
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft
File: TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft (raw, json)
Hash identifier: Vq/lETNK1CxEv3foHlwVQMITXEz9EwLu5WDETQUnTMw=
Subject key identifier: 98:FB:65:23:AF:DF:72:BE:41:65:92:E6:2D:38:19:D0:CB:E7:18:0F
Authority key identifier: 4E:D0:88:7B:D3:04:E0:4C:98:FB:A5:3B:9B:9B:02:BD:E4:38:97:03
Certificate issuer: /CN=A91B46FE/serialNumber=4ED0887BD304E04C98FBA53B9B9B02BDE4389703
Certificate serial: 60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft
Manifest number: 5F
Signing time: Sun 01 Mar 2026 09:23:43 +0000
Manifest this update: Sun 01 Mar 2026 09:23:42 +0000
Manifest next update: Sun 08 Mar 2026 09:23:42 +0000
Files and hashes: 1: TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl (hash: p2Syd6e0hk6Zl+2y28lAXiR24qEH2igmKPJA/MCP0ac=)
2: 24C9831E83E611F0AF39BE57C4F9AE02.roa (hash: eoWky/ushFlFPOAMp9hbU/1xEcSwmCQfGQqBxUKHPn4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl
rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B46FE, serialNumber=4ED0887BD304E04C98FBA53B9B9B02BDE4389703
Validity
Not Before: Mar 1 09:23:42 2026 GMT
Not After : Mar 8 09:23:42 2026 GMT
Subject: CN=69a4059f-776a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:8b:c0:58:cb:c9:91:2d:50:02:80:38:8e:
93:13:2c:fd:49:2b:c1:97:f2:14:a9:1b:ab:32:3f:
bd:96:54:d2:be:ee:63:f7:c6:83:84:01:be:0b:c8:
de:78:92:37:aa:b7:f2:d4:14:4a:e2:13:e2:59:f7:
82:96:16:f8:a1:c1:41:23:b3:5a:9a:27:cf:17:b6:
f9:64:25:5e:eb:fb:c4:c3:a7:0e:91:40:13:53:cf:
2b:af:6b:82:ef:67:86:97:b9:b9:99:9a:e2:0d:b1:
9a:75:69:57:34:3a:77:b3:fb:40:e2:a3:39:a9:a9:
19:49:1b:d2:4e:45:2e:d4:85:8f:ed:b1:73:0f:ce:
11:b0:04:bc:0e:73:94:7e:52:7b:81:c8:10:5b:f2:
ee:73:50:78:d8:a2:73:d1:38:fa:8d:32:85:3e:8d:
73:1c:ab:27:b6:97:da:70:a5:85:7a:bf:0c:22:55:
25:99:39:54:ab:c5:71:38:29:14:83:49:14:3d:be:
96:3c:97:df:6a:fe:bd:09:85:14:7d:a2:c1:5a:4e:
b5:45:85:0f:88:0d:80:b1:dd:81:46:3c:59:79:05:
53:06:91:36:be:10:90:be:a9:66:c0:ab:f8:f5:33:
01:90:78:9e:0d:0d:e4:44:47:ac:2b:73:c0:d9:d6:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FB:65:23:AF:DF:72:BE:41:65:92:E6:2D:38:19:D0:CB:E7:18:0F
X509v3 Authority Key Identifier:
keyid:4E:D0:88:7B:D3:04:E0:4C:98:FB:A5:3B:9B:9B:02:BD:E4:38:97:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b4:09:2c:0f:70:61:1f:2c:9e:ae:90:53:7d:d7:9f:94:e4:
be:ef:5f:42:ff:b1:28:ac:a0:b7:62:30:08:b5:6b:0e:8c:18:
2f:b3:7c:85:5d:57:76:a8:77:d5:a4:e2:c5:ea:c9:01:71:7f:
a6:86:aa:dd:ca:a9:2b:09:a3:e2:73:b5:78:6e:b0:23:d3:37:
71:cd:8b:c6:1d:cb:0e:dd:45:53:b7:f9:49:e3:45:31:94:5f:
81:e8:e2:bc:2d:ba:e7:4c:e9:1c:50:d3:35:2e:18:f4:0d:7e:
8a:d8:26:d6:6e:36:f6:bf:32:5c:0b:5e:14:3c:9d:84:41:f3:
a0:74:ee:d3:17:02:b9:c6:31:30:21:1a:3d:f6:e2:2e:77:3a:
54:45:23:39:3b:95:3d:4e:93:95:f4:ad:65:51:bf:43:c1:65:
00:9a:9e:8f:22:c8:98:64:17:0b:b8:ba:c2:14:cd:02:b4:ba:
08:4d:c1:db:f8:b3:85:f1:85:06:70:d6:db:db:d4:a2:35:4c:
71:3c:e9:c4:cf:9d:45:10:57:ba:8d:d6:ce:72:86:c1:5f:6c:
c6:9c:2e:c3:93:78:c5:69:e1:c3:22:84:6e:a0:bd:c4:40:05:
0e:10:01:24:92:b2:d4:ff:99:57:21:a9:d6:9d:3e:40:6d:97:
04:8d:40:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:18 2026 by rpki-client