
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
File: tnJ-39N9HiwXXBCBGh04qirGyJw.mft (raw, json)
Hash identifier: sQigjewQIVzf0+dqAJbl4LbY5qUFscq59TktyLjyUSg=
Subject key identifier: 2E:92:11:6C:CD:65:B7:C1:72:BD:1C:2B:02:46:10:FE:AF:17:FB:E4
Authority key identifier: B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C
Certificate issuer: /CN=A91BD3D2/serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C
Certificate serial: 0215
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
Manifest number: 0208
Signing time: Fri 17 Apr 2026 02:50:29 +0000
Manifest this update: Fri 17 Apr 2026 02:50:29 +0000
Manifest next update: Fri 24 Apr 2026 02:50:29 +0000
Files and hashes: 1: tnJ-39N9HiwXXBCBGh04qirGyJw.crl (hash: Q8KNuLvFO064CTD8xdcDJlDKfcDKDiKbjF131Oc75DI=)
2: 862D5B3A2C8611EEB04B7B66C4F9AE02.roa (hash: pWAjmQn5SbEE6PdoMznAj34dV0v6ZXCFUuJiYeyqVgg=)
3: 207C8A52AC7611EEB465AF75C4F9AE02.roa (hash: zYQ2BctNXY7magajQqIBQAnaVIQn28KFCi8jua34WGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl
rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD3D2, serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C
Validity
Not Before: Apr 17 02:50:29 2026 GMT
Not After : Apr 24 02:50:29 2026 GMT
Subject: CN=69e19ff5-2f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:d3:e4:6a:b4:3a:56:a8:dd:70:4f:4a:82:
8e:76:d4:1f:f9:c5:9d:13:5d:29:33:2d:3f:20:9f:
a3:6c:ba:69:4b:de:57:0d:53:d0:54:0f:b5:e2:01:
4a:d4:c0:0b:70:8a:95:05:06:b6:30:8d:49:96:18:
23:dc:fe:fd:70:be:6d:fb:e5:c3:22:f8:34:40:2f:
bd:e4:40:32:7b:4a:8c:d5:84:e2:0a:c4:d2:e2:50:
5f:94:ee:16:c0:46:03:28:92:4d:f8:af:72:b4:57:
ff:f0:b3:3f:b2:9a:c0:b9:83:24:da:a3:ec:f5:97:
19:d1:72:8c:c4:5f:a4:5f:77:7c:f0:eb:5a:1d:71:
c7:f7:65:d9:f9:8e:07:f4:fb:4f:e4:bf:8f:93:8e:
69:bb:2a:6a:6a:3c:ef:57:c3:9b:81:ed:c2:1a:24:
03:2e:a3:36:9c:91:64:45:58:1b:a0:d0:91:b7:e8:
47:ae:53:9f:35:7b:4f:4a:bc:76:1d:17:1f:6e:1c:
1d:ce:85:51:59:ea:0d:7d:25:9a:2d:71:47:8b:66:
50:18:32:78:75:ae:a6:ab:fa:23:3e:84:f1:51:f2:
ad:34:ea:38:13:b2:23:15:25:4c:cb:bc:ee:92:91:
35:45:78:f5:76:50:8d:6f:4a:11:96:31:59:54:93:
d0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:92:11:6C:CD:65:B7:C1:72:BD:1C:2B:02:46:10:FE:AF:17:FB:E4
X509v3 Authority Key Identifier:
keyid:B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:e2:5a:55:82:69:41:67:af:49:bd:a4:d0:8b:f4:13:d0:2e:
41:8a:52:53:63:62:57:e1:0d:ff:cc:63:e5:ea:14:28:f1:a3:
79:cd:58:6e:80:8d:c0:1c:d5:84:eb:ad:25:13:f8:f6:2a:c4:
26:76:ff:34:ea:85:60:c0:9b:1f:98:a3:c6:9e:4b:4c:ca:6f:
64:ef:83:f6:c5:ce:16:8d:1c:3f:68:9c:f3:31:c2:26:d9:8e:
0b:b7:62:ad:86:79:e0:78:c7:0f:e0:20:bb:f4:29:e3:b8:8e:
bc:35:03:fa:4b:e5:14:cb:28:55:4a:0c:39:87:c6:a2:4d:5d:
a8:18:17:4a:43:2a:db:19:66:9a:92:0b:17:9c:d9:fd:ca:05:
74:b5:e9:a7:23:1d:c1:7b:0e:7b:d9:58:1a:d1:33:08:8e:4e:
81:d6:9d:0f:a3:b4:18:b4:28:fa:84:9c:1d:aa:4b:64:26:9c:
89:91:48:e2:f0:6f:6f:a5:83:ed:b1:d0:c6:d7:ab:94:0e:1b:
ee:53:4c:57:88:fd:cb:43:2c:a2:e1:ac:2e:a3:ad:78:53:fd:
f7:fb:a1:10:8f:aa:1f:65:24:2b:58:f5:a3:ae:5b:89:08:b1:
d7:f5:2b:ab:bb:ff:ba:4e:99:18:d9:29:94:73:7e:87:2f:c5:
b6:08:8a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:43:52 2026 by rpki-client