
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
File: TAYxLToLHGP1R9TWRXxM1a9xQ80.mft (raw, json)
Hash identifier: FkVBVcDIZwN/vGDaTW4CJpRmTkpy/hCT3RhF9QUtb2k=
Subject key identifier: 76:9E:4C:6C:0F:8E:B5:C1:6E:21:B2:14:9B:55:FA:F2:2E:E4:D9:32
Authority key identifier: 4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD
Certificate issuer: /CN=A91E0EF2/serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD
Certificate serial: 0537
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
Manifest number: 0531
Signing time: Thu 24 Sep 2026 23:24:16 +0000
Manifest this update: Thu 24 Sep 2026 23:24:15 +0000
Manifest next update: Thu 01 Oct 2026 23:24:15 +0000
Files and hashes: 1: TAYxLToLHGP1R9TWRXxM1a9xQ80.crl (hash: SWfnTTPt4rjb6rkrm9UIXbRzOYj4RsyRTU3sa6whGOg=)
2: 09C2A1645A3511ED8F0A3087C4F9AE02.roa (hash: DkFecwB9znnuUrE2RmF4tqyznqLh8lhTWAuST9cTgro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl
rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1335 (0x537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0EF2, serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD
Validity
Not Before: Sep 24 23:24:15 2026 GMT
Not After : Oct 1 23:24:15 2026 GMT
Subject: CN=6ab5b120-73c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:f7:76:c0:17:d4:15:5f:26:e3:95:39:0d:
3b:21:25:86:9f:8a:93:a8:5d:35:0e:d1:48:84:21:
f0:9f:98:16:5a:26:57:7f:6d:04:13:9e:93:e2:32:
f0:b7:f8:e0:11:e5:57:19:4d:a9:0c:b8:e9:13:62:
f9:a2:e2:84:cc:20:86:0f:ea:2f:18:d3:5b:2e:da:
d4:47:b1:4c:50:8f:f3:ef:06:d6:95:7c:a4:75:a4:
f6:7e:8c:0f:83:63:09:f7:58:f0:45:7b:64:86:f8:
fd:42:da:96:c4:5f:d6:5e:e0:f2:0f:fc:06:d8:be:
13:46:a4:49:b0:4b:7c:c7:92:2d:e8:d9:3c:eb:be:
a1:e5:31:24:b6:81:86:7b:11:25:02:c7:05:4e:46:
13:72:7e:a0:f1:12:47:1d:88:72:85:92:53:38:a8:
f4:3d:d5:03:e5:4d:3a:e5:13:36:4f:f3:bd:15:af:
ae:bb:5c:42:6e:00:6e:65:10:fb:18:cb:3f:4f:26:
8c:9f:92:0c:44:5e:e8:d7:94:54:97:a2:66:84:93:
9f:63:c9:ab:8e:8d:61:91:aa:96:e3:0e:58:b5:a0:
45:8e:f8:cb:7c:de:89:b3:8a:2e:d9:81:56:53:23:
68:7c:4a:2c:3b:07:b5:50:43:40:d3:3e:4e:ca:19:
aa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9E:4C:6C:0F:8E:B5:C1:6E:21:B2:14:9B:55:FA:F2:2E:E4:D9:32
X509v3 Authority Key Identifier:
keyid:4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:73:8e:9a:74:51:3a:d5:8a:3b:e9:7d:da:33:f7:ae:0e:be:
69:e1:8e:f1:3e:2d:f9:c1:df:5f:89:ed:20:cd:1d:5d:d0:89:
bd:6f:13:83:7f:c8:32:02:ea:42:26:5a:7a:0a:e7:d7:ba:bd:
5a:09:5e:07:1f:aa:ea:ed:61:53:c3:f9:44:a2:23:fa:a9:4e:
e2:dd:b8:31:79:c7:62:2f:fc:52:59:1a:50:6a:82:14:b8:f3:
6a:42:b0:21:80:8f:74:65:fa:f1:3f:86:bc:8c:37:33:b4:a3:
e7:ab:be:ca:32:2d:23:7d:40:20:5d:50:37:d7:1c:7d:ce:f7:
15:c3:b9:35:8c:38:d9:cd:ad:ab:a7:b4:ea:44:c0:88:92:55:
e2:f5:f7:71:05:bc:5b:23:55:7a:dd:1e:5f:42:79:0d:e5:24:
b4:52:03:6d:43:ba:be:7c:76:89:06:b7:3e:0a:7b:af:88:e2:
b5:ec:e7:e8:f4:b7:57:ba:83:bf:df:ba:46:81:2b:9b:91:08:
e0:50:93:68:80:b0:4f:d8:d0:d0:2d:65:0c:9a:dd:42:01:e4:
07:f7:7c:19:76:2a:38:ad:eb:c2:06:11:de:bf:75:17:fa:cb:
50:b5:94:24:e8:2e:e2:84:4b:43:9b:1e:93:0c:6a:b2:1f:b9:
98:0a:a1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:35:13 2026 by rpki-client