
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
File: TT_EcGT06hvcqym55lsx103iZOA.mft (raw, json)
Hash identifier: XbhyT0WisenW219HEdWmplkgXx7lPbbZ2Sa64mLy2ZY=
Subject key identifier: 04:49:3A:E1:73:09:FF:71:3A:61:B6:16:56:5D:CF:FB:18:79:E2:A4
Authority key identifier: 4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
Certificate issuer: /CN=A91AFAAC/serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Certificate serial: D1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
Manifest number: C9
Signing time: Sat 13 Jun 2026 06:55:11 +0000
Manifest this update: Sat 13 Jun 2026 06:55:11 +0000
Manifest next update: Sat 20 Jun 2026 06:55:11 +0000
Files and hashes: 1: TT_EcGT06hvcqym55lsx103iZOA.crl (hash: TW7rwaxF75PiIbjdVLZbqdAjzGkIogI+700jxVnlQA0=)
2: 40F5D9E6354B11F0A873F14DC4F9AE02.roa (hash: stzvaQb1q0aBe4Ji0bjzDRZOM/zXcEzYJI+enj1Jq5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl
rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFAAC, serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Validity
Not Before: Jun 13 06:55:11 2026 GMT
Not After : Jun 20 06:55:11 2026 GMT
Subject: CN=6a2cfecf-3220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:08:7d:0e:20:b3:80:76:bb:d6:25:74:dd:
4e:0e:9c:61:85:a6:8b:0a:af:ff:6f:f4:b3:ba:82:
61:92:f7:f7:d6:d9:75:0c:7f:e6:af:45:91:1e:05:
7d:6d:65:2f:eb:00:1d:43:8f:d6:23:b0:19:4f:02:
66:94:c7:a2:26:90:e9:6d:b3:42:50:1d:c8:54:07:
29:16:cd:33:0b:dd:08:aa:34:fb:05:1f:08:9c:3c:
14:ca:9c:17:13:15:05:81:0e:ac:32:f7:04:04:8b:
1c:aa:27:2b:a7:68:71:a0:72:2c:e6:ee:4c:5a:7f:
fb:a8:37:c1:08:3e:ac:84:00:b4:ea:79:3d:b5:19:
26:ff:b8:b0:22:7b:ca:88:49:db:d8:d2:da:b1:7f:
61:96:70:42:c3:0c:97:88:83:ea:9b:fc:75:d5:81:
28:cb:e2:56:eb:fb:25:c6:20:1c:8f:b9:94:1d:39:
1b:9c:79:cf:1c:73:5c:78:02:2a:a8:d6:ba:c9:f2:
74:b6:48:10:5e:4e:e2:53:12:1f:5c:33:df:a9:7b:
9e:03:02:4a:11:a5:d8:e2:7a:c1:23:81:9b:48:bb:
48:c3:99:0b:aa:5e:9c:16:ee:75:30:f7:08:f6:b6:
6f:8f:c3:42:da:c2:82:d1:4b:cc:e8:b4:ab:f0:ed:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:49:3A:E1:73:09:FF:71:3A:61:B6:16:56:5D:CF:FB:18:79:E2:A4
X509v3 Authority Key Identifier:
keyid:4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a0:a2:20:38:19:2a:e4:e4:8e:91:6e:6f:0e:40:3c:52:92:
53:67:78:c9:ba:5f:75:24:d0:62:53:92:48:51:f8:ee:b6:ef:
2a:8a:ed:e7:a4:09:df:19:c1:b4:e2:ce:4f:04:bf:7c:f6:f8:
74:e4:18:7e:05:2c:7a:f1:98:99:04:70:a1:40:d4:d6:95:dc:
e7:ff:fb:5d:79:a7:5d:94:92:d4:07:8a:d5:df:97:57:99:f1:
56:3c:54:a5:54:85:e1:e6:dc:b7:83:ac:81:f2:e1:a6:6e:12:
05:f1:5e:06:06:c1:b9:cb:7a:04:ba:db:55:9b:8e:0c:d0:e8:
eb:d4:fc:f3:d7:03:ea:b8:b1:b1:73:5b:12:88:0d:70:96:4b:
61:e5:3e:e3:fa:10:da:5d:70:bf:b9:58:bc:86:09:7f:42:ea:
64:95:e9:61:ef:94:29:5e:9a:ff:08:bd:ee:cc:61:8f:66:2c:
88:6d:5a:bc:44:d8:9b:f6:30:30:ee:1b:19:e1:3e:14:c0:79:
d4:f6:59:a2:31:2a:0f:b2:c8:14:89:a8:1a:76:f6:43:5b:ec:
44:b8:08:46:77:f9:c2:b2:7f:09:30:da:05:b9:49:d3:dc:eb:
ec:7e:4f:58:d6:c5:21:c8:d0:1a:35:a4:3d:92:57:d7:89:2c:
8a:df:72:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUZBQUMxMTAvBgNVBAUTKDREM0ZDNDcwNjRGNEVBMUJEQ0FCMjlCOUU2NUIzMUQ3
NERFMjY0RTAwHhcNMjYwNjEzMDY1NTExWhcNMjYwNjIwMDY1NTExWjAYMRYwFAYD
VQQDEw02YTJjZmVjZi0zMjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAskgIfQ4gs4B2u9YldN1ODpxhhaaLCq//b/SzuoJhkvf31tl1DH/mr0WRHgV9
bWUv6wAdQ4/WI7AZTwJmlMeiJpDpbbNCUB3IVAcpFs0zC90IqjT7BR8InDwUypwX
ExUFgQ6sMvcEBIscqicrp2hxoHIs5u5MWn/7qDfBCD6shAC06nk9tRkm/7iwInvK
iEnb2NLasX9hlnBCwwyXiIPqm/x11YEoy+JW6/slxiAcj7mUHTkbnHnPHHNceAIq
qNa6yfJ0tkgQXk7iUxIfXDPfqXueAwJKEaXY4nrBI4GbSLtIw5kLql6cFu51MPcI
9rZvj8NC2sKC0UvM6LSr8O3sWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFARJOuFz
Cf9xOmG2FlZdz/sYeeKkMB8GA1UdIwQYMBaAFE0/xHBk9Oob3KspueZbMddN4mTg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkFBQy80QUYwQzkyQTM1
NEExMUYwQkE3NjZFNENDNEY5QUUwMi9UVF9FY0dUMDZodmNxeW01NWxzeDEwM2la
T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RUX0VjR1QwNmh2Y3F5bTU1bHN4MTAzaVpPQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RkFBQy80QUYwQzkyQTM1NEExMUYwQkE3NjZFNENDNEY5QUUwMi9UVF9FY0dUMDZo
dmNxeW01NWxzeDEwM2laT0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqKCiIDgZKuTkjpFubw5APFKSU2d4ybpfdSTQYlOSSFH47rbvKort56QJ3xnB
tOLOTwS/fPb4dOQYfgUsevGYmQRwoUDU1pXc5//7XXmnXZSS1AeK1d+XV5nxVjxU
pVSF4ebct4OsgfLhpm4SBfFeBgbBuct6BLrbVZuODNDo69T889cD6rixsXNbEogN
cJZLYeU+4/oQ2l1wv7lYvIYJf0LqZJXpYe+UKV6a/wi97sxhj2YsiG1avETYm/Yw
MO4bGeE+FMB51PZZojEqD7LIFImoGnb2Q1vsRLgIRnf5wrJ/CTDaBblJ09zr7H5P
WNbFIcjQGjWkPZJX14ksit9ydA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:49:58 2026 by rpki-client