
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
File: TT_EcGT06hvcqym55lsx103iZOA.mft (raw, json)
Hash identifier: d22n3lcR5VXHlV6x4L4ZAw/JIcDBzxsb4t9IKVS78Oc=
Subject key identifier: 71:E3:C5:8C:C0:BB:C5:B5:A0:96:B9:F1:40:55:BC:80:2D:D3:BD:81
Authority key identifier: 4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
Certificate issuer: /CN=A91AFAAC/serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Certificate serial: 95
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
Manifest number: 93
Signing time: Sun 01 Mar 2026 08:46:00 +0000
Manifest this update: Sun 01 Mar 2026 08:45:59 +0000
Manifest next update: Sun 08 Mar 2026 08:45:59 +0000
Files and hashes: 1: TT_EcGT06hvcqym55lsx103iZOA.crl (hash: Imlv0ko+GAko7OZpNv7bRZnvHNLeLB38u/SoWgiJIbE=)
2: 40F5D9E6354B11F0A873F14DC4F9AE02.roa (hash: R4BGS1LLfheTx8JCwKxSxsIfP4VA81Yn8mbeXTMgqAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl
rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:45:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFAAC, serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Validity
Not Before: Mar 1 08:45:59 2026 GMT
Not After : Mar 8 08:45:59 2026 GMT
Subject: CN=69a3fcc7-d7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:88:43:af:f4:2e:63:e3:9e:25:6f:c9:08:f5:
a2:d7:c1:ac:9c:19:4e:ab:41:08:89:61:a4:dd:a5:
bd:18:95:54:0c:5e:af:2c:4e:28:df:fb:b3:40:29:
f1:e4:75:6b:dc:1d:04:6a:c6:b7:01:80:12:1c:91:
05:60:c0:fa:f2:c3:38:32:98:6b:f3:1f:e2:81:b0:
c8:59:9f:5b:3f:1b:54:e4:47:9f:97:75:9e:22:64:
50:62:77:9e:0f:ec:0a:23:38:6e:d8:ac:1e:f0:c8:
27:48:88:81:a1:74:a9:77:a9:38:ae:70:75:f6:c7:
e7:dd:15:30:4b:4b:a8:4b:12:87:15:7f:4a:68:3d:
00:c0:d8:60:3c:39:d6:49:b1:bd:a9:50:2a:e1:58:
ff:c3:bf:fd:7e:54:01:89:9e:bd:07:cb:b9:fe:93:
96:2f:b0:77:24:27:e9:c2:12:86:ae:95:46:06:48:
3c:32:29:7c:11:12:3a:9f:f7:06:33:2b:f7:c2:0e:
77:54:e6:2b:aa:16:59:9c:a7:0f:d4:14:80:3b:b9:
2b:f0:3e:69:28:dd:54:af:3c:3b:2f:54:8b:84:4e:
63:e5:c0:59:a5:54:69:4a:76:ae:7f:a2:c1:2e:85:
ef:d4:b4:07:0a:da:c0:43:47:3e:11:f2:71:44:dd:
b4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E3:C5:8C:C0:BB:C5:B5:A0:96:B9:F1:40:55:BC:80:2D:D3:BD:81
X509v3 Authority Key Identifier:
keyid:4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e0:e6:0f:70:d9:af:63:52:49:1f:d9:b6:86:b0:0d:c4:1f:
ed:cc:8c:36:e9:a0:c5:c2:77:4e:eb:71:e7:3e:10:b1:7f:5f:
aa:31:4c:7c:75:9d:01:60:ab:27:91:b5:cf:2f:c0:09:28:da:
13:ac:0d:49:a9:06:fe:b6:70:67:14:f9:0a:5b:c2:2e:be:d3:
ad:f8:de:59:2b:32:29:23:b0:0e:21:ee:fb:30:ef:6e:5d:04:
18:4c:9d:a2:84:26:03:cb:d6:18:70:54:56:97:9d:aa:aa:2b:
6e:2f:70:7a:25:3c:d2:4a:cf:a8:70:d2:e7:25:f6:a3:86:6c:
9f:d5:01:c5:53:81:b9:6d:6b:9b:15:08:4b:30:e1:4f:e0:c6:
bf:b7:42:4b:c7:19:a6:e4:14:3b:d9:7d:85:87:5f:82:85:30:
65:cf:93:c3:59:a3:63:c5:1c:03:12:49:99:50:38:55:42:d7:
52:76:b6:c2:76:c7:36:fa:9a:ed:e0:9c:c5:ea:7d:8b:b2:db:
c5:cf:92:48:3a:1e:c6:84:92:25:ba:c7:41:29:fb:7e:02:93:
5e:ae:42:aa:7d:b6:2a:ac:14:07:9e:81:4c:98:41:12:fe:be:
d8:e0:66:b8:57:a0:03:ef:ad:70:c8:6b:a4:53:9f:64:5b:20:
f6:18:d9:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUZBQUMxMTAvBgNVBAUTKDREM0ZDNDcwNjRGNEVBMUJEQ0FCMjlCOUU2NUIzMUQ3
NERFMjY0RTAwHhcNMjYwMzAxMDg0NTU5WhcNMjYwMzA4MDg0NTU5WjAYMRYwFAYD
VQQDEw02OWEzZmNjNy1kN2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2YhDr/QuY+OeJW/JCPWi18GsnBlOq0EIiWGk3aW9GJVUDF6vLE4o3/uzQCnx
5HVr3B0Easa3AYASHJEFYMD68sM4Mphr8x/igbDIWZ9bPxtU5Eefl3WeImRQYnee
D+wKIzhu2Kwe8MgnSIiBoXSpd6k4rnB19sfn3RUwS0uoSxKHFX9KaD0AwNhgPDnW
SbG9qVAq4Vj/w7/9flQBiZ69B8u5/pOWL7B3JCfpwhKGrpVGBkg8Mil8ERI6n/cG
Myv3wg53VOYrqhZZnKcP1BSAO7kr8D5pKN1Urzw7L1SLhE5j5cBZpVRpSnauf6LB
LoXv1LQHCtrAQ0c+EfJxRN20bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHHjxYzA
u8W1oJa58UBVvIAt072BMB8GA1UdIwQYMBaAFE0/xHBk9Oob3KspueZbMddN4mTg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkFBQy80QUYwQzkyQTM1
NEExMUYwQkE3NjZFNENDNEY5QUUwMi9UVF9FY0dUMDZodmNxeW01NWxzeDEwM2la
T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RUX0VjR1QwNmh2Y3F5bTU1bHN4MTAzaVpPQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RkFBQy80QUYwQzkyQTM1NEExMUYwQkE3NjZFNENDNEY5QUUwMi9UVF9FY0dUMDZo
dmNxeW01NWxzeDEwM2laT0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADuDmD3DZr2NSSR/ZtoawDcQf7cyMNumgxcJ3Tutx5z4QsX9fqjFMfHWdAWCr
J5G1zy/ACSjaE6wNSakG/rZwZxT5ClvCLr7TrfjeWSsyKSOwDiHu+zDvbl0EGEyd
ooQmA8vWGHBUVpedqqorbi9weiU80krPqHDS5yX2o4Zsn9UBxVOBuW1rmxUISzDh
T+DGv7dCS8cZpuQUO9l9hYdfgoUwZc+Tw1mjY8UcAxJJmVA4VULXUna2wnbHNvqa
7eCcxep9i7Lbxc+SSDoexoSSJbrHQSn7fgKTXq5Cqn22KqwUB56BTJhBEv6+2OBm
uFegA++tcMhrpFOfZFsg9hjZrA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:54 2026 by rpki-client