
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
File: TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json)
Hash identifier: 9yucHhEGmkN5YjNzkxMuQrCV0NBiIc29em5xKps7Bxc=
Subject key identifier: 18:36:99:2A:EC:26:1E:A3:2C:8A:07:9C:0C:E5:BB:17:2A:16:16:17
Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59
Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159
Certificate serial: 0252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
Manifest number: 024C
Signing time: Wed 29 Jul 2026 03:23:17 +0000
Manifest this update: Wed 29 Jul 2026 03:23:16 +0000
Manifest next update: Wed 05 Aug 2026 03:23:16 +0000
Files and hashes: 1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: y9ecRelRGL7OQX7eV5FpbxQOI23mjVEbgMmBkShiSyU=)
2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: LTD30aegM2n/FIPS7PJPfAtlPCR/CQg1h9hsg7fN65E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl
rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 03:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C05E4, serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159
Validity
Not Before: Jul 29 03:23:16 2026 GMT
Not After : Aug 5 03:23:16 2026 GMT
Subject: CN=6a697225-e09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:c7:9e:cd:55:f4:93:d4:97:3e:d7:0e:80:
32:00:01:6c:d9:1d:0a:25:4d:93:23:08:1f:96:d2:
36:46:7e:59:c7:c9:49:b8:25:a3:ef:91:64:19:d8:
86:03:a2:fa:9d:76:3f:1d:71:86:e9:ec:5e:26:0f:
86:85:2e:01:8e:37:a6:0c:72:24:bc:ea:58:52:ef:
08:00:86:eb:60:d9:7e:5a:48:5f:60:f9:d0:b1:39:
d7:06:ff:36:71:18:77:67:5f:3d:84:70:4a:b3:06:
ea:ac:b9:62:55:c6:45:e4:8c:52:22:2c:e5:34:95:
da:fc:c3:a0:ad:c2:81:9e:b2:97:53:72:75:20:cd:
fa:6a:d4:3a:6a:e4:f9:6c:08:2f:76:c8:d3:44:a5:
5e:b2:47:18:9a:c3:76:c9:41:d6:33:51:a4:5a:9d:
1e:45:48:f4:55:49:29:2c:ad:15:f9:ea:52:3b:50:
68:2d:e8:27:71:0c:e8:8b:4c:87:5b:ec:fc:3f:cb:
06:9b:48:68:dd:f6:e1:66:be:8d:9c:25:69:8b:ba:
77:0d:76:44:c6:fa:8f:27:5c:1b:69:2c:ef:12:72:
ea:27:e2:6a:c4:1f:19:d5:46:ee:e1:58:3c:bc:18:
1c:c6:4e:7a:df:5c:32:68:00:68:ac:40:b6:37:0f:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:36:99:2A:EC:26:1E:A3:2C:8A:07:9C:0C:E5:BB:17:2A:16:16:17
X509v3 Authority Key Identifier:
keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:97:fc:c8:51:71:65:9d:7e:22:35:5d:76:d4:54:15:8f:2b:
5b:c1:4f:6a:6c:aa:bf:7e:75:05:5f:4c:00:28:43:eb:58:f1:
ea:93:3f:88:c4:9f:26:b8:e5:84:b2:1f:2c:e3:0e:b4:49:3e:
4b:aa:8a:ed:37:32:ad:c9:9d:cf:42:f4:30:6b:b8:84:2b:fb:
9b:f8:fb:60:3e:53:b6:8d:cc:eb:f5:05:4a:b9:fa:cf:80:81:
ce:10:88:47:3a:62:71:8c:e0:89:37:a5:1e:1b:3c:0b:a9:6d:
fc:89:9a:5c:9b:72:30:aa:75:57:35:ce:04:51:17:e5:05:f9:
45:15:04:c7:aa:68:f4:ca:f2:01:a2:c9:f1:65:a4:0d:d9:75:
87:86:b4:76:3b:99:59:58:ce:4d:ca:52:58:d5:e6:49:f5:8c:
9f:9a:b5:e7:46:1a:8f:40:68:ae:b1:af:84:85:fe:fc:89:39:
ec:39:4a:58:fd:63:73:ae:79:5a:13:be:10:12:19:1c:5c:a4:
85:3a:e5:77:0c:58:bc:22:6a:77:cf:e4:2a:28:82:5e:0e:a4:
62:33:65:28:27:ef:6a:ba:2d:88:ad:4d:62:c6:47:66:76:5e:
28:bc:35:b4:e5:f1:46:4b:ce:eb:cc:25:22:c3:e7:07:ff:b9:
d8:fe:0f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:33:38 2026 by rpki-client