
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/tSBT1BwEGQhTHAz26tfzlryctl4.mft
File: tSBT1BwEGQhTHAz26tfzlryctl4.mft (raw, json)
Hash identifier: 26HoR323abZwk0wLaCT0+ITS4AIUUI++pLhIl6I+ork=
Subject key identifier: 42:B5:87:08:72:0D:8D:5A:2A:F6:BC:14:A2:E3:21:4C:A0:99:F1:D6
Authority key identifier: B5:20:53:D4:1C:04:19:08:53:1C:0C:F6:EA:D7:F3:96:BC:9C:B6:5E
Certificate issuer: /CN=A91CD883/serialNumber=B52053D41C041908531C0CF6EAD7F396BC9CB65E
Certificate serial: 5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSBT1BwEGQhTHAz26tfzlryctl4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/tSBT1BwEGQhTHAz26tfzlryctl4.mft
Manifest number: 59
Signing time: Sun 11 Oct 2026 08:45:32 +0000
Manifest this update: Sun 11 Oct 2026 08:45:31 +0000
Manifest next update: Sun 18 Oct 2026 08:45:31 +0000
Files and hashes: 1: tSBT1BwEGQhTHAz26tfzlryctl4.crl (hash: jDr2NFSPsTLDDGvTRsvP6p63KXaIOPuGQaRJ6JCYHjE=)
2: 17D6C97C3D7D11F1864FF013BB833773.roa (hash: GGmxmbtP7l6hq2pSZ0GpfnYrJImoQ0VE16XaMS6Xk4g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/tSBT1BwEGQhTHAz26tfzlryctl4.crl
rsync://rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/tSBT1BwEGQhTHAz26tfzlryctl4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSBT1BwEGQhTHAz26tfzlryctl4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 08:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD883, serialNumber=B52053D41C041908531C0CF6EAD7F396BC9CB65E
Validity
Not Before: Oct 11 08:45:31 2026 GMT
Not After : Oct 18 08:45:31 2026 GMT
Subject: CN=6acb4cac-2570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:16:72:64:a5:84:7a:e5:57:7e:ca:aa:75:
b6:e1:d7:17:da:8d:d6:90:e9:af:b2:89:23:db:e5:
b7:60:f5:ee:6a:28:be:b9:ef:f2:6d:81:d6:5b:c2:
e6:1f:ce:30:c8:2e:78:f2:15:7b:bc:bd:f2:b6:46:
6b:9e:b8:05:1e:a2:da:c0:bc:3d:2e:71:c8:75:51:
24:8b:4c:c8:27:cc:04:57:ed:06:55:63:cb:27:71:
9a:8f:88:e4:4c:7b:66:34:b3:39:31:7c:38:f3:e3:
cc:15:26:38:de:45:d6:61:3b:d5:0f:46:b4:84:60:
68:be:dd:24:b9:af:9f:80:67:86:5b:9b:2e:b0:9f:
8e:cd:a2:66:0b:39:11:9b:91:de:03:c2:11:73:57:
03:b5:ff:99:28:6d:c8:5b:c1:32:6e:d2:37:f3:9b:
7e:cf:88:88:81:c5:41:f8:cd:eb:20:91:30:42:75:
58:a9:6d:c4:48:7a:eb:af:70:43:92:ff:9e:20:cb:
01:46:d6:19:9e:d1:70:8d:b4:08:e6:65:9a:26:b5:
24:3b:ae:ad:d7:21:ae:8f:b4:83:60:b4:93:23:ce:
e9:c4:a3:99:a4:52:be:67:2b:b7:cf:e0:31:f4:f7:
c6:0c:a6:94:f9:bd:77:42:10:ec:08:c8:f2:7e:55:
f9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B5:87:08:72:0D:8D:5A:2A:F6:BC:14:A2:E3:21:4C:A0:99:F1:D6
X509v3 Authority Key Identifier:
keyid:B5:20:53:D4:1C:04:19:08:53:1C:0C:F6:EA:D7:F3:96:BC:9C:B6:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/tSBT1BwEGQhTHAz26tfzlryctl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSBT1BwEGQhTHAz26tfzlryctl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/tSBT1BwEGQhTHAz26tfzlryctl4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:52:be:80:59:ef:4d:f9:06:bd:91:1a:ac:01:8b:24:e3:7a:
3a:e6:11:d1:20:a0:e9:c4:8c:94:72:5a:ca:e2:69:30:3f:b4:
90:c1:5b:bd:9f:be:56:73:52:ed:be:5b:e6:f8:d8:44:40:05:
a7:ed:54:d4:d3:8b:f9:c9:8d:78:b4:87:0a:64:81:46:f1:1a:
69:d2:bc:91:65:5f:62:b6:54:eb:be:59:7e:9c:cd:ad:a9:07:
bb:b7:ed:18:64:6a:be:bc:cf:13:c3:d6:4e:54:69:7d:23:35:
6d:f5:bc:43:a2:a8:58:a0:14:cc:9b:36:52:90:68:df:eb:77:
6c:d6:49:f0:16:63:71:92:cf:6b:69:a4:45:66:b5:d5:01:f0:
3f:68:b4:85:19:23:86:d9:ac:14:0b:01:5b:04:a3:f2:cf:8f:
1b:96:8c:30:89:b3:5b:c2:b4:26:ba:56:84:f3:70:d4:89:29:
0e:ab:e1:eb:aa:93:54:06:8f:1f:8f:51:03:07:be:03:7a:5d:
6e:c9:96:18:5e:31:bb:ab:3d:33:c4:0e:c1:84:84:bc:1f:d2:
52:b2:47:a7:1a:11:bb:f9:c1:e1:47:1f:8f:d1:3c:98:3c:5b:
48:ae:b2:e0:a3:9e:48:19:b9:30:4b:30:b2:14:58:4b:94:43:
fe:cd:9d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:58:49 2026 by rpki-client