
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
File: TMGqg6KKEDdySbbqS4nZ7doGqXE.mft (raw, json)
Hash identifier: 4FkHFfrzfKUPQ2MDA+ggEG7QzKaXhqp/1Q8T+YNzhYs=
Subject key identifier: 5A:52:C5:C6:0C:9F:86:4F:83:93:44:19:19:C1:9F:7F:4D:28:7E:33
Authority key identifier: 4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71
Certificate issuer: /CN=A91EA7E3/serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971
Certificate serial: 14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
Manifest number: 12
Signing time: Fri 17 Apr 2026 08:45:22 +0000
Manifest this update: Fri 17 Apr 2026 08:45:22 +0000
Manifest next update: Fri 24 Apr 2026 08:45:22 +0000
Files and hashes: 1: TMGqg6KKEDdySbbqS4nZ7doGqXE.crl (hash: HngQbGu4xbl5ezIbtd/vQ3kx7Zw8sAwRicQjmwuReA8=)
2: 5BB88D38245A11F18A931CD8C3833773.roa (hash: dO+a4nQRE+isJxtzRbplPM324KVyASEgu6GREHrp+RM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.crl
rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:45:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA7E3, serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971
Validity
Not Before: Apr 17 08:45:22 2026 GMT
Not After : Apr 24 08:45:22 2026 GMT
Subject: CN=69e1f322-30a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:87:cf:00:d5:e5:9f:f2:6b:1c:d4:b0:15:
86:60:e4:26:0f:04:d5:71:ac:61:61:56:42:54:3d:
68:a9:ef:0b:7b:6e:53:ed:29:bc:3f:4c:e5:53:57:
97:67:5d:07:b4:d2:26:68:da:c0:89:8e:3f:92:45:
77:80:c8:af:ac:b8:f0:10:99:02:2d:87:32:5e:e2:
2e:07:7e:52:03:44:1c:2c:8a:15:38:a8:d4:48:71:
b4:79:29:cd:39:dc:2b:88:c4:35:8e:78:92:a1:aa:
ce:a9:50:24:30:11:fe:df:5c:37:64:71:2b:34:13:
02:c0:7b:bc:4b:6b:3b:0a:29:d0:ee:12:71:3a:16:
23:ef:53:f6:67:b9:8f:30:58:0f:6e:db:c4:6f:56:
70:94:38:b3:2e:21:5a:ea:10:04:57:d4:cf:a9:29:
3f:03:5a:64:7e:65:6f:24:99:5c:67:c7:f7:d7:14:
9d:3a:f7:cc:61:cd:a3:1e:5d:92:4f:e8:0e:81:93:
59:70:4f:c9:72:63:f7:54:69:2d:e5:bf:eb:33:3f:
61:90:08:fb:ba:3d:6a:39:a6:26:1f:35:d0:3a:48:
58:65:47:cc:da:10:02:83:a7:49:80:0b:8d:9a:8c:
99:d3:b2:8a:50:10:33:19:de:58:0c:63:a9:be:51:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:52:C5:C6:0C:9F:86:4F:83:93:44:19:19:C1:9F:7F:4D:28:7E:33
X509v3 Authority Key Identifier:
keyid:4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ac:aa:3a:42:f0:6c:dd:51:c2:26:e4:bc:27:b8:f8:83:98:
df:6f:46:13:23:23:f4:53:01:f8:0b:3f:dd:fc:cb:70:e2:ed:
9d:93:52:ff:29:4e:5f:52:5a:ae:75:fc:7d:fa:d2:e2:ab:6e:
a8:bf:08:62:44:14:c4:f3:7a:a7:72:89:22:bd:fb:db:1d:29:
1d:b4:66:76:ec:28:66:87:80:b2:72:ef:a4:a0:e5:d8:4a:e6:
54:80:ec:46:6b:94:b7:52:62:06:0c:97:d5:55:cc:1d:11:1b:
ac:f7:99:06:4a:c5:d3:1b:a5:f1:58:fc:b6:6b:58:7c:e8:53:
34:77:38:2d:5a:da:41:87:6b:c8:92:86:e1:8c:8e:ed:a1:13:
07:95:bc:96:17:8a:e3:5e:6a:28:ed:d8:9a:03:bb:fd:a1:b4:
24:03:e6:45:63:55:df:ed:96:55:9f:94:4b:e4:24:1e:f5:ce:
14:4d:78:9c:60:ee:58:60:cf:f6:c7:d2:f1:0f:8e:4f:7c:6c:
59:25:18:7d:32:a0:03:61:0a:05:5d:08:5e:3d:80:81:a3:34:
d7:8c:04:22:5c:51:47:73:fd:5a:18:67:b2:36:33:66:5f:b6:
d8:b0:f8:43:e1:7e:08:31:65:ba:a2:ce:db:34:c8:1e:bf:b3:
4e:72:c4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:42:27 2026 by rpki-client