
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
File: TN7H1CHxboUWcqgSOd0Y_IweOVY.mft (raw, json)
Hash identifier: FZ9SdISTdxTcgJDM28MfddSpwJTSpED4oq2LTAlcPtI=
Subject key identifier: F3:62:AC:CD:38:2F:F6:7E:D4:04:74:3D:A1:E8:32:FF:27:39:C1:0E
Authority key identifier: 4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56
Certificate issuer: /CN=A91D0A62/serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
Certificate serial: 0559
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
Manifest number: 0552
Signing time: Mon 02 Mar 2026 01:02:04 +0000
Manifest this update: Mon 02 Mar 2026 01:02:01 +0000
Manifest next update: Mon 09 Mar 2026 01:02:01 +0000
Files and hashes: 1: TN7H1CHxboUWcqgSOd0Y_IweOVY.crl (hash: s88fxB7b4Vplp9mjO4h5NKS8n91CDhDRu9vL8PdxyYk=)
2: C54BA97E283311ECBE887F3BC4F9AE02.roa (hash: nCKVMdvYXIdspAc77iuSnxMdgz1R5Tl8t85tUkNQu3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl
rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1369 (0x559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0A62, serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
Validity
Not Before: Mar 2 01:02:01 2026 GMT
Not After : Mar 9 01:02:01 2026 GMT
Subject: CN=69a4e18b-5c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:fe:25:ea:1e:c1:c4:8c:00:77:7a:41:07:
e7:1f:e0:65:a7:1c:60:6f:37:c5:c5:66:0e:f5:de:
e7:04:d3:54:39:94:88:f0:0c:42:be:e5:24:88:55:
25:7f:e5:b8:13:2a:3b:06:b5:a9:17:90:bd:9d:88:
34:bd:1a:27:31:85:a6:f6:05:17:7f:ec:5c:ce:c3:
a7:81:16:1c:ab:87:2d:9e:c4:aa:2a:b7:16:f0:89:
55:bb:66:19:2a:1f:21:76:d3:7d:a7:fa:2b:90:b6:
af:ba:3c:20:52:92:bc:f4:90:ef:53:14:da:23:ac:
6d:cb:c7:fd:e6:7b:e3:3d:f2:2d:44:78:81:58:c9:
d9:5d:a8:f1:ca:00:80:71:a2:d0:c9:85:4e:e1:09:
ef:ef:f9:31:d5:94:a9:dd:2d:69:b6:07:58:b7:08:
fc:23:82:ab:b3:8a:dd:96:d7:48:0d:83:cc:3a:30:
48:aa:86:fe:19:85:fa:8b:3d:d9:0f:ee:59:be:7b:
7d:8f:ef:77:23:d7:23:94:4e:86:ab:30:54:10:2c:
79:93:03:33:30:4a:6a:50:00:4b:31:35:e3:7c:c8:
ba:c3:a1:f5:da:2d:fa:16:0c:a4:e7:86:19:1c:5c:
de:0f:c3:27:3d:bc:0d:82:60:e2:7a:b7:9f:6e:1d:
f2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:62:AC:CD:38:2F:F6:7E:D4:04:74:3D:A1:E8:32:FF:27:39:C1:0E
X509v3 Authority Key Identifier:
keyid:4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:3d:11:c3:ab:76:24:10:f9:0a:be:93:21:a7:ea:ae:b8:ea:
c7:8c:bd:e3:1c:b9:83:32:66:a9:9b:4d:03:b7:be:e0:c6:34:
b3:dd:22:89:ee:a9:53:82:cb:80:cb:84:bb:90:9c:f4:bc:8f:
00:ea:15:47:c1:99:1e:bb:c0:52:bb:30:8e:84:9c:22:14:ad:
dd:eb:3d:24:65:93:6f:ac:c8:da:5b:41:31:51:e8:eb:07:c5:
6d:f9:1e:df:0e:bb:71:16:b2:e2:cf:09:6e:a7:4b:ac:19:7f:
2f:9f:e1:e9:82:8a:53:51:9d:4e:26:31:9d:67:f8:1c:f5:43:
83:e3:18:a5:b4:17:fe:e8:9a:17:ad:01:c5:3d:1b:ef:f9:10:
5c:9d:34:ef:9f:c6:f6:b4:2e:0a:7b:3b:95:55:37:1c:67:4d:
2c:fd:bc:cd:d2:ed:9a:1e:9e:79:39:1d:39:b2:0b:6e:0f:00:
0b:6f:05:65:1f:ce:e9:a6:38:75:14:5e:16:bf:a1:34:0d:61:
6b:16:be:22:c6:b8:64:87:a2:70:39:b5:e3:c3:84:ce:f7:3e:
58:df:f3:57:1d:f4:7c:62:3a:41:1b:4e:d4:1a:a1:53:50:d3:
9c:a1:62:3d:9e:91:cb:31:78:99:5b:9b:6e:04:36:6f:a0:cc:
e3:c2:a2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:54 2026 by rpki-client