
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
File: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft (raw, json)
Hash identifier: JhXWLMaBvCmyQu7boBcZwrckRI9rIbDx0zJO6FEdcdI=
Subject key identifier: 43:FD:96:31:80:1E:69:BA:9F:10:D1:E7:4B:48:54:CC:C6:B5:64:7A
Authority key identifier: 4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27
Certificate issuer: /CN=A91C7991/serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427
Certificate serial: 0926
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
Manifest number: 091B
Signing time: Thu 16 Apr 2026 20:10:29 +0000
Manifest this update: Thu 16 Apr 2026 20:10:29 +0000
Manifest next update: Thu 23 Apr 2026 20:10:29 +0000
Files and hashes: 1: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl (hash: SgHNzkgOyEgHJY6M68r4KtOVeNmTg3tOzL/WUegcDZ8=)
2: 456CD12E5F0111ECAE4F0286C4F9AE02.roa (hash: pJ8W3JL1SvT+9bYhgevlA/zqowg96Jc82pj7ld8nZi8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl
rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2342 (0x926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7991, serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427
Validity
Not Before: Apr 16 20:10:29 2026 GMT
Not After : Apr 23 20:10:29 2026 GMT
Subject: CN=69e14235-863d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:95:09:27:6d:9d:de:53:66:78:f0:8b:3f:
20:25:f9:86:2e:30:1a:31:ad:9c:c6:87:39:07:4b:
30:66:b5:a0:d1:8c:77:93:d6:8e:79:4d:ef:20:0f:
28:81:2e:13:68:3e:75:bd:a9:ba:cd:f4:6c:63:f3:
10:99:95:5d:c2:47:e4:45:54:69:27:ff:6c:ec:b7:
e5:7d:b3:de:14:9d:c7:43:a2:d8:74:98:c7:75:0b:
40:90:e5:8b:68:73:4a:d2:30:1f:20:68:b9:fb:29:
42:06:e6:ca:09:6d:bd:74:fa:91:b6:c8:0e:2e:2f:
99:b6:bb:06:72:09:d3:c2:ac:11:03:0c:15:2d:85:
1b:e6:fd:76:20:7b:71:1b:f4:dc:eb:71:20:dc:52:
c0:da:bb:34:4f:16:c4:7e:b3:36:8f:a4:7f:c6:70:
31:ba:22:54:36:a6:fc:d1:61:57:a8:03:80:8c:1c:
b2:e3:84:78:53:99:e6:9c:ac:7e:b2:2b:bb:a2:58:
3d:6b:f3:4b:51:9a:55:91:e5:dc:5e:42:1c:e2:a2:
0d:ca:66:be:57:6d:e6:df:83:e9:ee:ac:be:f6:bf:
7b:d3:a7:3e:d7:26:14:16:74:a2:86:84:53:0b:df:
f9:11:2e:d0:78:ab:8d:43:28:d4:b1:60:a1:42:cb:
99:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FD:96:31:80:1E:69:BA:9F:10:D1:E7:4B:48:54:CC:C6:B5:64:7A
X509v3 Authority Key Identifier:
keyid:4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1b:9f:da:af:3e:f4:84:53:ff:96:7e:50:25:84:39:b0:38:
07:7e:76:58:c7:15:5e:2c:29:c9:da:0b:52:ee:66:ef:34:80:
f3:24:3c:7e:ee:5d:4c:16:82:eb:7c:0e:ce:d4:a2:e5:68:0e:
2e:e2:d4:92:7e:32:b9:c2:88:23:d5:5e:62:e0:a4:9e:61:75:
2d:71:0a:db:bc:ff:97:f5:0c:a1:f4:d2:52:a4:f8:31:2c:c9:
18:94:8d:d7:e9:ea:cc:43:ec:19:7b:26:9c:54:6b:09:ee:8b:
19:68:36:99:92:80:41:99:db:85:43:eb:f1:dc:55:a0:13:a1:
56:1d:85:e9:f0:2e:d7:b8:b4:5a:50:75:2a:32:9a:1c:f8:5a:
e2:bd:f3:74:20:da:a0:62:2f:59:85:70:19:44:cb:12:f4:a3:
40:3f:21:54:78:2e:1f:db:6c:6b:81:90:81:22:86:82:d7:41:
05:1e:18:ba:ac:3e:af:59:3b:71:88:7b:e8:8d:f9:3e:0f:0b:
48:e4:52:c2:57:39:a0:49:3f:0e:58:5c:b9:70:3f:dc:be:cf:
fc:c1:c2:2f:4e:ff:ac:3c:14:d8:4a:08:1c:d0:77:ed:43:4d:
1e:6e:a1:83:46:ea:90:33:0c:0b:08:f4:df:27:d0:f6:31:7a:
0a:0f:06:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc5OTExMTAvBgNVBAUTKDRDMjY5OUQyMTNERDVENTk5QjBFQzBFNDYzQjk0ODRG
REIyMkY0MjcwHhcNMjYwNDE2MjAxMDI5WhcNMjYwNDIzMjAxMDI5WjAYMRYwFAYD
VQQDEw02OWUxNDIzNS04NjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApGGVCSdtnd5TZnjwiz8gJfmGLjAaMa2cxoc5B0swZrWg0Yx3k9aOeU3vIA8o
gS4TaD51vam6zfRsY/MQmZVdwkfkRVRpJ/9s7LflfbPeFJ3HQ6LYdJjHdQtAkOWL
aHNK0jAfIGi5+ylCBubKCW29dPqRtsgOLi+ZtrsGcgnTwqwRAwwVLYUb5v12IHtx
G/Tc63Eg3FLA2rs0TxbEfrM2j6R/xnAxuiJUNqb80WFXqAOAjByy44R4U5nmnKx+
siu7olg9a/NLUZpVkeXcXkIc4qINyma+V23m34Pp7qy+9r9706c+1yYUFnSihoRT
C9/5ES7QeKuNQyjUsWChQsuZ2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEP9ljGA
Hmm6nxDR50tIVMzGtWR6MB8GA1UdIwQYMBaAFEwmmdIT3V1Zmw7A5GO5SE/bIvQn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5MS83QzdCMUY2NkMz
NUExMUVBQThFQ0I2N0ZDNEY5QUUwMi9UQ2FaMGhQZFhWbWJEc0RrWTdsSVQ5c2k5
Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RDYVowaFBkWFZtYkRzRGtZN2xJVDlzaTlDYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Nzk5MS83QzdCMUY2NkMzNUExMUVBQThFQ0I2N0ZDNEY5QUUwMi9UQ2FaMGhQZFhW
bWJEc0RrWTdsSVQ5c2k5Q2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArBuf2q8+9IRT/5Z+UCWEObA4B352WMcVXiwpydoLUu5m7zSA8yQ8fu5dTBaC
63wOztSi5WgOLuLUkn4yucKII9VeYuCknmF1LXEK27z/l/UMofTSUqT4MSzJGJSN
1+nqzEPsGXsmnFRrCe6LGWg2mZKAQZnbhUPr8dxVoBOhVh2F6fAu17i0WlB1KjKa
HPha4r3zdCDaoGIvWYVwGUTLEvSjQD8hVHguH9tsa4GQgSKGgtdBBR4Yuqw+r1k7
cYh76I35Pg8LSORSwlc5oEk/DlhcuXA/3L7P/MHCL07/rDwU2EoIHNB37UNNHm6h
g0bqkDMMCwj03yfQ9jF6Cg8Gxw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:42 2026 by rpki-client