
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
File: TN7H1CHxboUWcqgSOd0Y_IweOVY.mft (raw, json)
Hash identifier: nXbdPhZ6SyJ75aB2gn/UnYBac3+eJUb9ZuJp1S2bChs=
Subject key identifier: 68:1A:BB:FC:35:7A:35:1C:61:D9:96:6D:D9:9E:BB:21:E1:D7:1B:0B
Authority key identifier: 4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56
Certificate issuer: /CN=A91D0A62/serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
Certificate serial: 05A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
Manifest number: 059D
Signing time: Mon 27 Jul 2026 00:05:18 +0000
Manifest this update: Mon 27 Jul 2026 00:05:18 +0000
Manifest next update: Mon 03 Aug 2026 00:05:18 +0000
Files and hashes: 1: TN7H1CHxboUWcqgSOd0Y_IweOVY.crl (hash: 7BOyWP1eU8UZvI5LOoKa327OJME7JfZZo8+5cNZvVdI=)
2: C54BA97E283311ECBE887F3BC4F9AE02.roa (hash: nCKVMdvYXIdspAc77iuSnxMdgz1R5Tl8t85tUkNQu3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl
rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1444 (0x5a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0A62, serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
Validity
Not Before: Jul 27 00:05:18 2026 GMT
Not After : Aug 3 00:05:18 2026 GMT
Subject: CN=6a66a0be-8b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:ff:14:05:88:0b:76:bb:a8:fd:08:9e:20:
79:5d:85:2f:ab:4e:c5:3f:36:13:d6:85:13:23:c0:
15:fd:6f:61:3c:94:43:96:5f:bd:4b:a2:bf:d2:74:
4e:32:aa:72:f8:c5:cd:82:ba:6e:2c:35:c3:cb:bf:
a9:78:6c:f1:98:a0:29:04:ff:45:f2:26:58:3f:18:
28:60:33:22:b1:55:6c:94:6f:67:14:11:3b:9f:bd:
8c:ba:1e:33:25:ea:c0:7a:69:11:6b:1a:4f:ef:1a:
54:07:53:eb:53:b2:5f:3c:34:ed:64:2b:cf:01:8c:
ea:9f:a9:d6:14:5b:0c:74:b9:c5:d8:24:9d:1e:43:
1d:3f:35:9e:d0:a4:d7:f2:0d:da:53:17:39:cd:cc:
20:2d:22:4f:6a:27:85:46:6a:68:9b:c6:4a:8a:5a:
4d:fd:0e:8c:36:32:c6:12:2c:c7:01:7b:00:e8:b7:
1d:fa:ea:55:23:68:1c:0e:50:d3:a4:05:70:60:e6:
dc:5d:bc:f3:07:bd:cc:64:e0:5a:f4:aa:03:f8:57:
fb:9e:18:fe:ef:f5:b0:a4:91:77:7d:be:40:49:64:
60:93:c0:87:68:65:21:bc:e4:7e:e2:23:fc:b2:56:
5f:50:ee:3e:9e:38:b1:a5:38:c5:1b:60:5b:3b:6e:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1A:BB:FC:35:7A:35:1C:61:D9:96:6D:D9:9E:BB:21:E1:D7:1B:0B
X509v3 Authority Key Identifier:
keyid:4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:9d:44:af:0d:be:e7:90:a0:e9:56:b1:6a:24:01:6a:3b:be:
