
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json)
Hash identifier: DypXu4M0ayW4mEhKVnmm2/nMs0DJZvNyPrbAddKM4pI=
Subject key identifier: D6:11:7C:8C:C7:AB:DF:E0:C4:E4:E5:BC:06:08:F5:F4:64:10:59:72
Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Certificate serial: 3563
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
Manifest number: 3538
Signing time: Mon 02 Mar 2026 00:52:40 +0000
Manifest this update: Mon 02 Mar 2026 00:52:39 +0000
Manifest next update: Mon 09 Mar 2026 00:52:39 +0000
Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: +eUHAn78V+rtPld9GCaFKvM7CejXv2u8k8KAyUHDTpM=)
2: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: zH3hNiG3oNZT93Paosmg2thFHMW31DTiFkny+zicvU4=)
3: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: 0XTEt5zoDaqcrBr+823BjJa/ThjwRUzgKmsZbBXqoBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:52:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13667 (0x3563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Validity
Not Before: Mar 2 00:52:39 2026 GMT
Not After : Mar 9 00:52:39 2026 GMT
Subject: CN=69a4df58-bd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:7a:5c:eb:20:72:5a:ba:9c:5c:34:24:db:
26:c4:e3:f8:2f:d0:ff:82:20:27:9f:35:89:44:e7:
83:af:0d:73:e7:0e:ec:b8:35:a9:ed:72:71:d4:a5:
5e:95:98:11:f5:8f:8f:b0:cb:62:77:84:eb:1f:94:
7a:94:a0:d4:47:de:e4:dd:59:98:57:a2:a3:3b:bb:
b8:0f:9d:65:0a:9f:74:f4:67:07:04:32:6d:4c:06:
ad:92:92:c8:f7:15:dd:18:f4:47:9d:f9:9d:ca:c2:
53:cf:c7:f0:a8:5d:56:29:9c:cb:7f:0c:12:10:0e:
cc:dd:fa:ef:23:1c:fb:56:9b:02:bc:1f:c7:83:5d:
8f:a1:67:95:03:7d:3c:88:a3:75:90:2f:4d:9d:e0:
86:a6:a6:40:1e:d1:b9:9d:f3:22:73:9d:3a:49:0e:
12:10:fd:ea:e5:0f:79:b9:f6:f8:d7:6b:58:54:a0:
b4:4c:40:36:9c:c6:07:ad:f4:85:a7:d0:4b:23:ac:
83:f2:4f:75:51:f7:02:99:f7:c0:59:e0:50:38:9d:
9d:67:e0:15:b0:2d:27:93:72:b3:52:a4:78:f6:49:
2f:02:fe:a6:57:81:fc:1b:56:05:b2:1d:f7:df:8a:
16:f2:0b:63:b5:87:2f:cb:28:34:43:ec:85:8b:f6:
3b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:11:7C:8C:C7:AB:DF:E0:C4:E4:E5:BC:06:08:F5:F4:64:10:59:72
X509v3 Authority Key Identifier:
keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a2:94:df:05:07:fa:ef:b9:2b:30:18:69:9b:cc:1a:b0:59:
f4:1e:bd:31:d5:53:68:c8:ca:0f:93:f4:44:7e:4b:af:8b:d9:
c0:5a:03:3e:1c:93:c5:91:50:3f:2b:71:72:a7:d6:8e:e2:85:
38:19:cd:1e:e9:ee:d2:bb:43:25:73:70:32:96:96:dc:17:b2:
10:5f:60:0e:bf:a6:b2:58:86:7c:5f:51:d6:01:63:3e:5e:14:
63:6c:bd:d3:d8:1e:2b:e6:f6:1d:09:be:33:62:a0:42:36:7f:
d6:42:3c:72:6a:7c:50:0b:63:ad:b3:21:ec:09:aa:fe:bf:5b:
f9:3e:c6:0f:f2:b3:b2:c3:ca:d3:20:d9:c7:ed:c7:a9:9f:27:
21:bb:a7:af:aa:0a:4d:f5:a8:27:b2:73:d3:64:1b:21:0f:ff:
2c:82:5f:dc:de:3c:f5:5c:97:5f:12:3a:fe:70:6b:ff:34:cd:
2a:ec:ef:1e:a4:df:c1:34:76:bb:31:13:59:d7:52:74:79:a2:
e7:29:d4:31:d9:76:e6:96:5c:8c:90:83:1a:0e:9f:db:61:12:
58:d9:98:7b:a1:23:06:77:8a:6d:e4:ec:50:47:b5:47:a6:06:
d4:01:5a:df:fa:b0:f0:1f:a4:1a:47:21:0d:d2:07:13:e7:1e:
3d:14:ca:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDkyRkIxMTAvBgNVBAUTKDRDMzZGODEyRTc2RDgyN0VDRTZFNTlCRDE1NjA1ODVD
NTFFQ0Q5OTIwHhcNMjYwMzAyMDA1MjM5WhcNMjYwMzA5MDA1MjM5WjAYMRYwFAYD
VQQDEw02OWE0ZGY1OC1iZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAllJ6XOsgclq6nFw0JNsmxOP4L9D/giAnnzWJROeDrw1z5w7suDWp7XJx1KVe
lZgR9Y+PsMtid4TrH5R6lKDUR97k3VmYV6KjO7u4D51lCp909GcHBDJtTAatkpLI
9xXdGPRHnfmdysJTz8fwqF1WKZzLfwwSEA7M3frvIxz7VpsCvB/Hg12PoWeVA308
iKN1kC9NneCGpqZAHtG5nfMic506SQ4SEP3q5Q95ufb412tYVKC0TEA2nMYHrfSF
p9BLI6yD8k91UfcCmffAWeBQOJ2dZ+AVsC0nk3KzUqR49kkvAv6mV4H8G1YFsh33
34oW8gtjtYcvyyg0Q+yFi/Y7cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNYRfIzH
q9/gxOTlvAYI9fRkEFlyMB8GA1UdIwQYMBaAFEw2+BLnbYJ+zm5ZvRVgWFxR7NmS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTJGQi8zMjdGQzZCMjFE
ODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGduN09ibG05RldCWVhGSHMy
WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1REYjRFdWR0Z243T2JsbTlGV0JZWEZIczJaSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OTJGQi8zMjdGQzZCMjFEODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGdu
N09ibG05RldCWVhGSHMyWkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACqKU3wUH+u+5KzAYaZvMGrBZ9B69MdVTaMjKD5P0RH5Lr4vZwFoDPhyTxZFQ
PytxcqfWjuKFOBnNHunu0rtDJXNwMpaW3BeyEF9gDr+msliGfF9R1gFjPl4UY2y9
09geK+b2HQm+M2KgQjZ/1kI8cmp8UAtjrbMh7Amq/r9b+T7GD/KzssPK0yDZx+3H
qZ8nIbunr6oKTfWoJ7Jz02QbIQ//LIJf3N489VyXXxI6/nBr/zTNKuzvHqTfwTR2
uzETWddSdHmi5ynUMdl25pZcjJCDGg6f22ESWNmYe6EjBneKbeTsUEe1R6YG1AFa
3/qw8B+kGkchDdIHE+cePRTK7w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:54 2026 by rpki-client