
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
File: TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json)
Hash identifier: 7+JNINQP5jA5BwE9fbXwArDcR0Ff+Xrvqq9MftfbIfI=
Subject key identifier: E9:2F:14:19:C6:13:B1:25:78:47:C8:A3:B7:94:14:6A:AC:1A:BB:B9
Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Certificate serial: 0671
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
Manifest number: 0668
Signing time: Sat 10 Oct 2026 22:40:36 +0000
Manifest this update: Sat 10 Oct 2026 22:40:35 +0000
Manifest next update: Sat 17 Oct 2026 22:40:35 +0000
Files and hashes: 1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: 0l+3J26iQOBTVCpTxRI8HzrYIbsMZyhofYe7KzFvfgE=)
2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: bWBcHaEKUgQ7gyCf6hn1djUztS6Lgf7ZTFoCzaWijUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl
rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 22:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1649 (0x671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Validity
Not Before: Oct 10 22:40:35 2026 GMT
Not After : Oct 17 22:40:35 2026 GMT
Subject: CN=6acabee3-8b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b1:b2:8b:87:c8:c4:2d:72:34:2b:54:7a:dc:
ca:7d:f2:37:25:a4:69:09:b3:e6:27:91:b4:cc:02:
82:a6:5b:5c:96:35:d1:45:c7:6b:7f:5d:29:a6:e7:
15:89:d2:7a:1c:69:14:30:a1:47:b9:3e:d0:cc:70:
06:fb:c9:5c:33:d3:14:92:a9:4f:6a:2d:9d:b7:a2:
e1:c3:b1:ba:71:63:67:34:db:6c:25:5e:27:79:81:
4e:80:29:85:de:a4:44:c3:b0:93:33:de:e8:a5:f7:
a3:af:44:99:7c:32:12:12:01:f4:60:b9:7c:28:cb:
cf:87:08:95:b5:12:1e:14:ce:31:f0:37:e5:6b:6d:
a7:f4:0a:02:fe:5f:64:f8:92:77:1f:86:ac:7f:68:
df:21:ac:75:80:18:5c:6c:64:3e:7b:4d:f3:fe:40:
50:65:e1:47:1f:be:e1:1d:c4:06:f9:a7:d6:b9:ee:
65:56:5a:07:57:c9:34:2f:78:7d:a5:73:4d:d3:bf:
a1:a1:ce:10:38:b4:51:e1:2a:3a:16:31:fd:9b:20:
b2:d7:38:46:3c:4a:f3:d5:1b:f9:9d:46:db:55:18:
0d:06:4f:94:d6:84:94:cf:4c:81:af:59:a9:79:03:
1c:41:3f:15:c9:9e:5a:2d:b0:57:99:4d:66:66:0a:
8e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2F:14:19:C6:13:B1:25:78:47:C8:A3:B7:94:14:6A:AC:1A:BB:B9
X509v3 Authority Key Identifier:
keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:31:b6:b8:cc:c1:3d:f4:78:42:9d:8b:8f:5c:7d:55:54:20:
d0:03:db:40:b7:19:8c:eb:09:a4:bb:b4:4e:4d:60:2a:75:8a:
14:8f:ee:e5:50:c1:32:f1:d6:31:bf:4d:bd:52:bd:04:58:cc:
75:f0:1c:84:a6:a8:5c:0e:03:b5:ff:9d:0d:43:b6:aa:5e:21:
11:c4:c6:af:e5:8e:ae:6b:0d:b7:3a:a6:cf:c0:72:42:bf:5d:
e6:26:f0:26:54:8d:42:e4:f5:ff:1d:dd:13:7f:06:d0:a1:75:
97:3c:c2:70:10:36:bc:b5:b7:3a:82:8a:bc:4f:9d:ad:e4:ac:
51:bb:d4:1b:52:19:21:af:01:9e:b3:e0:62:3f:db:2b:b6:17:
56:22:12:ce:18:69:c8:3d:ac:ba:2b:c6:26:7b:c4:e1:32:73:
38:3e:d6:37:3f:67:68:3e:e8:e1:a6:bf:f0:95:37:56:0f:10:
b7:2c:9c:6c:3e:19:43:12:5c:2b:64:2b:de:d6:dd:30:d5:46:
6d:3d:34:da:e2:f2:c1:70:da:13:06:57:09:9d:20:d8:a4:a6:
af:05:7b:1d:18:6f:d8:f5:f6:79:3c:ea:b0:2f:25:d0:88:64:
7e:98:c9:fd:32:74:f9:74:54:27:22:ae:06:4f:ff:02:a4:59:
3f:3d:e9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:56:29 2026 by rpki-client