
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
File: tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft (raw, json)
Hash identifier: gu0uNXqFBY61W4id/yP0t2EpCr4Uo46AJM3/xWKISYI=
Subject key identifier: B3:5B:36:38:91:51:45:E6:84:24:87:19:DE:F3:D9:D9:60:A0:52:E8
Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E
Certificate issuer: /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E
Certificate serial: 0286
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
Manifest number: 0B7F
Signing time: Thu 16 Apr 2026 20:13:40 +0000
Manifest this update: Thu 16 Apr 2026 20:13:39 +0000
Manifest next update: Thu 23 Apr 2026 20:13:39 +0000
Files and hashes: 1: tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl (hash: G7EzzmXPLhdKZU1oy9Q1NtXyIm8MYg8dS2zgUrNz7wc=)
2: 6897097E6C6311EDBCFA073FC4F9AE02.roa (hash: amtsGIZ1bAiDpg3BaPYjx1lqeDVrGcipi92mNwNuQSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl
rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:13:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 646 (0x286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA0AE, serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E
Validity
Not Before: Apr 16 20:13:39 2026 GMT
Not After : Apr 23 20:13:39 2026 GMT
Subject: CN=69e142f4-7eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:fc:be:0a:e3:a1:6e:5c:ba:16:cd:6e:16:
09:d4:0b:18:71:50:51:53:85:6c:80:9a:99:5e:55:
b4:eb:dc:98:9b:4f:8b:9f:b2:1a:a7:2e:30:66:c4:
a0:f8:9f:c8:20:99:86:15:62:08:7e:46:68:88:cb:
ee:c1:5f:4c:dd:cf:28:7f:8e:6e:bd:d2:0b:8b:4e:
b2:5d:93:d5:45:4a:d1:90:b2:82:73:b3:fe:88:17:
bd:5c:2d:25:71:c7:88:9a:43:20:af:5e:8c:8a:8c:
d9:d9:12:2c:48:29:7b:44:d9:2c:c3:34:43:f7:ce:
ef:59:1b:23:25:4a:df:79:0a:8f:4f:88:b7:12:23:
a4:e0:4e:84:09:64:a3:d5:15:2f:9e:ab:8b:48:f8:
d2:77:84:93:31:d8:74:69:06:e3:dc:63:03:96:9c:
a6:77:ae:d0:24:27:ec:0d:32:6a:26:83:1d:64:e5:
e5:91:5c:3f:7f:b8:d8:16:8f:a1:38:e2:22:3b:77:
4f:ab:eb:b7:5c:ef:12:ba:8f:cb:a6:3a:f0:04:75:
4a:d5:2c:c4:29:d9:9c:d6:b3:e7:3f:78:bb:09:ed:
8b:44:50:07:36:d7:d8:d5:17:87:f1:65:15:b0:81:
77:e2:3a:78:97:7a:5a:8b:bc:b4:bc:1f:76:b0:c3:
35:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5B:36:38:91:51:45:E6:84:24:87:19:DE:F3:D9:D9:60:A0:52:E8
X509v3 Authority Key Identifier:
keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:4a:96:7f:d6:a8:76:8d:7d:f5:1f:5a:e8:1e:d3:20:13:aa:
e6:30:c3:87:5a:c4:a5:8e:60:50:dd:2d:50:5f:27:14:f7:06:
be:53:02:bc:b3:ac:2e:f1:40:78:44:79:63:5b:8f:8a:1b:c2:
c9:f3:a0:e5:fe:07:65:43:9c:1b:1a:33:a8:86:dd:e1:97:43:
38:17:8a:05:ef:a1:ba:6b:5c:1c:4f:a1:dc:f6:f4:9f:91:b9:
d3:3b:35:60:86:8f:28:ed:33:66:6b:1d:45:4a:d4:f4:98:07:
bf:a7:d3:39:bc:78:3d:89:cb:a6:cd:4e:11:6b:5e:17:d8:34:
31:30:b8:92:eb:e4:e8:0d:0c:da:67:7a:ae:a1:e8:c5:cf:24:
9d:46:37:54:c8:66:f0:92:25:18:f8:57:9a:06:29:cf:b6:cb:
ac:10:c5:72:03:f6:e4:56:98:81:f6:ae:16:8c:e4:1f:e4:9d:
68:57:ba:d3:37:00:2b:e8:19:28:de:57:95:96:0e:21:73:12:
3c:7b:91:33:bc:fb:d3:49:b5:40:2d:c7:8e:5a:fc:b7:27:bc:
a3:30:7f:39:b9:d1:19:9a:f6:12:90:e9:2d:60:7f:57:0f:06:
20:06:e5:f1:b7:f6:2d:d1:2a:5d:0a:9e:bf:c1:48:50:57:b2:
7e:d7:07:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:54:37 2026 by rpki-client