
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
File: tnJ-39N9HiwXXBCBGh04qirGyJw.mft (raw, json)
Hash identifier: +OFA+mTKkqrAkUdDODcEh/FR/3Yw5DDkvyIb6Rnx7aU=
Subject key identifier: BB:A2:F5:0C:CE:1A:6E:5F:16:70:9E:BC:97:A7:4A:28:CE:7B:21:CB
Authority key identifier: B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C
Certificate issuer: /CN=A91BD3D2/serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
Manifest number: 01F0
Signing time: Mon 02 Mar 2026 00:44:42 +0000
Manifest this update: Mon 02 Mar 2026 00:44:40 +0000
Manifest next update: Mon 09 Mar 2026 00:44:40 +0000
Files and hashes: 1: tnJ-39N9HiwXXBCBGh04qirGyJw.crl (hash: paZtuLbk38WgFFNOgNXFmCwOQuj6dmuH17CqtQEArbw=)
2: 207C8A52AC7611EEB465AF75C4F9AE02.roa (hash: zYQ2BctNXY7magajQqIBQAnaVIQn28KFCi8jua34WGo=)
3: 862D5B3A2C8611EEB04B7B66C4F9AE02.roa (hash: pWAjmQn5SbEE6PdoMznAj34dV0v6ZXCFUuJiYeyqVgg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl
rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:44:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD3D2, serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C
Validity
Not Before: Mar 2 00:44:40 2026 GMT
Not After : Mar 9 00:44:40 2026 GMT
Subject: CN=69a4dd7a-dd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:e7:6a:08:66:d7:62:1f:0a:48:35:cd:7d:
04:93:7f:cf:e9:e7:b7:a0:38:98:b4:28:4e:3c:78:
89:a4:77:56:07:b6:ea:76:cc:29:5b:7d:03:a6:1e:
b0:56:0d:95:f9:fd:1e:2e:87:f2:0b:b0:56:b7:8f:
c5:4e:e5:96:a4:08:91:bf:88:77:75:ea:aa:48:9f:
2a:60:f7:bc:06:1a:b2:dd:8b:40:5d:52:c0:08:ce:
5e:de:1f:22:de:4a:30:05:75:4b:26:b8:2a:41:3f:
99:15:f9:b9:e3:93:af:0a:b2:3f:fb:6d:30:cb:13:
3a:61:4a:a5:2f:3b:c9:c7:2d:c9:da:3f:99:e3:ab:
e6:30:a8:3c:de:54:5d:90:7c:83:bf:e5:ea:33:9a:
fa:73:30:aa:2b:16:10:2c:66:d8:d4:56:c4:90:01:
86:b7:a7:bb:29:f4:f8:5f:1d:47:e4:3d:8d:cc:2d:
25:ee:23:1e:88:1a:e1:86:55:75:85:97:50:32:1f:
d9:21:36:3c:69:cd:b9:0b:13:b1:f2:10:4e:e4:4a:
b8:43:c3:ea:cd:f7:0d:53:f1:50:d1:21:e1:ce:20:
af:99:66:1f:51:8a:3c:62:14:a1:e8:a0:bd:b6:93:
f5:70:61:c5:29:87:ca:c1:72:e4:17:ac:63:c0:1c:
0c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A2:F5:0C:CE:1A:6E:5F:16:70:9E:BC:97:A7:4A:28:CE:7B:21:CB
X509v3 Authority Key Identifier:
keyid:B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:cf:f6:b2:c5:cf:13:ec:1f:cd:7b:a8:03:5a:e4:1c:08:ec:
fa:c9:87:bd:a9:62:8c:44:ae:52:7f:0f:4f:c7:47:e4:46:51:
eb:6e:b6:ba:12:fa:88:e3:83:1b:69:ad:ab:61:17:18:a3:07:
0a:c0:2f:cb:3b:10:8c:00:5b:20:1f:cf:a7:5d:39:dd:3a:7f:
dc:24:13:8f:7e:92:f2:37:23:d0:f5:cc:6a:bd:b0:1e:df:42:
0b:19:f1:14:a9:4c:5a:9a:8b:8f:9b:54:10:71:19:0a:3a:e5:
72:61:00:32:80:98:89:0d:2a:8b:58:65:80:5c:c2:f0:90:fc:
90:99:bc:02:44:d9:b1:a8:5c:f9:fb:90:8a:14:26:e5:a7:01:
2c:c3:42:37:d5:25:0b:93:62:0c:a4:59:3b:51:9f:9a:3c:e4:
cc:31:7b:9b:cf:77:ce:2f:d2:4f:a7:c2:41:20:01:c7:42:7c:
98:84:2a:ac:26:cf:e3:35:f1:ea:56:ec:01:e2:60:ae:cd:8a:
9d:46:f6:53:c8:13:54:bd:b5:6b:14:ca:10:6c:70:c0:15:cc:
81:ab:f7:de:63:9b:ce:54:f1:12:99:de:a8:e4:c4:d2:bf:b0:
7a:09:7c:3b:55:90:0f:d2:8b:be:95:6a:bd:6e:49:e3:7f:d1:
49:a5:80:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkQzRDIxMTAvBgNVBAUTKEI2NzI3RURGRDM3RDFFMkMxNzVDMTA4MTFBMUQzOEFB
MkFDNkM4OUMwHhcNMjYwMzAyMDA0NDQwWhcNMjYwMzA5MDA0NDQwWjAYMRYwFAYD
VQQDEw02OWE0ZGQ3YS1kZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsObnaghm12IfCkg1zX0Ek3/P6ee3oDiYtChOPHiJpHdWB7bqdswpW30Dph6w
Vg2V+f0eLofyC7BWt4/FTuWWpAiRv4h3deqqSJ8qYPe8Bhqy3YtAXVLACM5e3h8i
3kowBXVLJrgqQT+ZFfm545OvCrI/+20wyxM6YUqlLzvJxy3J2j+Z46vmMKg83lRd
kHyDv+XqM5r6czCqKxYQLGbY1FbEkAGGt6e7KfT4Xx1H5D2NzC0l7iMeiBrhhlV1
hZdQMh/ZITY8ac25CxOx8hBO5Eq4Q8PqzfcNU/FQ0SHhziCvmWYfUYo8YhSh6KC9
tpP1cGHFKYfKwXLkF6xjwBwMRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLui9QzO
Gm5fFnCevJenSijOeyHLMB8GA1UdIwQYMBaAFLZyft/TfR4sF1wQgRodOKoqxsic
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDNEMi80MkMxRDhGODJD
ODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhpd1hYQkNCR2gwNHFpckd5
SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RuSi0zOU45SGl3WFhCQ0JHaDA0cWlyR3lKdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RDNEMi80MkMxRDhGODJDODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhp
d1hYQkNCR2gwNHFpckd5SncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ8/2ssXPE+wfzXuoA1rkHAjs+smHvalijESuUn8PT8dH5EZR6262uhL6iOOD
G2mtq2EXGKMHCsAvyzsQjABbIB/Pp1053Tp/3CQTj36S8jcj0PXMar2wHt9CCxnx
FKlMWpqLj5tUEHEZCjrlcmEAMoCYiQ0qi1hlgFzC8JD8kJm8AkTZsahc+fuQihQm
5acBLMNCN9UlC5NiDKRZO1GfmjzkzDF7m893zi/ST6fCQSABx0J8mIQqrCbP4zXx
6lbsAeJgrs2KnUb2U8gTVL21axTKEGxwwBXMgav33mObzlTxEpneqOTE0r+wegl8
O1WQD9KLvpVqvW5J43/RSaWArw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:41 2026 by rpki-client