
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json)
Hash identifier: CxmLq6w525ATJ00Z7O++NLtSqDXVpOap4S8cxmvikhQ=
Subject key identifier: 78:66:DE:A7:2E:F5:FF:BD:6E:1E:4A:B9:91:55:73:C2:7C:2F:41:65
Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Certificate serial: 35AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
Manifest number: 3584
Signing time: Tue 28 Jul 2026 14:30:19 +0000
Manifest this update: Tue 28 Jul 2026 14:30:18 +0000
Manifest next update: Tue 04 Aug 2026 14:30:18 +0000
Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: yBmMpUdGQGw2gno2juT8ImqTiWe02YbEaPQ1tdik0jQ=)
2: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: zH3hNiG3oNZT93Paosmg2thFHMW31DTiFkny+zicvU4=)
3: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: 0XTEt5zoDaqcrBr+823BjJa/ThjwRUzgKmsZbBXqoBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13743 (0x35af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Validity
Not Before: Jul 28 14:30:18 2026 GMT
Not After : Aug 4 14:30:18 2026 GMT
Subject: CN=6a68bcfb-c926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:37:2c:9a:ee:25:27:fa:e7:6b:55:94:78:ee:
45:bf:cb:15:4e:5a:3b:9d:d0:ef:69:59:ff:67:be:
ea:bb:aa:ff:77:b3:a8:47:2e:dc:89:8b:42:38:8d:
fb:85:9e:0d:0c:02:f7:ab:3a:31:7c:6d:e2:a1:b2:
a7:82:3b:1e:03:6f:dd:12:ac:e2:fd:48:10:78:57:
a1:f7:71:f8:15:3f:38:6c:22:4d:58:8e:be:08:dc:
63:8c:02:eb:d3:f8:f0:bf:f2:f1:2a:f4:40:0d:58:
a1:70:b3:8a:cf:23:d2:17:c6:89:09:ca:54:a5:ff:
ae:fb:c9:d9:d1:67:91:6a:c4:a8:41:4e:98:bf:8a:
73:e7:7e:86:c1:78:50:e2:f4:32:51:16:91:19:89:
bc:e3:b9:6f:14:61:4b:de:42:d4:dd:2f:c5:cc:d6:
53:0e:cf:16:31:a0:c3:fe:8d:09:3b:4d:8b:93:04:
02:fb:b3:05:b4:35:4e:a9:93:6d:5c:ac:32:1b:99:
95:27:5c:f3:93:8e:05:13:bc:bc:a5:2d:79:1c:34:
83:48:ea:c9:3d:bd:f0:44:3c:bd:3e:6b:4e:64:84:
7c:19:38:68:38:5f:b1:6f:78:22:25:b8:7b:c8:a3:
18:4c:20:2b:eb:ed:24:74:71:cd:f7:65:d0:e1:f5:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:66:DE:A7:2E:F5:FF:BD:6E:1E:4A:B9:91:55:73:C2:7C:2F:41:65
X509v3 Authority Key Identifier:
keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:1d:4e:a8:f2:b7:dc:a8:86:59:a8:c9:58:82:2d:27:be:8a:
1c:38:03:21:40:99:0c:5d:b1:7e:55:08:b1:fa:4e:ab:92:38:
64:08:a6:f5:db:21:9a:de:a3:da:56:22:3b:3a:73:7e:fa:5c:
4d:56:27:1e:23:b7:c6:06:1c:7f:1b:f9:b4:79:25:49:ff:e6:
8b:ce:94:5e:21:e0:9b:4a:c9:c5:89:7d:30:a2:0e:24:04:8a:
78:9e:bc:00:12:27:f9:90:48:c1:d1:e9:aa:dc:53:9c:4d:f9:
45:21:49:a3:87:2c:9b:35:d6:a4:5b:06:e7:8c:2d:50:0c:0a:
bb:f1:87:29:ea:03:67:1d:f9:75:e9:b3:13:54:32:45:01:a3:
77:87:d0:69:1f:bc:ec:07:d4:d2:04:26:c5:20:aa:3c:08:df:
17:e2:e4:1f:40:52:3e:6d:4b:3e:0f:02:ef:7c:e0:62:7a:26:
69:a8:99:c7:fa:bb:fc:39:78:ea:6c:86:d0:29:e9:b2:ed:0d:
26:38:7a:5e:3a:0e:c7:aa:0f:c6:cf:9e:ef:9d:c2:9f:04:4e:
3e:5e:6e:53:37:c5:44:4e:cf:8a:a8:99:a8:c8:9c:c1:79:99:
1e:91:72:88:a8:64:a4:93:03:aa:dd:63:e1:56:d0:0d:d3:93:
ba:4c:69:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:35 2026 by rpki-client