
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
File: tgQSzpgJwQxn3eq7oOM1462k_hA.mft (raw, json)
Hash identifier: /xtJGeAVtVkGuc8l0a+5J/crkpvnqVwI+WsKUY3GGsA=
Subject key identifier: DE:8B:F0:F2:A5:A3:32:F6:7F:B8:0D:B9:E6:DD:58:4A:8F:36:8B:90
Authority key identifier: B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10
Certificate issuer: /CN=A91BF306/serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10
Certificate serial: 0237
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
Manifest number: 0231
Signing time: Sat 17 Oct 2026 03:16:23 +0000
Manifest this update: Sat 17 Oct 2026 03:16:23 +0000
Manifest next update: Sat 24 Oct 2026 03:16:23 +0000
Files and hashes: 1: tgQSzpgJwQxn3eq7oOM1462k_hA.crl (hash: qd6CDLecWmHTin0DNmgkfuq9DfVwbsI4ZKLFNkVwhKg=)
2: 3CED465E8E0811EE8450D961C4F9AE02.roa (hash: ziV25lfjtFOT+vBGm4XLNNAFbNMnNRrhayXY3daFNNs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl
rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 03:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567 (0x237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF306, serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10
Validity
Not Before: Oct 17 03:16:23 2026 GMT
Not After : Oct 24 03:16:23 2026 GMT
Subject: CN=6ad2e887-4eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:c7:88:28:fc:1d:41:69:04:98:e6:2a:e9:
5c:c9:46:9d:49:a1:c9:22:67:4f:ad:e6:3c:5c:6b:
30:a9:94:89:8f:6d:61:55:e6:ab:2e:48:3b:32:f8:
7d:46:cb:a7:c8:1f:97:1a:ca:82:8e:45:18:16:94:
dd:86:05:0e:e3:b3:b4:14:b6:20:86:02:6c:40:21:
77:a3:d3:fa:b4:17:99:f7:f7:7f:3d:0d:25:2c:4e:
1d:27:9b:34:4a:2a:cb:e4:3c:76:bc:44:3a:03:a8:
6b:4d:f6:19:4f:7d:57:90:93:1e:f6:c7:c3:63:97:
47:41:d7:ed:52:02:5d:6f:0e:3f:43:2d:62:a0:8a:
27:c9:be:67:73:e8:83:96:ea:7c:48:9c:89:43:ed:
73:57:a4:0f:72:cd:10:0b:b2:fe:1a:fa:42:a6:03:
3c:06:dc:16:60:1a:36:48:25:7f:40:77:fe:c8:62:
de:c6:58:4c:27:1a:0e:dc:da:af:f6:09:ff:92:31:
05:8a:8f:60:90:52:12:c0:b6:d7:12:e2:3e:31:5e:
3b:91:6a:d2:33:f2:a5:5d:d0:3e:4c:d9:a2:0e:d1:
89:41:83:74:44:5c:ef:29:18:09:ee:38:87:29:60:
62:2a:e1:f9:f4:fd:d7:2b:55:02:a6:94:a8:ce:8f:
7b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8B:F0:F2:A5:A3:32:F6:7F:B8:0D:B9:E6:DD:58:4A:8F:36:8B:90
X509v3 Authority Key Identifier:
keyid:B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fb:45:5d:b9:aa:e4:97:1a:94:79:57:12:84:7e:10:a3:8a:
94:77:09:bd:e8:4e:ac:e0:39:7c:7d:1d:50:cb:35:5d:ef:35:
28:42:e7:65:c4:cf:d3:24:6e:90:bc:40:69:d1:64:a0:69:70:
ec:62:51:36:b8:1a:36:41:b7:fe:a6:41:a6:6a:e6:b5:15:b7:
bd:36:ff:a1:c3:35:5f:38:ad:c4:a8:5c:8c:b6:5a:d1:e2:cc:
1d:1c:45:e8:7c:32:43:f5:35:13:6e:a2:34:b2:8a:97:1a:2d:
53:a3:94:66:85:f9:75:2b:32:44:94:b5:65:95:de:4f:6b:d9:
89:7e:a0:f4:a4:8b:87:e8:65:2b:98:2d:87:b7:1a:94:62:b4:
32:6d:c7:0c:ce:da:9b:30:4f:49:9e:31:0d:5b:a8:cc:4e:f6:
20:17:ea:d1:f7:21:81:48:34:6b:ea:7b:54:9f:98:c4:20:51:
49:b0:09:8a:21:5c:c4:71:11:c1:39:c3:ca:04:7f:6a:12:de:
99:12:60:f2:ae:02:cb:7e:25:7c:8e:5a:04:de:29:8b:c7:5c:
8d:36:31:72:16:bb:5f:10:da:be:10:16:43:d8:8d:b7:cc:6d:
b6:6a:1b:b7:87:14:72:df:09:ec:21:19:5a:d5:3d:20:0e:c7:
54:ea:ed:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:13:19 2026 by rpki-client