
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
File: T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json)
Hash identifier: C0DnG3tthEMxefr2GNKeL+4AViHWanF/26o+NwgT4FI=
Subject key identifier: 62:53:CA:00:23:48:9C:6F:B9:F3:68:6B:67:C2:AE:19:DB:8F:6E:3F
Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4
Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
Certificate serial: 087D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
Manifest number: 0867
Signing time: Thu 16 Apr 2026 20:39:44 +0000
Manifest this update: Thu 16 Apr 2026 20:39:43 +0000
Manifest next update: Thu 23 Apr 2026 20:39:43 +0000
Files and hashes: 1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: SJNp0dVigKxrO3FHDJRyTCDqFaZR8fqd9Y10DnX4nzM=)
2: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: kBeeEqAw0diDfwSiGukPQsABNUsAeKM1rhQVHNmy2e8=)
3: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: 13j05vQUfvPRrMenp6QmYgbweEm9kfIO8RUApE0qUPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl
rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:39:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2173 (0x87d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE39F, serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
Validity
Not Before: Apr 16 20:39:43 2026 GMT
Not After : Apr 23 20:39:43 2026 GMT
Subject: CN=69e14910-4b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:02:61:93:3d:d4:b6:41:fa:4f:e8:1d:b0:a3:
c6:fa:5e:af:5d:63:06:6c:2a:3c:73:3f:b6:dc:95:
f6:2f:9a:f2:8a:de:5a:45:f4:14:6c:45:46:ed:a4:
c3:ae:31:90:b9:48:b3:9b:6f:4d:db:7a:55:cb:f3:
bf:55:b9:2a:14:0f:57:bd:9a:8d:67:e1:a8:41:85:
21:17:dc:b1:af:ea:91:32:43:78:64:e6:cb:6d:89:
69:cf:20:8a:67:72:e6:a7:a7:4f:7a:85:bc:da:42:
7f:e3:74:f7:3f:5d:2e:3f:2b:4e:ab:9d:8e:1a:02:
29:1f:d4:d3:fd:9a:44:fc:c7:eb:7b:2c:9c:e0:4e:
37:9c:60:04:9f:19:c1:c1:e3:e2:9b:f5:08:8e:a9:
46:bc:ca:0a:4d:a1:04:56:b0:ec:34:b2:29:3e:dc:
56:70:f3:b8:cc:e6:d6:79:f0:e4:b5:62:e8:10:39:
cf:b3:c8:74:4d:32:04:c6:1a:b6:a9:eb:63:f0:03:
d7:12:78:ac:91:e5:ca:6d:9c:f5:cc:2e:37:07:c5:
d6:3e:d3:2c:f6:96:75:94:60:f3:96:4c:b9:d6:24:
0a:25:44:12:67:f9:6a:0c:ea:62:a0:74:61:b1:48:
12:f2:7c:74:61:6e:6b:92:38:88:68:c2:cb:a4:ec:
a6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:53:CA:00:23:48:9C:6F:B9:F3:68:6B:67:C2:AE:19:DB:8F:6E:3F
X509v3 Authority Key Identifier:
keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:6c:5d:cb:6a:34:2c:c8:ee:2b:79:13:5c:5e:19:14:2b:61:
64:6c:27:02:6e:f0:20:53:52:95:af:53:7e:7c:92:75:ca:5e:
75:76:7d:12:b0:28:a9:38:df:5a:c4:16:9b:79:32:94:72:dc:
ec:23:24:35:f5:50:cb:5e:7b:c5:5a:43:09:a0:ca:7e:69:de:
a5:91:d4:a7:d5:a4:ba:81:ce:94:68:14:d4:bd:bb:af:08:9a:
77:c6:ee:93:22:a1:22:37:a8:8d:81:31:18:25:f9:6d:9c:53:
1c:61:2a:18:3f:68:15:21:e8:96:97:4a:58:6f:29:0c:4f:9f:
af:29:65:cc:1c:0b:64:ed:7b:7b:43:a2:9a:f2:cb:49:e6:f0:
6e:a1:84:c9:bd:f5:d5:3f:ea:3d:4a:e8:98:c6:18:fa:85:2b:
2d:48:cf:f4:63:c0:c9:e9:44:0d:e8:11:b5:16:fe:9c:03:fc:
c9:b4:41:2b:5b:57:87:2e:4f:af:83:22:fe:a3:a7:de:1b:be:
21:df:72:3a:bd:8d:4f:6b:c9:14:aa:cb:9a:f7:d1:b2:5e:ac:
fa:ca:90:a0:3b:4c:5c:36:34:10:42:d5:83:c7:aa:c8:e7:18:
b1:c4:06:71:80:a9:49:14:22:f7:e6:9c:ed:38:89:99:d9:ed:
16:61:0b:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UzOUYxMTAvBgNVBAUTKDRGRkZBQzcxNzgxMzM5MkVFMUM4NzZBMzIxNjcxRTFE
NkMyQUI5QjQwHhcNMjYwNDE2MjAzOTQzWhcNMjYwNDIzMjAzOTQzWjAYMRYwFAYD
VQQDEw02OWUxNDkxMC00YjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzwJhkz3UtkH6T+gdsKPG+l6vXWMGbCo8cz+23JX2L5ryit5aRfQUbEVG7aTD
rjGQuUizm29N23pVy/O/VbkqFA9XvZqNZ+GoQYUhF9yxr+qRMkN4ZObLbYlpzyCK
Z3Lmp6dPeoW82kJ/43T3P10uPytOq52OGgIpH9TT/ZpE/Mfreyyc4E43nGAEnxnB
wePim/UIjqlGvMoKTaEEVrDsNLIpPtxWcPO4zObWefDktWLoEDnPs8h0TTIExhq2
qetj8APXEniskeXKbZz1zC43B8XWPtMs9pZ1lGDzlky51iQKJUQSZ/lqDOpioHRh
sUgS8nx0YW5rkjiIaMLLpOymzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGJTygAj
SJxvufNoa2fCrhnbj24/MB8GA1UdIwQYMBaAFE//rHF4Ezku4ch2oyFnHh1sKrm0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Ri9DMTVDNDFCNEZE
NTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9TN2h5SGFqSVdjZUhXd3F1
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RfLXNjWGdUT1M3aHlIYWpJV2NlSFd3cXViUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTM5Ri9DMTVDNDFCNEZENTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9T
N2h5SGFqSVdjZUhXd3F1YlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABmxdy2o0LMjuK3kTXF4ZFCthZGwnAm7wIFNSla9TfnySdcpedXZ9ErAoqTjf
WsQWm3kylHLc7CMkNfVQy157xVpDCaDKfmnepZHUp9WkuoHOlGgU1L27rwiad8bu
kyKhIjeojYExGCX5bZxTHGEqGD9oFSHolpdKWG8pDE+fryllzBwLZO17e0OimvLL
SebwbqGEyb311T/qPUromMYY+oUrLUjP9GPAyelEDegRtRb+nAP8ybRBK1tXhy5P
r4Mi/qOn3hu+Id9yOr2NT2vJFKrLmvfRsl6s+sqQoDtMXDY0EELVg8eqyOcYscQG
cYCpSRQi9+ac7TiJmdntFmELRA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:07 2026 by rpki-client