
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
File: TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json)
Hash identifier: C5i2+H3KkJIz/usns19I5DdTlmAnFytkJHguzN/MxFk=
Subject key identifier: 24:EA:7C:90:A4:51:78:8C:BE:D7:6C:37:83:CC:78:61:70:31:6B:EC
Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Certificate serial: 064B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
Manifest number: 0642
Signing time: Tue 28 Jul 2026 23:19:36 +0000
Manifest this update: Tue 28 Jul 2026 23:19:36 +0000
Manifest next update: Tue 04 Aug 2026 23:19:36 +0000
Files and hashes: 1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: 9Xg0ZXj5gHpCNdeLhCtfMRI4cgBAk2OsCH9ugPUKwJs=)
2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: bWBcHaEKUgQ7gyCf6hn1djUztS6Lgf7ZTFoCzaWijUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl
rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 23:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1611 (0x64b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Validity
Not Before: Jul 28 23:19:36 2026 GMT
Not After : Aug 4 23:19:36 2026 GMT
Subject: CN=6a693908-b94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:22:68:55:cd:b7:51:75:dc:ba:f6:82:07:
43:44:29:26:6e:62:0e:79:df:a4:a4:d5:34:7b:e3:
f4:65:f7:77:b7:21:73:64:78:cb:70:23:68:8e:44:
ae:84:fd:03:3c:3b:61:80:05:5c:31:54:62:5d:fb:
a0:d4:bb:e8:0f:e6:99:fa:24:3e:af:ec:ad:71:20:
c6:9d:25:76:18:f8:b2:9b:f2:06:68:23:32:e2:bd:
b9:e4:b8:85:a9:da:d2:5a:2e:de:e7:95:6d:9b:c5:
28:0a:fe:36:67:bd:99:1a:2b:a8:ae:fb:5a:7d:07:
50:7c:1e:84:01:10:48:d5:4b:da:6f:da:ba:f9:c5:
db:67:f8:b4:e8:bd:c9:be:af:23:03:3b:d1:dc:fc:
99:31:e7:e9:a8:ed:27:8a:50:c0:8c:7c:b8:dd:35:
b9:bf:85:75:ca:8a:62:a2:d7:8b:84:2f:84:26:87:
87:22:60:45:29:20:4c:ea:8f:ae:70:13:38:59:62:
9d:4d:89:83:b6:f0:f8:65:64:95:f9:fb:be:fd:48:
ed:87:5f:7d:6b:8e:d8:bc:37:83:92:b1:d8:0d:de:
2f:32:71:48:44:43:56:1f:9f:be:c0:86:72:63:ee:
22:0b:a3:86:5f:61:92:b1:a1:bd:ff:1c:b8:fa:db:
ed:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EA:7C:90:A4:51:78:8C:BE:D7:6C:37:83:CC:78:61:70:31:6B:EC
X509v3 Authority Key Identifier:
keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:56:76:cd:ea:a5:7b:cf:70:0c:fc:f5:3d:6d:6f:37:33:1a:
37:21:36:3b:fb:06:d2:1b:35:e3:29:3a:b2:d8:49:1e:b4:86:
1a:20:31:4d:8e:6a:4b:5a:d9:3f:a3:38:d1:54:15:0c:63:9d:
05:47:d2:94:53:1a:62:b7:ca:8f:1a:08:e6:0e:75:66:7b:1e:
e6:17:7f:19:61:85:3f:a1:85:72:93:c2:c8:45:e3:16:86:bf:
95:4b:95:b2:8d:63:45:82:2e:fc:88:54:19:fb:ae:67:3e:f9:
51:53:7d:4b:03:e6:b6:0b:3f:95:0e:6f:35:76:fa:27:ce:83:
9d:f3:6b:51:c2:cb:4b:1f:13:0f:27:50:09:3e:5e:2e:cc:f1:
46:5b:5e:b0:cf:32:a8:29:36:46:be:f6:f7:f3:85:ef:24:15:
91:4c:fa:7c:b2:a5:7e:6b:d5:bb:e0:bd:7d:b3:31:68:35:54:
37:fa:36:fa:12:74:30:0d:85:55:95:73:25:9b:5b:b1:9f:38:
96:9a:aa:4e:51:d3:de:2f:57:57:6d:42:47:3f:62:09:4b:fa:
cb:7c:de:9f:50:df:f2:b2:87:e1:c7:16:b6:5d:8a:8a:90:73:
33:00:e7:92:96:7a:bf:d8:82:b2:7d:78:86:36:ba:3d:25:24:
60:61:59:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:34:59 2026 by rpki-client