
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DAFA2/4D7F6EB24A7511F1A9575ABCA4833773/ti51PWAQXS1yURcqxyKxDy-WSWc.mft
File: ti51PWAQXS1yURcqxyKxDy-WSWc.mft (raw, json)
Hash identifier: 0J2hm1qI7M4VXD38kYsY5LZiTw2ACJ7asVAW8EUaOZg=
Subject key identifier: A5:D8:A9:25:8B:77:70:4F:37:40:5E:42:B7:A9:B3:F7:8C:BB:55:DA
Authority key identifier: B6:2E:75:3D:60:10:5D:2D:72:51:17:2A:C7:22:B1:0F:2F:96:49:67
Certificate issuer: /CN=A91DAFA2/serialNumber=B62E753D60105D2D7251172AC722B10F2F964967
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ti51PWAQXS1yURcqxyKxDy-WSWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DAFA2/4D7F6EB24A7511F1A9575ABCA4833773/ti51PWAQXS1yURcqxyKxDy-WSWc.mft
Manifest number: 4A
Signing time: Thu 24 Sep 2026 16:07:09 +0000
Manifest this update: Thu 24 Sep 2026 16:07:09 +0000
Manifest next update: Thu 01 Oct 2026 16:07:09 +0000
Files and hashes: 1: ti51PWAQXS1yURcqxyKxDy-WSWc.crl (hash: PYGPa7Nt11DFoh4Z36IgMKwFQ4p3XWPCvogJfLtjXXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DAFA2/4D7F6EB24A7511F1A9575ABCA4833773/ti51PWAQXS1yURcqxyKxDy-WSWc.crl
rsync://rpki.apnic.net/member_repository/A91DAFA2/4D7F6EB24A7511F1A9575ABCA4833773/ti51PWAQXS1yURcqxyKxDy-WSWc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ti51PWAQXS1yURcqxyKxDy-WSWc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DAFA2, serialNumber=B62E753D60105D2D7251172AC722B10F2F964967
Validity
Not Before: Sep 24 16:07:09 2026 GMT
Not After : Oct 1 16:07:09 2026 GMT
Subject: CN=6ab54aad-fe5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b3:41:09:48:fe:2a:19:a6:a0:04:80:fe:b9:
1b:bd:0d:27:a5:ec:60:bc:47:6f:a8:c8:03:70:a3:
31:c4:3a:ed:6a:25:22:78:98:3d:72:e8:8f:ee:7d:
2a:17:a8:ec:36:84:04:c5:1e:1b:c2:8d:4f:49:bf:
24:54:1e:49:ab:cb:cf:30:42:54:0b:61:85:87:45:
ae:c3:5c:20:c6:70:1a:45:68:34:f3:0d:f1:1d:a3:
49:87:06:36:a9:a4:e6:0b:0b:24:33:16:27:74:09:
a1:15:41:ae:34:77:ca:f3:6e:c0:1b:00:b3:02:cd:
64:3d:2b:a2:ec:58:0c:70:8a:4e:f4:9b:d3:f9:30:
22:f9:b8:14:f1:93:4c:32:e3:b6:d7:45:2c:9b:95:
26:ee:c4:c3:f7:e7:5e:5b:fd:33:63:3c:05:98:f4:
bd:3f:62:dd:db:18:05:a5:43:97:78:0f:b0:2e:bc:
8a:4a:e1:13:1e:38:20:7c:6a:7a:71:e2:d1:f4:0f:
d6:a7:f0:f9:7a:3a:68:67:ab:90:5e:c4:f7:39:65:
fa:65:bf:fe:96:08:02:f9:06:10:85:cc:1c:21:0f:
fe:8b:f1:12:e6:d9:1c:90:7d:d9:c5:c9:d5:53:69:
e1:27:c2:7a:a7:72:aa:15:da:e4:90:54:c1:65:b9:
f8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D8:A9:25:8B:77:70:4F:37:40:5E:42:B7:A9:B3:F7:8C:BB:55:DA
X509v3 Authority Key Identifier:
keyid:B6:2E:75:3D:60:10:5D:2D:72:51:17:2A:C7:22:B1:0F:2F:96:49:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/4D7F6EB24A7511F1A9575ABCA4833773/ti51PWAQXS1yURcqxyKxDy-WSWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ti51PWAQXS1yURcqxyKxDy-WSWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/4D7F6EB24A7511F1A9575ABCA4833773/ti51PWAQXS1yURcqxyKxDy-WSWc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:bc:19:4d:96:08:15:ee:78:f5:6a:24:89:4d:fa:79:10:61:
ca:e5:a7:30:20:4e:ac:75:f0:0e:1b:e9:4b:35:ae:31:82:67:
74:de:b0:74:64:13:f1:83:39:8c:15:f7:90:23:84:af:05:92:
ff:ca:93:b6:f0:fe:0e:5f:23:4e:b5:f3:35:74:2c:88:fa:f8:
71:e4:3d:2c:46:a2:2f:23:66:d1:3a:24:71:db:d9:40:50:c6:
49:0f:04:ed:ad:44:32:aa:c2:4a:57:3e:44:2c:f8:aa:2c:4d:
94:ac:2c:56:e4:87:59:99:0f:a3:d2:f2:c6:c8:3b:41:6f:82:
65:6c:47:b4:25:5d:7e:34:52:b8:7b:7b:be:cc:48:d3:2e:13:
5e:6d:49:9a:af:aa:aa:31:f9:2a:82:ba:f7:08:6e:db:09:79:
5f:92:9b:37:26:09:09:2e:b6:40:47:4d:e2:fe:be:56:11:3c:
48:2f:ad:5d:1e:b0:7b:11:3a:4d:07:c9:63:1a:d9:95:2d:fa:
3b:1d:67:af:61:46:fd:3e:39:48:4c:ad:cb:e0:c0:45:80:cc:
64:68:40:66:3a:75:e1:5b:b8:fe:4d:c6:77:7c:fa:57:09:c5:
67:c9:75:62:de:e6:74:57:24:3a:1d:21:b5:00:9f:b3:74:b3:
6d:2d:11:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:36:32 2026 by rpki-client