
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
File: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft (raw, json)
Hash identifier: wQXBDGMtepqR9ocJbr02WY8+haal6Vyx4nQLCj3N//w=
Subject key identifier: EE:04:84:30:4A:3E:8B:87:97:3A:08:0F:C8:2E:21:D7:6A:7D:99:19
Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34
Certificate issuer: /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
Certificate serial: 02FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
Manifest number: 02EC
Signing time: Fri 17 Apr 2026 01:13:37 +0000
Manifest this update: Fri 17 Apr 2026 01:13:36 +0000
Manifest next update: Fri 24 Apr 2026 01:13:36 +0000
Files and hashes: 1: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl (hash: JyIys55decpVKuwWbBpukUDUaC6BKRazXrSFF3KF8KU=)
2: 36765016252911EDBEF5C985C4F9AE02.roa (hash: 7iH70KKL8E6kg2mMBIuLcmu+q9kHmGNW2ajEqyTNrsU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl
rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:13:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 764 (0x2fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDBD0, serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
Validity
Not Before: Apr 17 01:13:36 2026 GMT
Not After : Apr 24 01:13:36 2026 GMT
Subject: CN=69e18941-ce9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:fc:76:45:40:d7:f8:cc:35:d3:d0:17:90:
ca:28:f1:c7:64:cc:b4:97:78:27:1a:33:41:3e:19:
39:27:a8:46:81:ff:a1:fd:f1:e4:54:ba:49:2a:57:
85:d6:dd:de:95:fa:06:9d:74:29:a4:3c:fa:a9:8c:
b4:4d:6b:ef:77:bc:c4:8c:48:0d:60:d7:e9:63:5e:
f4:d9:fb:56:cc:79:18:90:0e:b3:57:e1:0e:3b:88:
96:6b:9a:26:b2:68:af:07:61:97:47:4d:0c:c4:aa:
70:49:40:14:37:c2:9b:87:4d:d7:7d:c6:0f:88:3c:
44:15:45:9d:ae:9b:d2:90:d6:e6:63:ae:01:57:ec:
cb:51:f8:d6:ff:fd:1d:17:4f:01:be:f3:40:ee:2d:
6b:ad:c5:4d:0c:be:bf:83:ea:d6:dc:42:e4:dc:d8:
35:52:58:88:ac:05:98:0a:61:77:96:d4:1d:45:37:
f2:b1:2b:97:d3:26:9b:0c:7d:84:e6:ca:a4:70:be:
c9:fa:fd:09:d1:9d:5b:45:40:da:50:93:b0:7e:7b:
7f:e0:02:e5:6b:01:f6:ea:0e:3d:de:11:a2:f3:8f:
f4:02:c3:d5:31:5f:5c:22:98:57:00:01:ea:39:87:
96:d6:8d:98:14:f4:32:18:e8:3d:a9:28:06:a6:30:
64:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:04:84:30:4A:3E:8B:87:97:3A:08:0F:C8:2E:21:D7:6A:7D:99:19
X509v3 Authority Key Identifier:
keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:2d:29:fb:91:25:f9:80:9b:e9:0c:e5:7d:63:c1:06:13:20:
49:de:25:f0:d5:3d:0a:a6:1f:0e:d6:ed:8a:42:b9:c9:21:23:
5c:65:7b:38:e2:76:f6:25:2e:2f:6b:49:c8:35:22:99:35:f4:
a3:82:68:29:32:1f:42:e2:fd:19:35:b1:4b:5c:4c:0c:5b:0e:
11:06:64:1b:96:4b:18:73:50:7f:aa:5a:25:5d:6a:af:11:ac:
36:47:a9:aa:8e:20:ae:cc:16:17:06:61:48:de:d2:3b:a7:9d:
ec:49:78:c5:81:06:4e:71:48:ab:3b:54:26:79:81:f6:b3:08:
3e:dc:01:6f:b8:5f:9a:06:f4:37:08:31:fd:95:de:4f:f4:f8:
d7:57:24:d4:f6:15:a6:8a:8c:0d:b9:86:82:da:60:7a:23:b1:
09:6d:98:1e:d8:ef:9c:6f:77:58:18:ab:c8:09:80:f8:d3:ee:
33:a4:30:3e:67:9f:d6:d6:52:68:58:a7:6f:e3:d8:84:3b:82:
77:d6:7c:83:78:68:f2:eb:d9:65:3f:b3:21:c5:71:85:17:6f:
66:2a:fc:3d:86:80:98:fa:7a:4e:bf:c4:ae:22:0c:8a:3e:09:
cc:d7:f3:a0:d6:6b:cc:bd:1d:21:e5:98:62:5d:b5:55:d9:be:
25:8d:2d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:59 2026 by rpki-client