
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
File: TZCQh73foVBeK7oD8gYRLq7_sRs.mft (raw, json)
Hash identifier: +Uv7BKFv//xfK33ZMc6UEvkfgd83ldX45y4zWRlIbjA=
Subject key identifier: 55:48:66:57:69:71:CB:5A:E7:15:2A:3A:24:70:D2:38:10:1E:C9:26
Authority key identifier: 4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B
Certificate issuer: /CN=A91D200F/serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
Certificate serial: 020D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
Manifest number: 0200
Signing time: Sun 01 Mar 2026 03:57:55 +0000
Manifest this update: Sun 01 Mar 2026 03:57:54 +0000
Manifest next update: Sun 08 Mar 2026 03:57:54 +0000
Files and hashes: 1: TZCQh73foVBeK7oD8gYRLq7_sRs.crl (hash: p5gIhhqaueiHHugNnjPtaTrE/AKRhVJL0AjByau7V9Y=)
2: D71B60EC2B5911EE81C7542FC4F9AE02.roa (hash: wndMS9TntxEIvOO1y5ThBewHzkdYkTNV8U/orVegQT4=)
3: 039807B286B511EFAF868C6EC4F9AE02.roa (hash: mvlfednBP8hH+VJF+N7b5lj86+gAiaBFLJ6OGfwQefA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl
rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D200F, serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
Validity
Not Before: Mar 1 03:57:54 2026 GMT
Not After : Mar 8 03:57:54 2026 GMT
Subject: CN=69a3b943-1af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:b6:1c:6c:d7:57:b9:a3:b3:a0:92:ee:22:
fe:2d:7c:72:39:38:10:b2:ba:c3:08:de:9f:eb:ee:
89:b6:99:d3:1b:ab:b3:a5:e0:7b:57:d7:2f:12:db:
4e:08:de:c1:8d:55:c4:ea:a5:30:af:e2:87:e2:84:
80:ee:5c:bd:f8:b8:41:40:9f:a8:de:df:02:82:62:
4e:f0:15:02:73:e2:a0:eb:1d:1d:76:ef:dc:44:c3:
2e:17:a0:39:b4:44:c5:21:27:15:05:ca:6e:8d:b1:
da:41:3b:f5:a2:fa:da:f1:7c:9f:8e:e1:b2:d9:9c:
61:4f:4b:77:de:95:8a:93:76:c5:2c:0a:2b:cb:38:
50:fd:97:e1:a6:ec:09:dd:85:7b:85:a8:1d:9e:b0:
92:8c:61:df:ce:68:01:f1:03:f0:28:1a:bf:38:d1:
b6:ef:e6:72:55:15:bb:67:0f:5a:81:45:b6:38:09:
6d:a9:4d:8a:25:ea:28:28:75:7a:72:92:20:4c:42:
30:88:c4:7f:c7:cc:63:bd:ef:8c:d8:c6:83:0a:26:
b9:93:f5:cf:fc:31:33:26:99:f2:8c:e9:b8:2c:69:
fc:3c:ec:15:d5:97:5d:49:08:71:83:37:fb:89:cf:
d1:60:e5:3d:7e:e6:03:42:3d:76:14:ea:52:58:31:
3d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:48:66:57:69:71:CB:5A:E7:15:2A:3A:24:70:D2:38:10:1E:C9:26
X509v3 Authority Key Identifier:
keyid:4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:3c:e3:e7:26:f9:99:d1:94:b9:e2:a7:16:ef:00:09:4d:db:
