
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
File: TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft (raw, json)
Hash identifier: WQKoHsEyf6hRobiNAIyLmHPaONgKAo7pZ8JyjkNR3+s=
Subject key identifier: 44:F2:37:D9:7B:C4:3E:55:20:07:C3:6B:EF:24:6A:B3:9F:5F:3C:D2
Authority key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D
Certificate issuer: /CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D
Certificate serial: 01A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
Manifest number: 019B
Signing time: Wed 29 Jul 2026 05:31:16 +0000
Manifest this update: Wed 29 Jul 2026 05:31:15 +0000
Manifest next update: Wed 05 Aug 2026 05:31:15 +0000
Files and hashes: 1: TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl (hash: 7ppF1jn714jQEFBQ75q8NHXu/nOFCYzUD2HFDcpKOG8=)
2: 1FC3B0DE1E6F11EFB392D937C4F9AE02.roa (hash: bs1Xgw6z8UHVdG8cs/XzlMBqu7GicIxeKJC8ZxwnNXc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl
rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 05:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C31B7, serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D
Validity
Not Before: Jul 29 05:31:15 2026 GMT
Not After : Aug 5 05:31:15 2026 GMT
Subject: CN=6a699024-d72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:a8:dd:dd:9e:5b:26:a4:03:5d:43:23:ff:
e3:c6:06:6b:06:04:d1:9f:e7:5e:f9:ff:4b:aa:90:
7b:28:7e:2a:bb:b1:04:1e:b3:8f:71:81:21:b7:1f:
08:01:62:d5:af:88:7d:ee:32:0f:65:de:b6:da:7b:
b3:be:c3:d5:ab:3e:94:f0:bf:1e:37:79:d7:d6:45:
56:39:2f:8c:e1:9f:a5:04:a6:17:65:1d:cb:77:b7:
3c:f9:42:b6:db:2b:0b:a7:50:87:0c:16:a0:15:b4:
aa:aa:8f:a8:24:cb:21:e4:68:ab:ae:3f:3a:c1:a9:
03:4a:87:68:3b:04:e0:e8:98:f1:4f:be:d1:bb:40:
25:8d:a1:40:5f:96:39:58:13:a2:3f:42:5c:71:6e:
d6:b6:c6:53:b5:58:14:d3:d4:14:53:9e:7d:d7:4f:
16:58:9d:e2:ad:ca:80:35:30:a7:26:bc:44:42:97:
d7:bc:24:5c:9e:f6:d3:6e:62:08:3a:60:31:66:db:
a5:99:ff:b8:24:38:2e:6f:be:2c:ce:95:d5:b6:0a:
06:4c:ee:ba:9b:86:8f:86:8a:d3:51:12:72:de:b0:
63:7c:cb:c1:69:f0:46:7d:48:cd:1b:75:5e:be:c4:
4f:5b:3c:35:4b:14:6c:8d:6d:58:dc:02:2f:8e:50:
0f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F2:37:D9:7B:C4:3E:55:20:07:C3:6B:EF:24:6A:B3:9F:5F:3C:D2
X509v3 Authority Key Identifier:
keyid:4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:9c:92:0e:43:c3:a0:80:29:85:9a:d0:1c:86:5d:90:93:0a:
a0:7c:50:9d:40:68:b6:1f:2c:87:03:73:5d:41:d8:b8:2e:55:
93:b0:7c:e2:d8:25:e5:63:98:93:85:17:0e:77:5c:ca:a5:9a:
3b:44:36:48:c9:77:38:2e:82:56:de:7d:f3:fe:da:c5:c3:21:
f4:99:d7:74:25:a7:7b:61:ef:4d:b2:da:e8:12:c6:e1:54:ba:
c1:12:41:47:ea:65:33:5b:3d:c1:40:00:2d:df:52:a9:97:94:
43:dd:9c:6a:c8:9e:06:35:03:2a:64:03:3b:99:5f:27:4a:49:
01:c5:cd:d2:7a:25:fa:51:fc:f3:ba:a9:8b:81:dd:76:90:89:
a4:d3:7c:54:fa:56:8b:a8:ed:eb:11:fa:86:a0:8f:25:dc:f3:
f5:cc:09:85:8b:7f:34:77:d6:e9:f7:22:6f:05:e4:98:16:00:
18:1e:b1:78:81:de:46:a8:83:53:d3:a5:5c:fe:87:63:42:b6:
7f:5b:8e:cc:a7:84:dc:6f:bd:1e:72:c8:6f:35:89:6b:79:c1:
16:c5:04:09:97:bd:8e:c6:8b:c3:93:29:e8:1c:b1:c2:ae:52:
b2:29:de:60:06:56:8b:3c:2a:f0:d1:43:86:b7:de:ba:08:36:
6b:9c:74:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:17:22 2026 by rpki-client