
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
File: Tusdx9KCFNMWqjN4seKV6RAbTKo.mft (raw, json)
Hash identifier: LoqpZSyrgO76FhSMvSQQheAFg3wYz3W1CRDU7mLbarU=
Subject key identifier: E1:DC:84:A7:DB:56:82:54:24:1A:BA:4E:60:E4:3E:6F:7F:89:56:D0
Authority key identifier: 4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA
Certificate issuer: /CN=A91B6B4B/serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
Manifest number: EA
Signing time: Mon 27 Jul 2026 08:32:19 +0000
Manifest this update: Mon 27 Jul 2026 08:32:18 +0000
Manifest next update: Mon 03 Aug 2026 08:32:18 +0000
Files and hashes: 1: Tusdx9KCFNMWqjN4seKV6RAbTKo.crl (hash: Jzilr4alS/EQ0lVWdK9iaZInRcZuMfS6GbwGjI0BC9Y=)
2: B47FEDD024C411F0A4C45287C4F9AE02.roa (hash: MojY0BL42g+25RMVkptUnRgFYNWH3XV06u/QKeiFORg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl
rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6B4B, serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA
Validity
Not Before: Jul 27 08:32:18 2026 GMT
Not After : Aug 3 08:32:18 2026 GMT
Subject: CN=6a671792-66ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:b4:0b:bd:b2:e6:9e:db:aa:45:75:8e:62:
b0:c5:59:18:99:e6:13:c8:82:69:e7:75:ca:9e:48:
2e:a1:b5:8a:0e:1a:2e:43:ec:ce:7a:27:92:bb:de:
95:c0:04:9f:1e:30:c5:ab:db:54:1e:12:8e:ed:88:
9a:15:d5:cc:3f:9b:32:40:ef:b4:9a:f1:d7:3e:47:
de:a9:af:1b:5d:dd:27:20:4a:50:ec:7d:3c:b8:25:
0d:07:16:af:c3:4e:54:ca:95:ee:4f:17:fd:1a:71:
ca:bf:28:89:4d:99:15:fd:b5:0f:2d:19:d9:e6:dc:
45:6d:f1:be:7b:fe:44:eb:dc:3e:af:4e:f8:35:92:
fe:db:8c:68:9b:f8:6a:4a:8e:24:2d:d1:dc:86:8e:
ae:cc:1f:16:10:83:7f:cc:19:5b:64:3e:5f:d3:c1:
59:b6:fa:36:6d:e1:03:2b:81:3f:60:e1:22:48:dc:
58:0e:b1:70:ce:25:91:29:d4:5a:68:5f:13:2e:30:
90:8c:a0:4c:44:1d:40:80:f4:ef:12:9b:88:76:48:
a1:0c:59:bc:ba:92:1f:fb:ad:aa:1e:9e:59:11:56:
02:cd:4d:ab:f1:0b:67:18:e0:35:66:ea:4f:eb:e5:
a0:06:9f:6b:e2:77:f7:72:96:c4:c2:15:45:fb:68:
6e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DC:84:A7:DB:56:82:54:24:1A:BA:4E:60:E4:3E:6F:7F:89:56:D0
X509v3 Authority Key Identifier:
keyid:4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:2b:97:8d:14:13:2f:25:c8:1d:1f:cb:58:b3:ba:8c:fc:1c:
8a:99:9a:62:c5:3b:ce:73:7d:65:9a:e3:f4:94:dd:30:0b:cd:
cc:01:76:e3:e1:cb:3c:a8:9b:56:0c:73:c0:00:59:2f:d3:ae:
a3:2f:10:db:63:d5:1c:98:dd:06:7d:6e:e2:20:32:1a:7c:94:
cf:bc:f9:1c:24:fb:8c:e1:65:ab:ef:fa:cc:26:ec:80:ee:ef:
5b:ff:95:9a:cd:05:6a:94:3f:3a:0e:81:15:15:14:99:35:b7:
9f:1d:d2:e8:d6:46:17:d9:da:87:97:b6:00:cc:33:4f:16:6e:
94:25:08:f3:0b:b3:91:c6:8e:31:14:89:49:7a:5f:df:73:59:
dd:de:94:6b:23:97:90:04:97:6c:6a:0b:b3:d4:7d:4a:9b:17:
41:a3:79:f3:db:11:91:bc:1b:09:f3:cd:ab:e7:ed:93:58:47:
9c:50:cc:5a:4a:ce:5c:55:43:e9:5a:1d:78:5c:7f:44:25:ad:
95:bd:75:51:04:52:8b:04:f2:36:19:63:2a:64:81:fe:d8:1c:
7e:c9:8e:24:ae:7c:93:4a:58:95:97:2a:af:e5:fb:87:f2:08:
9b:58:08:84:9c:b7:59:b9:55:09:60:92:8f:d3:ad:03:9b:30:
92:a3:3c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:57:26 2026 by rpki-client