1A:C4:34:49:9A:68:61:06:62:F4:0D:BA:FE:32:57:20:73:21
Authority key identifier: 4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
Certificate issuer: /CN=A91AFAAC/serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Certificate serial: ED
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
Manifest number: E3
Signing time: Mon 27 Jul 2026 08:40:21 +0000
Manifest this update: Mon 27 Jul 2026 08:40:21 +0000
Manifest next update: Mon 03 Aug 2026 08:40:21 +0000
Files and hashes: 1: TT_EcGT06hvcqym55lsx103iZOA.crl (hash: X02GUOYDr4G02fZ8Jjm8yxRNq9fOhsxYgbxzCsGYZZE=)
2: 40F5D9E6354B11F0A873F14DC4F9AE02.roa (hash: A51WAFZICOqaHWPYKHK1gS3hIBrXwfplrOAwkWglh6M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl
rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:40:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFAAC, serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Validity
Not Before: Jul 27 08:40:21 2026 GMT
Not After : Aug 3 08:40:21 2026 GMT
Subject: CN=6a671975-ea8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:43:1e:36:61:13:fa:89:1e:13:8c:a6:d4:
f3:41:f1:e7:c4:6e:06:42:91:6b:3d:fd:80:54:c7:
fd:cb:fc:e8:ef:a7:14:a7:76:c2:7b:f3:d9:9e:63:
ac:60:b8:bd:df:41:20:97:27:e5:3c:67:cb:b3:80:
44:38:4e:7c:8c:e0:b7:d9:0f:66:e4:16:e1:a2:26:
d9:9d:eb:40:b8:22:02:f2:21:83:60:e9:ec:38:76:
a3:9f:d8:f4:78:86:10:81:31:6a:9f:87:ca:ab:f2:
fd:11:9b:09:eb:69:83:e6:95:5e:0e:99:b0:0c:5f:
27:b8:c9:fa:ea:67:a3:3e:d0:74:83:f3:13:eb:85:
05:a9:97:82:b9:a6:90:81:36:4d:f5:e7:44:df:74:
1b:a6:f3:48:7a:49:08:50:68:b3:ba:c6:be:b1:e9:
08:47:94:f6:10:f4:57:83:38:59:d8:13:d8:af:79:
e9:12:2d:0f:b9:c6:cf:90:c4:62:6f:8c:3e:e6:f0:
d1:02:4b:79:cf:63:be:ef:bc:ae:23:3a:cf:9f:a7:
51:9a:ba:f7:60:28:3f:64:8f:f0:13:e5:f5:06:28:
6b:3f:62:f9:47:97:d8:00:7b:3c:b5:15:d4:28:1d:
6e:fc:de:bb:24:b8:25:73:9c:aa:b4:cb:e9:8f:ef:
7d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CA:1A:C4:34:49:9A:68:61:06:62:F4:0D:BA:FE:32:57:20:73:21
X509v3 Authority Key Identifier:
keyid:4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:26:ac:b7:a5:50:f1:cd:fa:91:30:ec:64:05:ca:9a:93:60:
62:76:d5:4e:59:3d:f4:c0:8a:cd:db:85:78:b3:6d:63:1b:7e:
fc:d8:52:a2:78:b1:4e:06:b5:05:2a:38:cb:78:df:52:1b:c9:
dd:3f:55:e5:93:c6:94:51:c5:78:67:b9:f1:a2:10:d3:8a:b8:
91:20:50:cc:22:9a:16:6c:15:5a:61:4d:dc:75:63:d4:04:50:
1b:2b:9e:96:09:f6:dd:e1:17:45:35:c3:1a:f8:80:96:b3:43:
e3:b6:bf:23:9a:18:a5:52:c4:06:d0:9f:b9:e7:5b:79:18:1b:
09:28:77:22:62:2e:95:7c:ae:f4:00:29:7c:96:74:b1:a3:2c:
ae:9e:d8:f7:5f:c0:68:0f:58:66:7d:03:fe:da:75:aa:b4:ae:
10:83:54:c2:85:3e:c5:d0:ab:b0:c3:d7:a5:94:8a:7d:2b:82:
6b:59:d7:73:de:85:f5:2d:38:b9:39:bf:34:90:63:31:31:d6:
7b:5e:de:2f:38:4f:cb:f0:61:81:28:dd:4c:52:8e:b3:52:c0:
2f:55:a6:07:63:88:2c:7e:db:c7:ff:7e:08:e7:a7:53:7e:e6:
ab:e7:04:0a:d1:c9:9d:d0:30:d3:e1:24:7f:4a:af:9e:47:10:
34:49:61:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:23 2026 by rpki-client