
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
File: TAYxLToLHGP1R9TWRXxM1a9xQ80.mft (raw, json)
Hash identifier: OxVGkqmI+bxUhD2waqbgpIZMFADSRQD6tZjmII6Jmik=
Subject key identifier: 6C:08:01:98:56:BF:EB:39:4C:5B:90:49:41:23:F3:BF:62:54:59:CE
Authority key identifier: 4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD
Certificate issuer: /CN=A91E0EF2/serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD
Certificate serial: 04CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
Manifest number: 04C5
Signing time: Sun 01 Mar 2026 01:20:46 +0000
Manifest this update: Sun 01 Mar 2026 01:20:46 +0000
Manifest next update: Sun 08 Mar 2026 01:20:46 +0000
Files and hashes: 1: TAYxLToLHGP1R9TWRXxM1a9xQ80.crl (hash: Y+5i5r4/s4FjsQjPshJSWjsP14xSoAQ/jfxUgdun50E=)
2: 09C2A1645A3511ED8F0A3087C4F9AE02.roa (hash: IcMvoPjviV/wiUzXltFRKVX/YaADT3BwJ5ltkaQXQ7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl
rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1226 (0x4ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0EF2, serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD
Validity
Not Before: Mar 1 01:20:46 2026 GMT
Not After : Mar 8 01:20:46 2026 GMT
Subject: CN=69a3946e-8a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9c:3d:b5:e7:20:ac:37:88:60:f7:ad:cb:19:
b5:64:c1:e4:f7:52:e5:83:25:63:73:56:23:53:ec:
6c:b3:da:9a:a9:c1:5d:9a:2d:27:c1:b2:d2:39:5a:
f3:94:80:f1:6d:40:87:a2:ec:c5:bf:1f:a0:df:6a:
be:34:c3:e6:83:d0:74:77:36:48:22:ff:0d:dc:58:
e5:a4:da:98:08:37:8b:6d:40:e7:5f:0c:02:e0:22:
75:7e:fc:0d:61:6f:a3:dd:5a:a8:38:e5:7c:68:04:
a7:28:b8:0a:6d:a0:3a:e8:bb:a7:50:94:e2:b7:79:
2a:1c:d6:8a:73:bb:3f:01:34:a2:e4:83:e4:2d:7b:
d5:df:21:a6:26:e0:5c:d2:c0:e5:05:c6:6d:8d:b1:
33:aa:30:2a:5c:41:5a:fc:c2:a4:60:20:50:3d:b5:
50:fd:b1:d9:e9:bd:b3:33:79:3d:82:c9:a5:de:ff:
bc:95:8d:e5:58:ea:99:f6:a6:7c:33:f3:65:8c:0d:
6b:39:e0:35:e3:94:21:ae:7b:60:cd:2f:54:5f:f6:
d2:0c:ef:51:54:19:44:4a:32:d5:2f:29:43:ee:71:
e5:d7:23:a0:30:c1:d5:46:6a:73:9d:1b:f9:d8:cd:
0c:d9:cd:22:e1:2f:d9:c3:62:c5:5b:09:09:49:7f:
c1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:08:01:98:56:BF:EB:39:4C:5B:90:49:41:23:F3:BF:62:54:59:CE
X509v3 Authority Key Identifier:
keyid:4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:d8:09:a5:f5:44:94:88:c2:e1:29:cd:2f:de:b7:8e:80:f4:
d2:f8:d1:30:bc:47:ba:9a:f0:af:93:d4:9b:d2:e7:c6:5d:13:
fe:2e:b7:00:79:ac:ff:01:d1:97:74:19:d6:ed:bd:47:41:49:
2d:5d:8f:ce:9a:d2:a2:ca:25:43:bc:33:3d:5d:0b:81:1c:d7:
ea:fa:4e:e0:51:fc:67:07:89:74:22:00:9c:70:ed:49:d5:05:
2b:3a:23:04:f3:0a:40:95:f4:67:e9:92:d4:55:e0:42:86:89:
d7:c2:8f:51:1d:4a:70:35:72:c6:8c:cd:a1:25:ca:c2:b6:cc:
96:de:57:bc:96:b7:ad:a6:0d:bf:5e:d9:09:15:97:5e:14:1f:
3d:6a:9e:39:7f:f3:2d:0c:f7:e4:97:a6:83:87:94:c0:1a:6d:
e7:9d:02:e2:b4:17:f5:e8:49:0b:29:af:4b:c5:5c:2c:93:86:
53:c9:80:4e:64:91:1b:52:aa:04:f3:db:ff:69:ea:2e:87:f0:
e8:9d:b6:47:b8:a4:4e:37:00:7e:6a:e9:1a:99:87:19:57:5a:
9b:57:84:22:5e:e0:34:aa:ad:2c:1b:d8:27:3d:7e:58:05:85:
e0:7c:19:7d:3e:82:3f:ac:c8:c8:81:f4:53:a2:41:6c:9f:70:
76:3f:24:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:51 2026 by rpki-client