
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
File: tLEObLONU2XQVOjb6Q808sOIsQw.mft (raw, json)
Hash identifier: Dg8dLG6YDVNEHXXd5/Cy9M3OwVOXJ9POWGEcLfzPqrc=
Subject key identifier: E9:FE:FD:E7:AD:D7:EA:36:5F:E4:A7:98:5E:C4:5D:5D:93:0A:0C:0C
Authority key identifier: B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C
Certificate issuer: /CN=A91CE3A3/serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
Certificate serial: 0D5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
Manifest number: 0D2A
Signing time: Fri 12 Jun 2026 18:11:08 +0000
Manifest this update: Fri 12 Jun 2026 18:11:08 +0000
Manifest next update: Fri 19 Jun 2026 18:11:08 +0000
Files and hashes: 1: tLEObLONU2XQVOjb6Q808sOIsQw.crl (hash: 9s6gPz0neFS3hbA9MeRooDFr6dKvg1CtuWQyoUdGhQs=)
2: 618AD7B6638A11F08BC2A840C4F9AE02.roa (hash: l1iCGSn/PX7oFU8pYAYmto407lNna+dcfVIeQPwpey4=)
3: 610856EC638A11F08BC2A840C4F9AE02.roa (hash: hFVkKE+Qi5ASFcR8wJP4hxF2ONROpTw8ANjmt7CoeCQ=)
4: 30256B5CF7B911EEAB0C6C36C4F9AE02.roa (hash: 98uYds8I1pxO4Y6dKdHlz74HRamQ9x93aGa9N7uQZao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl
rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3421 (0xd5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3A3, serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
Validity
Not Before: Jun 12 18:11:08 2026 GMT
Not After : Jun 19 18:11:08 2026 GMT
Subject: CN=6a2c4bbc-5b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:d9:ee:5c:f9:5d:9f:21:4f:92:d5:47:1f:
f9:9a:e2:7b:97:f4:f5:a5:53:e8:97:f9:1c:3d:16:
ab:bb:10:5e:b2:61:b0:78:bc:bb:e8:42:b9:a2:6c:
64:73:64:3c:da:7a:db:c0:e5:dd:1a:27:f9:3e:68:
94:4c:f6:8c:04:28:6a:cc:34:a5:3d:02:dc:1c:cd:
69:a2:a2:87:81:a4:68:26:b7:c9:54:c1:3f:4f:f3:
f1:57:3f:ec:2c:2b:28:ae:d4:41:5d:3a:41:1e:9a:
24:2f:f9:21:01:2c:7c:18:fd:69:ce:b7:e2:c3:35:
07:d7:33:ad:62:eb:54:d9:17:98:d8:e4:03:86:e7:
85:28:a3:dd:2f:4d:5f:b6:ca:65:61:95:9b:80:77:
60:86:c1:6f:24:aa:88:35:e3:81:fd:f9:30:86:3e:
62:19:ee:7d:4b:0d:f0:b6:4f:29:1c:13:5f:87:e6:
85:9c:96:cb:c8:dc:da:60:13:6e:4c:46:7e:17:72:
67:87:dc:96:ea:5a:a9:0c:f9:65:c5:8e:72:bb:8e:
9a:c1:a7:ba:e9:b1:21:7f:e6:75:fc:71:6d:42:bd:
18:e3:0c:65:f6:3c:52:91:b1:1d:20:61:97:d8:f9:
d1:af:85:13:24:8c:c1:05:dd:3e:7b:c7:f2:4e:e2:
d8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FE:FD:E7:AD:D7:EA:36:5F:E4:A7:98:5E:C4:5D:5D:93:0A:0C:0C
X509v3 Authority Key Identifier:
keyid:B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a0:76:4e:0b:f5:7b:9a:5e:38:f1:d6:c1:5b:ad:30:9b:ad:
3b:ac:57:32:b0:9d:d4:dd:89:52:02:c1:f0:e3:e7:40:65:33:
25:21:b4:45:29:49:e0:b0:f9:3a:8a:01:ba:6e:88:53:f9:0b:
81:45:8b:17:5a:b6:82:82:9e:0d:b2:de:da:3c:d9:47:85:e8:
46:a6:ea:4a:c5:29:1e:39:2f:22:81:e6:f4:e7:5c:99:11:44:
22:86:73:02:c6:d7:65:2a:3a:aa:c2:02:0e:f4:50:31:1c:52:
2c:f4:f9:a8:0a:07:d3:c5:62:5d:27:98:4b:59:bf:db:f9:96:
7b:4e:34:41:ba:98:0a:2a:44:f1:c2:3a:76:f4:d2:79:75:86:
7b:66:ec:b6:dc:32:4f:b9:f1:3b:a4:fe:a9:b6:9c:4c:7a:50:
16:49:ac:5a:ae:12:54:2c:88:bd:25:cf:7f:bd:ac:6c:06:b8:
c5:33:df:0e:32:bb:4b:64:25:ef:16:3e:1d:08:88:06:5f:9a:
c9:76:3c:65:83:d3:bc:82:6e:83:16:a7:a8:d7:1d:4e:0a:4f:
e1:2b:44:a5:1a:6d:4c:1f:1b:da:b5:9d:93:07:06:ab:a8:0c:
19:1f:7e:be:5d:fc:65:1e:59:a4:58:f3:a7:a2:9f:a9:8e:6d:
21:bf:58:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:01 2026 by rpki-client