
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
File: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft (raw, json)
Hash identifier: H4G0AQxn/NeGMnSIBTnLYhVUWazj3c4IBY0qACI78qM=
Subject key identifier: EC:ED:11:DC:E7:26:36:D0:A6:15:F5:27:9E:98:2F:77:02:4C:57:0D
Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34
Certificate issuer: /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
Certificate serial: 034D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
Manifest number: 033D
Signing time: Wed 23 Sep 2026 00:37:56 +0000
Manifest this update: Wed 23 Sep 2026 00:37:55 +0000
Manifest next update: Wed 30 Sep 2026 00:37:55 +0000
Files and hashes: 1: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl (hash: IWWxYJjwKZkqPGObpO1npkHTuOu6JCIuCaG2SLLXt9Q=)
2: 36765016252911EDBEF5C985C4F9AE02.roa (hash: 7iH70KKL8E6kg2mMBIuLcmu+q9kHmGNW2ajEqyTNrsU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl
rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 845 (0x34d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDBD0, serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
Validity
Not Before: Sep 23 00:37:55 2026 GMT
Not After : Sep 30 00:37:55 2026 GMT
Subject: CN=6ab31f64-c923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:af:6b:d7:a7:c5:4e:55:03:e5:2b:cf:d4:e7:
8e:1a:73:7f:94:1d:b7:ab:fe:a0:6e:9c:00:85:c9:
d8:08:dd:09:93:a8:d8:d5:3f:de:27:22:85:7a:67:
1a:f1:aa:00:0b:5d:94:fe:bb:21:a8:c3:36:e5:1d:
2a:66:19:89:a7:db:6c:78:0b:36:48:c8:4a:31:83:
ec:2f:f6:11:13:fc:6c:65:50:64:ff:b3:42:63:2b:
e2:71:2e:46:02:91:7a:1e:e5:68:f3:14:ad:7f:24:
0b:25:e1:b7:a6:b3:1f:95:a8:52:6d:8b:c2:dc:d5:
d0:f4:c2:9c:ed:9d:3f:76:59:97:57:45:36:c1:2b:
e9:86:2b:23:ef:bb:a9:a3:ff:f0:f7:7c:53:86:06:
c8:0d:aa:50:96:c7:ca:e9:24:69:1a:6f:70:af:de:
82:b1:f0:b3:25:ad:eb:dd:1c:d8:bf:e1:bb:21:d4:
7e:ad:1f:ba:15:2b:bc:5f:77:a5:75:a6:83:12:60:
ef:bb:11:2a:09:4d:2e:92:41:22:fe:7f:9c:b3:e2:
e5:35:6d:3e:12:9c:a3:3f:20:e6:9b:aa:37:fb:cf:
6b:dd:0a:ae:5a:a2:5f:0e:56:e8:f3:5f:46:af:97:
80:f4:98:61:98:7e:31:8f:78:26:6f:f6:14:d2:da:
34:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:ED:11:DC:E7:26:36:D0:A6:15:F5:27:9E:98:2F:77:02:4C:57:0D
X509v3 Authority Key Identifier:
keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:85:41:3a:c0:c7:fd:bf:13:77:77:9f:2b:fb:e9:06:8e:81:
7d:41:99:15:61:3c:2e:a1:4e:b5:a5:ce:05:a7:9a:8a:b6:d2:
f7:d6:1c:77:8a:a4:0f:6a:f0:4b:06:08:7c:62:e6:dd:b9:ef:
ec:2c:14:15:2f:47:98:f0:1f:ba:5c:b1:dc:76:a0:7a:b9:24:
32:87:e7:bb:02:05:96:54:92:5a:f3:59:66:dc:58:f7:31:e8:
f8:d1:f4:4b:9e:3f:66:09:6a:0c:d1:b6:2b:ee:84:48:8c:6b:
dc:72:46:7c:64:97:62:0a:db:be:c8:7c:42:ec:f6:6d:cb:34:
c2:0c:4c:eb:91:d6:52:38:af:11:59:4a:d3:d0:f6:0d:02:e4:
fe:75:5b:cc:09:2f:f3:6e:d9:9f:cb:7f:ce:d6:90:2d:88:ed:
9e:4e:a7:ef:f4:be:c2:72:e6:ba:17:b5:ef:4a:3b:e5:31:46:
a8:c7:ed:9a:30:7a:88:a8:e0:0e:ea:de:95:ec:50:80:4c:30:
4b:fd:58:5f:16:2d:3e:f9:13:59:32:a9:16:05:b8:3f:aa:cb:
bf:e2:b4:cf:d8:00:73:8d:70:1f:5c:f4:29:81:f7:34:c9:0d:
76:f5:f2:c5:05:02:02:ca:3d:6a:8f:05:44:d0:66:53:53:e8:
c5:88:da:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:58:18 2026 by rpki-client