
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
File: TZCQh73foVBeK7oD8gYRLq7_sRs.mft (raw, json)
Hash identifier: pug1qejtk4Bj75gcVIW2rRMuQkysjsVfsUuFmjTemF0=
Subject key identifier: C7:E3:E5:CE:84:04:9E:B5:A9:FB:31:71:D4:8E:61:AF:8A:8D:CF:A5
Authority key identifier: 4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B
Certificate issuer: /CN=A91D200F/serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
Certificate serial: 027E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
Manifest number: 026C
Signing time: Wed 23 Sep 2026 02:02:14 +0000
Manifest this update: Wed 23 Sep 2026 02:02:13 +0000
Manifest next update: Wed 30 Sep 2026 02:02:13 +0000
Files and hashes: 1: TZCQh73foVBeK7oD8gYRLq7_sRs.crl (hash: zV4TO0AJDRfE1luod86bWA7dtlPucaHuZqiSby9xHiE=)
2: D71B60EC2B5911EE81C7542FC4F9AE02.roa (hash: Jas/B/HKgv6Ds9cxbOl0LkWTFVaps0+gG/0AuMhiV68=)
3: 039807B286B511EFAF868C6EC4F9AE02.roa (hash: GJOKnnR35/W//5xyyD5B9yPrJQet8eLCLqSkDmsdIrE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl
rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 638 (0x27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D200F, serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
Validity
Not Before: Sep 23 02:02:13 2026 GMT
Not After : Sep 30 02:02:13 2026 GMT
Subject: CN=6ab33325-b874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:41:cc:c1:48:8a:76:ae:d2:bd:90:86:75:42:
6f:46:55:99:3c:a3:7c:cc:17:01:f6:81:bf:24:24:
f0:76:01:31:46:74:7e:f8:09:56:0b:a1:53:17:83:
ad:e8:0c:a4:76:15:95:5a:a0:06:1b:25:36:d6:68:
93:db:8a:57:00:d4:e4:b7:3e:80:d7:f4:12:97:fb:
c6:b2:ae:12:25:bb:d3:ff:bf:f1:2a:0b:ba:53:90:
dc:79:8e:0c:75:df:b2:d7:ab:48:19:5b:99:5f:7a:
ff:3d:32:52:77:40:86:7e:49:87:27:a6:d4:c1:9a:
16:a9:8d:00:fe:f1:e0:36:50:5b:fc:e0:04:ec:f2:
70:03:83:bc:ed:63:4d:ed:75:50:df:0e:84:5e:67:
86:1d:33:0c:b9:7a:ec:49:57:75:1a:2a:6a:69:94:
07:fa:17:10:06:da:1e:36:de:2e:a4:09:60:a3:c5:
08:f9:45:38:0b:63:b7:20:32:b4:c4:ba:3e:18:66:
6d:9d:ce:15:96:cf:fd:34:35:f1:6a:dd:a7:04:9c:
ed:a4:15:c9:4c:27:be:bb:ee:31:0c:36:b4:53:2f:
c1:e4:78:6e:dc:5b:a0:b7:1c:33:73:21:3e:b5:8b:
bf:5d:79:1f:30:1d:c7:7b:7a:58:95:1c:88:78:01:
0e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E3:E5:CE:84:04:9E:B5:A9:FB:31:71:D4:8E:61:AF:8A:8D:CF:A5
X509v3 Authority Key Identifier:
keyid:4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:8b:de:fd:91:27:bb:45:ff:aa:30:79:b2:b4:8d:8e:ce:2a:
2f:2f:fb:18:d5:fc:25:32:4d:8f:46:de:91:de:70:30:b7:34:
95:d9:86:c4:47:e3:c2:26:03:de:83:ff:2c:37:3a:3b:0d:3e:
b5:5d:60:6b:b3:d7:b4:e1:7e:91:44:89:d5:7c:8b:d0:f3:ea:
72:ae:34:aa:26:af:06:fe:cd:fa:ce:31:e0:82:4e:dc:c0:c0:
03:8d:a2:f6:71:20:5c:1f:8d:94:e1:ae:c8:fd:98:a0:ef:78:
62:b3:15:82:81:27:19:4f:bd:d5:fe:de:be:0e:cc:42:1a:bb:
39:bb:98:c4:39:40:3f:0b:a3:11:a8:a9:83:ab:2d:37:e8:9a:
11:7e:6a:51:63:62:45:2c:43:44:49:a7:e1:c4:e3:0c:da:c7:
cc:0c:1c:be:93:7b:3d:f9:78:47:a4:f2:b8:d0:c7:26:6a:87:
7e:b5:5f:fc:67:57:91:93:ed:fa:3b:60:df:61:b4:d0:c0:e2:
01:e3:5e:df:49:57:2c:21:2a:ea:0b:a9:2a:75:69:1e:51:15:
16:21:2d:65:92:44:99:b4:ab:a2:69:72:09:a8:94:32:a7:fa:
26:c5:5d:14:d3:be:56:e3:89:00:bf:32:cd:1f:2f:61:4c:16:
32:b6:d2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:47:07 2026 by rpki-client