
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
File: TT_EcGT06hvcqym55lsx103iZOA.mft (raw, json)
Hash identifier: L0SqApZqfHaaquUiHepHg/0LVo+LHkxoMDQsAWSSl18=
Subject key identifier: 8B:AF:0A:87:D8:53:C9:B3:23:66:F2:0F:DB:6E:ED:EF:3D:5E:F0:4F
Authority key identifier: 4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
Certificate issuer: /CN=A91AFAAC/serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
Manifest number: AC
Signing time: Wed 15 Apr 2026 06:46:00 +0000
Manifest this update: Wed 15 Apr 2026 06:45:59 +0000
Manifest next update: Wed 22 Apr 2026 06:45:59 +0000
Files and hashes: 1: TT_EcGT06hvcqym55lsx103iZOA.crl (hash: muXE/QSb+SOmoD4RWNE7waCCiLs/+BBd96QgP/4qAvg=)
2: 40F5D9E6354B11F0A873F14DC4F9AE02.roa (hash: stzvaQb1q0aBe4Ji0bjzDRZOM/zXcEzYJI+enj1Jq5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl
rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:45:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFAAC, serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Validity
Not Before: Apr 15 06:45:59 2026 GMT
Not After : Apr 22 06:45:59 2026 GMT
Subject: CN=69df3427-add9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:3e:e9:73:ee:33:0d:ee:c8:97:eb:84:ea:
da:71:78:78:ad:fc:7f:9f:d9:8e:c7:54:d0:ef:ea:
2f:bd:68:68:a8:75:44:d4:dd:0c:0f:33:88:c0:8c:
01:04:5a:f5:74:33:e3:d4:ea:0b:86:a4:8a:70:c2:
f3:93:d8:49:76:72:1e:a7:8b:d0:68:54:32:fa:20:
30:69:3e:97:0e:34:1a:b0:10:e1:ab:fc:ce:47:fc:
58:a9:d7:32:f3:f8:a7:73:f3:50:e9:8c:ac:81:66:
66:b1:33:2f:18:1c:a6:4f:5f:50:6c:b8:94:e6:18:
40:5a:58:2f:2c:ff:b9:de:dc:8e:75:30:7b:6e:73:
d9:6d:21:63:97:a6:d0:e3:a8:14:94:58:51:06:b3:
9d:e4:63:a9:61:ad:da:f1:1b:ad:5c:43:69:e9:7b:
ae:ea:4a:2a:58:8f:81:df:23:ba:5f:9d:a5:e1:f7:
e0:ed:b1:7f:0a:9b:fd:9d:7e:cf:24:30:36:46:ae:
df:70:a9:5d:93:e0:4d:96:a7:7f:1c:8d:da:93:5b:
ed:62:e0:e0:21:65:88:c8:ca:4a:a3:b8:73:14:14:
64:75:61:2f:50:dd:5d:f2:6a:70:52:50:2c:41:e8:
6a:c7:0c:48:4d:3c:39:2e:cc:71:19:2f:68:63:34:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AF:0A:87:D8:53:C9:B3:23:66:F2:0F:DB:6E:ED:EF:3D:5E:F0:4F
X509v3 Authority Key Identifier:
keyid:4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:32:63:ba:f0:15:05:a4:f0:20:61:b4:4a:23:0d:c4:d3:38:
54:e9:7f:a0:5c:a5:06:d1:8d:64:f4:4a:cd:17:6b:79:33:82:
14:c4:d4:e1:27:7d:08:50:10:c6:9d:39:13:68:ed:ed:f1:b0:
c3:cb:03:e4:20:7d:fb:af:0b:cd:25:60:c0:cb:aa:0d:c4:d4:
4e:00:32:38:15:9e:17:da:b6:1b:9b:ac:61:ca:ee:7f:6f:1f:
ef:1c:7d:fa:e5:9f:05:2d:71:cf:72:14:ac:4a:fe:b4:cb:84:
f5:75:8f:c4:15:30:c9:db:82:9c:b8:e2:79:06:fa:a1:4b:f3:
1e:cc:8f:b5:f1:2f:95:93:05:42:6d:97:a2:c7:74:95:cb:79:
c5:49:fb:e9:34:08:3d:40:c1:15:ff:7a:41:45:4e:df:06:67:
07:88:45:80:3a:15:39:bc:cf:f3:35:59:bd:e0:c7:9d:fa:88:
6d:c6:a9:8a:05:5c:92:4c:10:18:53:fc:75:84:11:cb:af:f7:
dc:da:21:ed:a3:13:83:fb:e8:4f:85:35:a3:fc:b1:bd:66:39:
e6:d3:bf:57:b9:8e:64:1e:8c:b9:48:1d:e0:49:48:20:4d:21:
f4:db:c1:43:96:55:ac:c3:c3:a6:2e:39:04:d3:87:39:e3:b4:
3e:47:cc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:47 2026 by rpki-client