
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
File: tPJi-ZhX4SDMnLxL_BftVKur4rs.mft (raw, json)
Hash identifier: VpID4Q+ovwtN9xqet7i+nTKbgfG2Xc0pKMbf4r6JFro=
Subject key identifier: 9F:CA:B9:DF:5E:A7:AF:C0:9B:75:35:E1:92:8C:42:11:AE:A6:D1:6D
Authority key identifier: B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB
Certificate issuer: /CN=A91D2ADD/serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB
Certificate serial: 043C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
Manifest number: 0412
Signing time: Mon 21 Sep 2026 00:12:36 +0000
Manifest this update: Mon 21 Sep 2026 00:12:35 +0000
Manifest next update: Mon 28 Sep 2026 00:12:35 +0000
Files and hashes: 1: tPJi-ZhX4SDMnLxL_BftVKur4rs.crl (hash: MCn6nMl8Fk5mhMydCxaRhwdVLiq6WsDDzpjHGPfJQzE=)
2: 950791DAD0D811EC8DF4377FC4F9AE02.roa (hash: oFwuVF4N1WD0xpMNgPbemI2ygkBICMTaN5OCfEUJDw0=)
3: 3DBB9F0C97EC11EE95979D63C4F9AE02.roa (hash: wscp8K5+FLmOsla2p3dPHQY1qOUX0mlW/Dyz2CZI9ho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl
rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1084 (0x43c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2ADD, serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB
Validity
Not Before: Sep 21 00:12:35 2026 GMT
Not After : Sep 28 00:12:35 2026 GMT
Subject: CN=6ab07673-5b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:75:27:bd:44:36:b8:32:e7:87:87:a3:d0:
1f:3e:44:ae:8c:0b:3e:35:7c:1a:5b:64:fb:3b:b8:
d5:22:fd:6f:0e:e3:e4:a2:39:42:6b:86:be:9b:ac:
c1:e4:fd:ca:9c:7c:02:cc:77:74:6b:6f:f5:c8:82:
8f:a5:e8:dc:e7:c0:f2:d6:ac:86:e6:7c:8b:a2:fb:
58:b7:df:7e:c0:3f:23:75:7c:8c:0f:d1:fe:43:cb:
e8:ec:c8:e7:29:30:39:d9:11:27:9f:27:8f:43:98:
f0:f2:70:77:19:44:88:a0:24:8e:32:33:a6:31:28:
fc:fb:69:41:56:10:2a:95:cc:63:37:c7:52:c9:ae:
8a:5a:5c:13:ee:0e:aa:03:99:9c:72:0a:13:34:5a:
ef:56:89:65:95:9b:fe:a4:73:41:be:c1:95:51:02:
62:7d:18:c9:10:be:02:b8:91:de:f6:b8:f2:51:df:
0f:3a:71:b2:fa:6a:df:cb:61:8c:94:84:c3:8f:0b:
53:52:1f:10:cc:10:15:8f:f3:43:3f:4e:78:ee:30:
60:55:3c:f5:3b:75:5f:54:45:8f:86:3b:b9:62:6c:
b4:0c:db:fa:01:be:52:b3:b8:93:5d:1e:7c:07:96:
37:4a:f0:b2:26:63:a8:a5:f7:52:37:c6:77:67:f4:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CA:B9:DF:5E:A7:AF:C0:9B:75:35:E1:92:8C:42:11:AE:A6:D1:6D
X509v3 Authority Key Identifier:
keyid:B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6d:a3:c5:dc:fa:1d:3e:fb:ca:4a:4d:68:ed:ba:03:6a:57:
0d:70:34:fc:fc:38:33:c9:9a:1b:92:ca:f4:28:fe:5e:2e:82:
5c:b9:b4:04:a5:d2:75:c7:40:a9:25:61:1e:13:8d:6f:a7:c1:
68:59:db:5c:29:d9:37:e9:52:ad:aa:51:00:0c:45:83:5e:ab:
a6:02:7d:07:7e:5f:7a:b4:92:c2:35:4c:a7:af:58:da:1d:73:
0b:60:ab:54:6d:62:00:f7:ba:02:67:3d:a4:fe:19:ec:46:c9:
3a:a4:74:7d:7e:fc:0e:8f:5b:67:bc:8e:fd:52:4a:3c:b1:c6:
ba:e2:ad:ae:c7:3c:c8:64:4d:2b:26:a5:41:33:26:61:f1:59:
6c:4c:9e:7d:98:f4:43:24:43:1e:e8:ad:83:65:95:4b:7a:ee:
9e:e1:32:44:32:e3:7d:a0:63:a3:6d:68:51:49:bd:21:8a:c0:
4f:a7:8a:f2:53:d4:d1:ac:b0:b0:77:8d:07:dd:bb:36:34:23:
63:5e:60:43:17:c1:b9:2d:51:d2:47:b2:e4:50:21:70:ed:8f:
aa:8e:b9:6a:47:6d:4b:67:eb:1b:7a:0f:9b:fb:c9:92:bc:e7:
07:1f:71:24:0e:bd:c1:fe:93:2f:76:1d:80:59:7b:3f:66:37:
1a:69:93:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:51:37 2026 by rpki-client