
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
File: TnWast4kVGn4MRuSc7VVOH51CpA.mft (raw, json)
Hash identifier: rf7POKJtkPgsRgE0KjoiFffHgfVdHU91nGfF6G2ih+A=
Subject key identifier: D6:DE:67:4C:C9:67:54:44:1C:03:B0:6D:71:C4:56:F9:E8:99:29:A8
Authority key identifier: 4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90
Certificate issuer: /CN=A91DF233/serialNumber=4E759AB2DE245469F8311B9273B555387E750A90
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
Manifest number: 0103
Signing time: Fri 17 Apr 2026 05:51:32 +0000
Manifest this update: Fri 17 Apr 2026 05:51:31 +0000
Manifest next update: Fri 24 Apr 2026 05:51:31 +0000
Files and hashes: 1: TnWast4kVGn4MRuSc7VVOH51CpA.crl (hash: 58HfChs9ADuTVoY1ijvPwBRRRVTd9Jycuxc7n1VA03s=)
2: 1FE0E016B37D11EFBDE18263C4F9AE02.roa (hash: dVowzphy2uXgtzt1PiwbcwH9pWDhfnknLc0RqbSLyzs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl
rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:51:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF233, serialNumber=4E759AB2DE245469F8311B9273B555387E750A90
Validity
Not Before: Apr 17 05:51:31 2026 GMT
Not After : Apr 24 05:51:31 2026 GMT
Subject: CN=69e1ca63-65f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:29:f2:de:ed:2c:cb:06:9d:ed:e6:bc:f6:6f:
ed:d8:00:03:87:10:c4:70:bf:3a:db:1d:f4:f6:51:
e9:c8:d0:04:e9:21:5f:02:4e:67:1d:07:36:c0:61:
53:35:c7:6a:34:5c:c0:9b:c7:54:1c:4a:43:2f:b1:
fd:da:ea:7f:38:e5:37:df:e7:57:a9:0b:90:6e:fa:
69:b3:d1:28:ee:74:3c:dc:89:7c:06:bf:3d:4d:6d:
3e:a2:1c:e5:ff:f6:4e:81:e6:e9:55:5a:6a:9d:ed:
17:0b:16:35:be:82:b6:86:f6:99:aa:56:5b:9f:4c:
e9:d3:9c:91:32:f6:92:93:93:af:a9:87:1c:a1:73:
a5:d3:42:86:fb:3a:ce:e2:3a:88:8d:c9:7c:8d:8e:
07:93:fe:77:4f:0a:cd:45:8f:54:18:d7:48:02:5e:
82:c8:95:74:4e:80:58:a6:60:09:17:7e:3b:d5:f9:
4a:48:eb:fd:a2:1c:1d:9f:3d:18:d8:86:45:e3:c5:
c2:e3:0a:cc:dd:71:8e:df:99:ed:a9:d0:e3:0c:7b:
5d:f7:a6:cc:82:4a:15:a1:00:78:3f:c6:f0:b0:86:
7c:ce:23:78:1d:dd:f7:94:fa:f5:42:0d:1b:70:af:
8d:df:d8:9d:a2:b6:d3:ad:04:43:e2:cc:c1:d7:81:
80:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DE:67:4C:C9:67:54:44:1C:03:B0:6D:71:C4:56:F9:E8:99:29:A8
X509v3 Authority Key Identifier:
keyid:4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:40:39:48:43:8d:ff:f0:7e:11:b0:5e:f6:5c:37:ac:44:e1:
cd:b8:68:c2:c4:aa:b9:3e:e3:15:17:4e:6a:23:13:42:ef:9e:
aa:64:57:27:d6:2a:c0:bb:9f:ae:a1:de:d1:b9:59:68:4a:55:
15:56:c3:6d:84:e1:32:12:0c:ff:89:fb:ce:0f:73:02:b5:36:
4a:6a:2d:12:8b:7f:f2:82:dc:bc:89:b3:45:a0:a2:c4:cb:75:
91:f0:b4:2e:53:67:1e:9f:7d:1f:cf:ef:18:fc:82:94:20:b1:
22:8f:2f:06:a5:e2:8c:c7:c4:c7:2b:38:69:0e:6c:bb:19:cd:
51:73:f0:93:2c:63:41:98:1c:8b:6e:3b:70:61:de:fb:98:ff:
49:1d:47:64:a2:a8:20:18:c3:8b:70:02:25:2a:bd:04:e7:e6:
11:d4:3a:2a:7b:0e:d3:2d:91:82:e5:73:b6:01:f7:7a:66:cc:
6a:15:8d:5f:51:85:9a:62:8e:db:bf:3a:30:02:64:40:ea:57:
39:c2:35:ec:5e:41:ba:cf:fb:28:36:a3:8c:0d:cb:c7:08:88:
2f:bf:26:a6:19:24:11:3d:73:9b:fb:6d:bc:ee:7f:a1:27:67:
3d:43:da:ab:ef:cd:93:a7:29:e5:13:bc:e3:96:64:7d:b8:e7:
64:11:aa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:40:04 2026 by rpki-client