
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json)
Hash identifier: NYwwgndtG07FlW9PpflXesqq1in9+gMX3mSHat/IAFc=
Subject key identifier: 6F:A2:68:D9:6F:5E:FD:C1:DF:2D:09:F7:0B:2D:CB:C8:80:42:2D:04
Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Certificate serial: 35CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
Manifest number: 35A0
Signing time: Sun 20 Sep 2026 14:29:08 +0000
Manifest this update: Sun 20 Sep 2026 14:29:07 +0000
Manifest next update: Sun 27 Sep 2026 14:29:07 +0000
Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: MeSiPFxNExCvzR6kZ8x78RduT5rRYIaSjlLKl9CtwqA=)
2: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: 0XTEt5zoDaqcrBr+823BjJa/ThjwRUzgKmsZbBXqoBs=)
3: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: zH3hNiG3oNZT93Paosmg2thFHMW31DTiFkny+zicvU4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 14:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13771 (0x35cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Validity
Not Before: Sep 20 14:29:07 2026 GMT
Not After : Sep 27 14:29:07 2026 GMT
Subject: CN=6aafedb3-a424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bc:f3:a0:fe:37:8e:b5:d1:6a:fc:04:c1:8d:
24:01:70:82:11:05:94:d8:31:b4:77:d0:f7:c8:21:
2f:46:bd:88:f7:40:86:fd:60:92:3a:bd:a8:9a:4e:
be:39:04:13:47:46:60:05:c8:98:ce:cd:8e:c1:3a:
1d:a3:dd:50:67:9d:41:e7:aa:c8:0c:11:33:20:a6:
fd:57:3e:d0:e2:f3:40:d6:3f:9c:55:8d:09:3b:de:
ea:d1:90:f0:10:47:d5:18:79:85:fd:89:a2:4a:b0:
56:3f:bf:d2:8f:5b:07:59:ee:9f:a4:53:b3:f2:c9:
3e:8d:7a:ed:6a:d0:6d:4e:53:c2:c3:bb:8d:2f:56:
0f:d5:99:be:77:fd:1d:f1:74:19:fb:dd:28:eb:e9:
ed:63:69:10:1d:05:89:cc:be:83:b2:d6:5b:01:4c:
50:8a:ad:fe:60:05:11:34:6e:12:f9:87:5b:07:6a:
86:12:28:ad:97:12:86:97:f5:8d:82:0a:e1:94:23:
5e:3d:9b:43:47:e1:7b:97:04:9f:69:5c:08:52:33:
b5:a8:ed:d8:f7:25:73:13:9c:af:bb:91:8d:44:2f:
4a:26:eb:32:d9:b7:43:aa:0b:65:c5:cf:0b:0d:25:
5b:60:03:e2:a9:cf:81:5f:3b:ff:c7:b2:96:80:3e:
6c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A2:68:D9:6F:5E:FD:C1:DF:2D:09:F7:0B:2D:CB:C8:80:42:2D:04
X509v3 Authority Key Identifier:
keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d8:3f:1d:cc:09:c8:c1:bb:d3:a2:e3:0b:78:d3:7a:9c:00:
1f:fe:6f:75:96:ca:e8:71:21:a8:3d:5b:64:8c:d5:0a:22:2c:
fb:aa:c5:b2:5d:80:5c:42:bd:6c:18:4b:ad:fb:e0:87:80:f9:
53:b2:2b:63:59:05:2b:fa:5b:b8:28:f9:d8:c2:a7:99:26:af:
79:6c:5d:d6:63:97:6a:e2:3b:1f:d2:18:fa:54:1b:2c:a6:58:
d5:a5:b4:24:8b:d2:a3:cb:79:f8:0a:ff:fd:d8:60:91:5a:d7:
d6:68:a1:49:5b:4e:8e:6c:de:16:fb:b6:f5:7f:b7:10:b9:c3:
93:af:56:56:f7:96:2d:2f:02:ae:0f:da:ea:99:75:44:c5:c8:
ab:b1:21:62:27:7f:f8:f8:ce:fb:6a:b5:11:01:63:8c:b7:a0:
08:0f:57:ff:57:36:3f:0c:16:fc:b4:0e:79:6d:b7:cf:77:e1:
bc:1e:32:88:2a:e8:74:d7:61:f3:a7:77:5b:69:ef:b8:a9:f6:
59:e3:1e:e8:c6:ad:c2:72:78:6e:cf:bd:6f:9e:71:53:ee:88:
89:fa:3b:23:34:65:eb:1b:48:43:df:43:1f:00:63:f7:f4:49:
2d:aa:84:42:a6:fb:43:40:7d:ce:bd:69:d0:b8:f1:b7:21:85:
b4:2e:4e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:57:02 2026 by rpki-client