85:74:0f:f1:b0:1c:f4:29:91:56:86:49:96:63:9e:00:bf:38:
7d:ce:2a:1e:04:8c:ed:d3:82:14:3e:6a:ab:bd:26:e5:91:e3:
b7:99:b0:f7:3c:b2:cb:00:75:06:c7:eb:96:25:ae:6a:40:a0:
bc:6d:f9:77:ec:80:fe:68:18:72:54:e2:32:11:48:8b:84:90:
c4:09:1e:d8:b9:3c:f9:62:d6:a0:99:92:60:c8:77:0b:2a:e6:
bb:fe:da:70:9b:f4:16:83:c2:af:ff:da:c3:a4:74:b1:15:da:
53:bf:20:56:bd:18:85:10:92:fa:95:8e:81:54:a6:2a:b6:fc:
3d:bc:fc:2a:93:e7:3d:47:cd:61:30:ea:15:1f:34:9b:89:f5:
f0:f5:0c:27:7a:cc:f9:5e:5c:43:fb:ee:b6:bd:53:e7:1d:54:
51:17:b6:06:08:0f:9a:10:c7:05:4e:b7:f8:13:c4:a4:d2:7e:
4e:e2:c4:b8:ee:4b:6d:43:14:64:8d:3f:5c:c9:de:03:3b:fa:
46:10:69:e9:f1:cd:84:ed:f2:ec:38:10:23:90:83:4c:7d:7b:
40:2e:71:b8:c6:93:59:00:d2:a1:fc:85:16:5d:8f:25:1e:23:
f7:b6:92:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDBBNjIxMTAvBgNVBAUTKDRDREVDN0Q0MjFGMTZFODUxNjcyQTgxMjM5REQxOEZD
OEMxRTM5NTYwHhcNMjYwNzI3MDAwNTE4WhcNMjYwODAzMDAwNTE4WjAYMRYwFAYD
VQQDEw02YTY2YTBiZS04YjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoqT/FAWIC3a7qP0IniB5XYUvq07FPzYT1oUTI8AV/W9hPJRDll+9S6K/0nRO
Mqpy+MXNgrpuLDXDy7+peGzxmKApBP9F8iZYPxgoYDMisVVslG9nFBE7n72Muh4z
JerAemkRaxpP7xpUB1PrU7JfPDTtZCvPAYzqn6nWFFsMdLnF2CSdHkMdPzWe0KTX
8g3aUxc5zcwgLSJPaieFRmpom8ZKilpN/Q6MNjLGEizHAXsA6Lcd+upVI2gcDlDT
pAVwYObcXbzzB73MZOBa9KoD+Ff7nhj+7/WwpJF3fb5ASWRgk8CHaGUhvOR+4iP8
slZfUO4+njixpTjFG2BbO26G6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGgau/w1
ejUcYdmWbdmeuyHh1xsLMB8GA1UdIwQYMBaAFEzex9Qh8W6FFnKoEjndGPyMHjlW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEE2Mi8xRkE5NkRBMDI4
MzExMUVDOTdBMDEzMTZDNEY5QUUwMi9UTjdIMUNIeGJvVVdjcWdTT2QwWV9Jd2VP
VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RON0gxQ0h4Ym9VV2NxZ1NPZDBZX0l3ZU9WWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MEE2Mi8xRkE5NkRBMDI4MzExMUVDOTdBMDEzMTZDNEY5QUUwMi9UTjdIMUNIeGJv
VVdjcWdTT2QwWV9Jd2VPVlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMZ1Erw2+55Cg6VaxaiQBaju+hXQP8bAc9CmRVoZJlmOeAL84fc4qHgSM7dOC
FD5qq70m5ZHjt5mw9zyyywB1BsfrliWuakCgvG35d+yA/mgYclTiMhFIi4SQxAke
2Lk8+WLWoJmSYMh3Cyrmu/7acJv0FoPCr//aw6R0sRXaU78gVr0YhRCS+pWOgVSm
Krb8Pbz8KpPnPUfNYTDqFR80m4n18PUMJ3rM+V5cQ/vutr1T5x1UURe2BggPmhDH
BU63+BPEpNJ+TuLEuO5LbUMUZI0/XMneAzv6RhBp6fHNhO3y7DgQI5CDTH17QC5x
uMaTWQDSofyFFl2PJR4j97aSjw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:41 2026 by rpki-client