86:53:28:ce:b5:08:58:cc:7b:24:ef:b7:df:c2:ed:10:4e:7c:
0e:53:f9:a8:5f:27:3e:c3:e8:3c:fa:22:2f:e1:ba:e8:0f:f6:
50:ab:76:09:4d:41:27:01:67:bd:4b:c9:35:7a:f2:80:c2:27:
9c:37:d0:18:07:eb:0c:4a:55:19:78:55:69:88:a3:a9:05:f0:
fe:e6:fb:2e:26:7b:40:61:1b:56:74:b5:15:a3:15:ba:c4:60:
10:a9:00:03:30:b0:d4:81:3d:8e:29:de:00:4a:83:97:cc:e0:
dc:ee:64:28:25:ef:4a:72:d3:e0:42:2b:d1:b3:13:8d:4b:1a:
41:a9:fc:b6:e6:de:9a:4e:50:82:55:41:4c:35:c6:59:78:c1:
e4:d1:ec:62:92:f2:df:7e:10:c6:81:00:4e:29:91:19:83:74:
85:10:32:7a:6d:6b:37:51:8a:d4:34:52:80:b6:48:41:fa:41:
b9:c2:86:73:48:fd:f5:12:02:0c:ed:c2:fc:67:0c:78:16:c4:
76:73:f7:fb:81:65:34:b4:7a:ea:3a:69:d4:51:48:30:bb:b6:
df:14:08:ce:1c:80:e8:e4:f9:2a:bf:d1:a1:2f:e0:e2:4f:47:
ca:31:04:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDIwMEYxMTAvBgNVBAUTKDREOTA5MDg3QkRERkExNTA1RTJCQkEwM0YyMDYxMTJF
QUVGRkIxMUIwHhcNMjYwMzAxMDM1NzU0WhcNMjYwMzA4MDM1NzU0WjAYMRYwFAYD
VQQDDA02OWEzYjk0My0xYWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqO22HGzXV7mjs6CS7iL+LXxyOTgQsrrDCN6f6+6JtpnTG6uzpeB7V9cvEttO
CN7BjVXE6qUwr+KH4oSA7ly9+LhBQJ+o3t8CgmJO8BUCc+Kg6x0ddu/cRMMuF6A5
tETFIScVBcpujbHaQTv1ovra8XyfjuGy2ZxhT0t33pWKk3bFLAoryzhQ/ZfhpuwJ
3YV7hagdnrCSjGHfzmgB8QPwKBq/ONG27+ZyVRW7Zw9agUW2OAltqU2KJeooKHV6
cpIgTEIwiMR/x8xjve+M2MaDCia5k/XP/DEzJpnyjOm4LGn8POwV1ZddSQhxgzf7
ic/RYOU9fuYDQj12FOpSWDE9TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFVIZldp
ccta5xUqOiRw0jgQHskmMB8GA1UdIwQYMBaAFE2QkIe936FQXiu6A/IGES6u/7Eb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjAwRi8yNTc4NzQwMjE2
NEYxMUVFOUU3MzQwNEVDNEY5QUUwMi9UWkNRaDczZm9WQmVLN29EOGdZUkxxN19z
UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RaQ1FoNzNmb1ZCZUs3b0Q4Z1lSTHE3X3NScy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjAwRi8yNTc4NzQwMjE2NEYxMUVFOUU3MzQwNEVDNEY5QUUwMi9UWkNRaDczZm9W
QmVLN29EOGdZUkxxN19zUnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsjzj5yb5mdGUueKnFu8ACU3bhlMozrUIWMx7JO+338LtEE58DlP5qF8nPsPo
PPoiL+G66A/2UKt2CU1BJwFnvUvJNXrygMInnDfQGAfrDEpVGXhVaYijqQXw/ub7
LiZ7QGEbVnS1FaMVusRgEKkAAzCw1IE9jineAEqDl8zg3O5kKCXvSnLT4EIr0bMT
jUsaQan8tubemk5QglVBTDXGWXjB5NHsYpLy334QxoEATimRGYN0hRAyem1rN1GK
1DRSgLZIQfpBucKGc0j99RICDO3C/GcMeBbEdnP3+4FlNLR66jpp1FFIMLu23xQI
zhyA6OT5Kr/RoS/g4k9HyjEEgg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:29:07 2026 by rpki-client