
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft
File: TNneNy0DSKwzsWel144wE_wDVx8.mft (raw, json)
Hash identifier: yt+cW3fE7QMuGUgNyv0+u2QBgfeZvrKVvERaadCE+IE=
Subject key identifier: 3E:30:B3:AE:5D:EB:E6:E9:37:50:67:F6:CD:31:2D:C8:9C:8C:20:17
Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F
Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F
Certificate serial: 0296
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft
Manifest number: 0291
Signing time: Fri 12 Jun 2026 16:16:58 +0000
Manifest this update: Fri 12 Jun 2026 16:16:57 +0000
Manifest next update: Fri 19 Jun 2026 16:16:57 +0000
Files and hashes: 1: TNneNy0DSKwzsWel144wE_wDVx8.crl (hash: k9Q7a5Yvpk6VmvorhI1sQOvLK9MSsIrKBQuCP7qJPfs=)
2: 5CAB3758374A11EFB612084EC4F9AE02.roa (hash: ueHqaGP9BcHIMZqPcQWizwyy9v5xkPDp7cUx2N9DhCY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl
rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:16:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662 (0x296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F
Validity
Not Before: Jun 12 16:16:57 2026 GMT
Not After : Jun 19 16:16:57 2026 GMT
Subject: CN=6a2c30fa-e703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:d2:4e:fe:3f:26:b6:67:3d:bd:5b:6d:86:
14:20:ef:16:5b:3d:2a:4e:84:2e:c0:ea:df:89:a7:
32:20:43:2e:d6:5d:ad:6b:18:da:35:74:8e:82:b1:
0e:ed:62:20:b0:0e:95:a9:e2:5c:09:34:2a:95:4c:
be:44:db:15:34:cb:c5:3a:c4:f8:b3:32:87:46:12:
a5:f4:03:e0:a0:f4:24:9f:02:c8:96:00:d6:5d:e7:
41:64:a5:6c:ba:ec:d6:90:73:a1:4a:61:3c:23:1d:
69:6e:25:6b:33:8a:8c:65:1b:fb:45:8d:4c:d5:8a:
d1:9f:64:9c:a5:f8:0d:23:62:fe:91:2f:14:a1:50:
e8:6e:11:68:f3:9b:34:48:ee:84:43:fe:ca:89:38:
a1:f6:36:2e:59:6e:e7:94:a2:7c:9d:48:90:db:6a:
8f:7e:f2:d6:32:77:44:1d:c4:a6:e4:ba:98:55:10:
63:62:ec:27:dd:81:ca:3d:12:4a:cd:b6:5e:e4:cd:
98:4f:89:cc:e1:54:e5:15:6d:55:9f:05:ad:6d:2e:
89:bd:ef:26:07:da:12:d5:29:65:33:62:1a:86:14:
d3:27:3c:55:6e:84:19:be:69:c0:07:dd:55:b1:57:
a3:ab:06:d9:91:87:11:71:b9:1b:0b:06:b8:64:f5:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:30:B3:AE:5D:EB:E6:E9:37:50:67:F6:CD:31:2D:C8:9C:8C:20:17
X509v3 Authority Key Identifier:
keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:83:33:0c:8f:a0:c8:09:b9:48:11:f4:30:50:0a:68:5c:aa:
ef:0f:1a:21:1e:cf:75:88:7b:fd:1c:0f:0f:fe:a3:f8:0a:c1:
4f:01:87:36:db:75:65:c8:a7:32:34:0a:92:cc:57:fb:3b:24:
0f:8b:1d:fb:9b:77:01:cb:f2:dd:06:3f:ec:f2:fb:c3:36:95:
6c:c6:a7:87:34:65:73:1c:de:72:33:26:f6:41:33:a3:1e:50:
0d:8a:3b:29:0e:c2:a2:d8:2c:50:da:73:62:45:35:ed:37:48:
a0:24:fa:09:9e:9e:83:39:69:8a:c0:1e:ed:91:0e:5d:0c:2c:
34:c6:00:8c:27:92:c8:2d:3f:a6:44:78:34:09:b0:44:ae:47:
c3:d1:5b:6f:ed:44:c2:81:e7:7d:22:89:b9:c3:5d:cf:47:87:
de:dd:5c:60:3e:b0:4c:8c:b7:1c:4a:3a:d2:57:fa:b2:6b:df:
03:0c:c7:34:c4:09:8c:a7:62:ef:b2:d0:ac:08:f1:37:2e:28:
b1:5e:d2:6c:ec:92:08:95:07:63:2a:e6:2b:36:25:d7:59:b8:
d7:82:93:f4:48:ed:3d:72:55:ee:17:5a:29:93:11:95:2e:dd:
b8:9a:57:e0:de:b3:cb:ae:f3:c4:48:41:d4:84:88:5f:4e:75:
64:d2:e1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:37:56 2026 by rpki-client