
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
File: TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json)
Hash identifier: 7JuHV22QXqcFJUCxJIyC8EyBDS02ah1QAnA3ZDPHMgM=
Subject key identifier: 4A:5E:AC:0A:3E:42:CA:2C:F0:7E:3F:3C:0F:4F:97:83:5E:1D:59:63
Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59
Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159
Certificate serial: 0207
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
Manifest number: 0201
Signing time: Mon 02 Mar 2026 02:46:53 +0000
Manifest this update: Mon 02 Mar 2026 02:46:51 +0000
Manifest next update: Mon 09 Mar 2026 02:46:51 +0000
Files and hashes: 1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: uH7tGLAz15I4gHL9ZmP9nogbgcpW2jxf2Tbpiz6d6vg=)
2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: LTD30aegM2n/FIPS7PJPfAtlPCR/CQg1h9hsg7fN65E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl
rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C05E4, serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159
Validity
Not Before: Mar 2 02:46:51 2026 GMT
Not After : Mar 9 02:46:51 2026 GMT
Subject: CN=69a4fa1d-1306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:15:d4:c7:19:91:d8:59:e4:02:a3:df:c8:
cb:50:42:9b:93:57:4d:86:78:6e:c7:1f:74:83:48:
1f:b6:03:00:77:63:f6:97:18:a5:c8:29:0d:23:bd:
4a:8e:66:7e:27:2a:89:a9:8b:42:5d:28:e6:05:26:
e4:df:d5:ba:58:04:6f:83:bc:55:ba:9c:f2:69:5d:
fb:e4:f8:e7:c4:6b:82:dc:7b:d8:bb:a1:78:02:a1:
2e:d5:ba:43:1a:23:49:04:f5:d5:8f:f2:45:96:ce:
31:be:7c:18:a6:4b:e9:dd:1f:3e:c9:8f:17:45:37:
4e:0c:e2:b1:9c:99:b3:fe:80:43:08:88:49:d8:bb:
83:59:35:d7:60:6a:3b:96:9d:1d:d6:95:c3:75:ea:
5a:1a:99:7e:35:04:d9:2e:8d:c9:73:85:c6:d4:b9:
e8:b2:e1:93:89:2b:e8:48:f9:3d:fd:db:1b:cc:80:
2b:60:6b:77:c1:84:fd:82:3d:57:d3:99:43:65:c6:
12:72:04:57:6f:49:d0:41:ca:04:7a:4c:a5:3e:9b:
36:be:f1:60:e0:46:32:2b:8b:6c:9f:03:94:39:3f:
f2:32:12:d9:12:f5:89:20:51:a0:43:68:f0:0f:7d:
61:dd:c0:1f:bc:1a:4b:6c:9a:97:31:d9:53:b9:9c:
8a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5E:AC:0A:3E:42:CA:2C:F0:7E:3F:3C:0F:4F:97:83:5E:1D:59:63
X509v3 Authority Key Identifier:
keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:57:93:9b:fa:42:7c:0c:67:d9:c1:75:cc:f4:67:f9:12:c7:
bd:31:a5:72:e9:b7:3b:a6:af:92:b6:d0:67:b5:14:95:f0:33:
60:67:40:7b:de:44:f6:6c:80:a2:84:a4:e7:35:40:59:b9:a3:
30:05:2e:f7:c5:58:b6:a8:f9:21:a9:b4:fa:54:3f:85:ae:ee:
b5:2c:da:e2:7c:21:09:00:6b:c6:fb:43:21:87:ae:d4:76:d0:
88:20:cf:e8:68:03:d3:0d:fa:82:6b:be:e4:87:fe:63:c0:c7:
f6:6b:77:a0:c2:30:d9:44:52:b3:19:0e:59:07:ec:ba:bc:be:
38:9d:a9:22:19:c8:26:ff:e5:43:10:4a:e1:57:ac:c8:50:9e:
c6:d4:3c:8c:02:ff:ff:d3:c7:3d:93:5d:59:e3:1f:93:5b:af:
bf:42:46:72:8c:74:f2:77:9b:1d:3e:40:56:b0:e0:63:5c:0e:
61:52:7b:a8:d0:e2:90:65:ec:41:dc:2d:e6:99:e0:f5:09:55:
e8:c4:cc:23:7c:c9:5d:7d:b9:86:5b:7e:a8:e8:61:53:29:53:
b0:cd:52:5f:af:9a:f1:37:b8:ff:a6:3c:cd:e8:14:b0:51:4f:
9a:27:6b:2d:e5:09:8e:ad:e3:e1:5b:73:37:99:90:96:f8:ec:
da:4e:38:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:39:43 2026 by rpki-client