
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
File: tbNfkk61wy-7QYZ9OhZuSpa77KI.mft (raw, json)
Hash identifier: 5Hx7s7pKg9T9zeh6JrduX8QhMbmLZD7uPtX9DiOg8OU=
Subject key identifier: 43:CF:96:3F:DC:FB:9F:4F:A0:50:6E:DD:BA:9C:69:03:44:8C:BA:B5
Authority key identifier: B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2
Certificate issuer: /CN=A91D9928/serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
Certificate serial: 6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
Manifest number: 6B
Signing time: Fri 17 Apr 2026 07:35:23 +0000
Manifest this update: Fri 17 Apr 2026 07:35:23 +0000
Manifest next update: Fri 24 Apr 2026 07:35:23 +0000
Files and hashes: 1: tbNfkk61wy-7QYZ9OhZuSpa77KI.crl (hash: 1TDpIThbFpdQKYpWMk21Qay5jjNE3ln74leda9iy7IE=)
2: A71814CA984F11F0B7A01E76C4F9AE02.roa (hash: Wqlgag3JASt9EH/u+Cc5ukalg78nje36S+xtNjVr+A4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl
rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9928, serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
Validity
Not Before: Apr 17 07:35:23 2026 GMT
Not After : Apr 24 07:35:23 2026 GMT
Subject: CN=69e1e2bb-93bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:d2:13:6a:e1:0b:8f:18:c1:9c:ae:f5:97:
ad:ff:10:8e:a7:e2:46:aa:b6:e3:04:4b:9c:4a:e6:
90:17:25:a2:8b:fb:cc:c7:8a:39:e7:58:07:6f:58:
91:21:06:a5:50:bb:ef:1e:f8:c9:2a:2b:42:d1:23:
b6:5e:5d:e4:63:c8:6b:c9:40:c9:42:cd:db:a8:af:
6e:19:00:f7:85:41:1d:94:43:cf:e3:22:db:a9:62:
52:06:fe:44:cc:c5:94:50:dd:1f:02:47:66:fd:d9:
ad:0a:0f:e6:cd:78:0f:e1:83:2f:cc:4c:07:8e:5e:
aa:98:17:b1:56:d3:8b:96:31:35:4f:51:df:ed:f6:
d4:92:7b:32:04:59:87:25:60:4c:f9:3a:d3:84:86:
90:6c:50:30:9d:b2:26:b4:18:4e:3e:4f:ac:62:71:
d6:5a:2c:71:cd:5b:3f:62:62:41:01:98:da:8b:93:
f9:6b:e9:c5:42:ab:8f:1e:85:4c:53:c5:9f:59:e0:
5b:b9:24:54:aa:4a:03:a4:f2:e8:4a:b7:28:0d:31:
20:3f:1b:0f:aa:86:53:90:5a:f8:51:6c:2f:8e:0f:
26:0b:93:cb:ac:52:85:65:91:ae:c5:81:4d:8e:41:
09:c1:05:47:1d:b7:20:63:4a:5e:dc:d7:51:d6:8b:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CF:96:3F:DC:FB:9F:4F:A0:50:6E:DD:BA:9C:69:03:44:8C:BA:B5
X509v3 Authority Key Identifier:
keyid:B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:5d:54:56:ff:14:eb:3c:16:85:5a:cb:30:b6:bf:96:54:5e:
ab:db:1e:e3:5e:8b:62:78:4e:e7:38:8b:dc:e3:30:46:89:a7:
f2:78:f6:d2:eb:5f:c8:7a:bb:6a:fc:79:ad:2c:7b:93:87:75:
4b:33:bd:69:13:95:2f:04:11:1b:ea:62:80:07:2d:94:51:a3:
16:2a:8d:1c:88:59:d0:80:ac:a3:61:ff:13:b1:f6:41:30:c0:
c1:ab:df:79:8b:bb:57:66:71:37:ab:04:ec:bc:0b:d3:73:a4:
fe:77:8a:63:8e:c4:77:69:05:8d:a1:94:fb:42:90:e1:d2:cd:
a0:9b:9f:2d:a9:d6:68:58:26:7c:c5:78:35:04:cd:58:f2:e4:
29:34:df:4f:e2:b4:7f:93:f4:07:18:98:cb:f3:75:6d:32:99:
0a:8a:78:67:43:6d:2f:27:a8:da:34:ce:6d:43:d5:ab:fa:ae:
f5:54:24:3e:e8:88:67:20:ed:e5:dc:85:1f:a5:e5:b7:c1:f2:
7c:9a:81:5f:ae:c9:4f:08:64:ae:d0:5e:c5:d7:71:97:28:d4:
5d:c7:c8:b6:d6:9a:89:12:48:0b:9f:c8:aa:8a:a8:e2:65:48:
bb:78:88:63:29:dc:15:80:06:8e:99:7a:ca:a1:cb:ba:0f:48:
72:93:72:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:52:48 2026 by rpki-client