
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8E54/DA805FB0414211F18F1478B7C4833773/tJrkWmTBXfbsnNS96TvAnMyFSqk.mft
File: tJrkWmTBXfbsnNS96TvAnMyFSqk.mft (raw, json)
Hash identifier: AcDqpRZ1UCRK9Iz3Q7JNxeB2eBrKHkzxFVYOS7i+N8s=
Subject key identifier: 0D:07:AA:32:A9:B9:BA:80:5B:76:51:DA:ED:CB:FB:B7:2C:20:D7:05
Authority key identifier: B4:9A:E4:5A:64:C1:5D:F6:EC:9C:D4:BD:E9:3B:C0:9C:CC:85:4A:A9
Certificate issuer: /CN=A91D8E54/serialNumber=B49AE45A64C15DF6EC9CD4BDE93BC09CCC854AA9
Certificate serial: 65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJrkWmTBXfbsnNS96TvAnMyFSqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8E54/DA805FB0414211F18F1478B7C4833773/tJrkWmTBXfbsnNS96TvAnMyFSqk.mft
Manifest number: 5F
Signing time: Thu 15 Oct 2026 09:19:09 +0000
Manifest this update: Thu 15 Oct 2026 09:19:08 +0000
Manifest next update: Thu 22 Oct 2026 09:19:08 +0000
Files and hashes: 1: tJrkWmTBXfbsnNS96TvAnMyFSqk.crl (hash: 8F7IX/w4vA5Ae5AgyQdE3OZY90AKaJutOKyAcLj42ws=)
2: 8B846654BA5F11F1903E35B16E11F970.roa (hash: e/6V6UUaWAIbKFLLzCjSepaHWRPzzMu0u0rXquUnTGU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8E54/DA805FB0414211F18F1478B7C4833773/tJrkWmTBXfbsnNS96TvAnMyFSqk.crl
rsync://rpki.apnic.net/member_repository/A91D8E54/DA805FB0414211F18F1478B7C4833773/tJrkWmTBXfbsnNS96TvAnMyFSqk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJrkWmTBXfbsnNS96TvAnMyFSqk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 09:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8E54, serialNumber=B49AE45A64C15DF6EC9CD4BDE93BC09CCC854AA9
Validity
Not Before: Oct 15 09:19:08 2026 GMT
Not After : Oct 22 09:19:08 2026 GMT
Subject: CN=6ad09a8c-dbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b3:27:73:d6:2f:02:aa:d1:32:a6:ab:fd:1d:
04:44:a0:4e:ff:52:8c:03:f9:a8:4a:80:ab:fa:df:
0a:19:62:79:b8:4c:67:d7:5a:c5:09:e8:f5:09:53:
d7:51:0e:c9:b2:52:53:1b:a7:3d:fe:1a:f3:cd:b0:
65:db:ae:87:7b:e5:9b:6f:01:fd:5b:fc:df:43:c4:
66:c2:e1:5a:ed:c5:b3:0e:26:09:0b:70:a7:f9:dc:
f5:d4:e8:1c:42:6e:b8:35:e5:55:48:31:f9:cc:fb:
c5:65:d9:4d:39:12:f6:e5:22:cc:34:9a:85:e6:e2:
02:6d:68:6c:66:53:40:4d:4a:73:87:cb:50:c0:19:
d6:25:dc:9a:99:cf:e5:d9:d5:2b:9e:95:57:3c:2c:
d9:c6:55:c5:f2:f5:58:32:d7:db:57:47:35:3d:dd:
ad:ff:92:b4:fc:a9:bd:c5:6b:b8:2d:93:e7:9d:f8:
0e:0b:35:38:10:ee:bb:1c:eb:6e:a1:c2:13:a7:8c:
01:b5:fb:59:ad:08:78:29:05:33:68:7d:78:02:11:
0e:1b:9c:9f:6c:e9:73:ac:25:4f:8f:08:e2:06:26:
a3:bf:32:5e:7d:ac:2e:46:91:bf:e4:d5:05:43:cb:
9d:b6:a3:b4:8e:19:5c:68:13:b0:5c:20:c0:9d:78:
e4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:07:AA:32:A9:B9:BA:80:5B:76:51:DA:ED:CB:FB:B7:2C:20:D7:05
X509v3 Authority Key Identifier:
keyid:B4:9A:E4:5A:64:C1:5D:F6:EC:9C:D4:BD:E9:3B:C0:9C:CC:85:4A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8E54/DA805FB0414211F18F1478B7C4833773/tJrkWmTBXfbsnNS96TvAnMyFSqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJrkWmTBXfbsnNS96TvAnMyFSqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8E54/DA805FB0414211F18F1478B7C4833773/tJrkWmTBXfbsnNS96TvAnMyFSqk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:65:a2:e6:c0:22:9f:4d:67:ad:4b:cd:13:d6:26:ea:b2:16:
90:f1:42:f8:6a:3e:66:e1:e6:2a:5e:41:8a:4c:ca:5d:50:41:
2f:4f:9f:fb:77:f7:19:a8:70:cc:76:0e:83:0f:18:16:69:21:
33:17:b3:d0:d4:93:15:77:ec:62:02:05:6e:16:1e:8d:71:22:
fa:19:0c:1c:5d:43:90:e4:09:78:b1:6c:4a:91:2c:da:06:25:
4c:bd:1c:ec:f8:d7:90:b4:cf:e7:5e:e9:f5:52:46:64:50:2c:
6a:c1:32:21:5a:d3:0b:65:57:ff:10:99:93:70:c0:2a:8b:64:
a2:33:9f:f3:c0:9e:09:a5:1f:1d:7c:28:a5:c5:df:7b:80:69:
16:ab:6a:c0:f6:b1:13:e0:b7:8f:05:ef:e5:87:cd:f1:55:70:
8a:da:d7:85:d4:e0:21:81:c7:74:ac:6c:05:56:7d:f0:bb:34:
5f:26:b2:e0:99:cc:89:f9:50:e9:a4:b3:c7:20:09:f2:36:da:
d6:d0:5c:75:68:8d:6d:e2:99:ff:62:ad:e2:ee:dc:94:7f:39:
99:a6:55:46:05:06:95:64:3c:58:b7:a5:cd:ae:90:ea:57:a8:
da:73:a2:02:48:16:11:7f:c7:39:24:9b:85:c1:16:48:b9:53:
bb:ef:30:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:39:46 2026 by rpki-client