
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
File: TYBwR6bhsNMLr2Qme_lSJIr906k.mft (raw, json)
Hash identifier: s5UGpjjAAr7hXSeV9UUG6p/l1U6zZJxoNFS0F6OegZ8=
Subject key identifier: 83:D8:13:B4:9E:15:C5:AC:65:2C:99:9E:CC:8D:14:EF:B0:D5:66:39
Authority key identifier: 4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9
Certificate issuer: /CN=A91F7D5E/serialNumber=4D807047A6E1B0D30BAF64267BF952248AFDD3A9
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
Manifest number: 66
Signing time: Mon 27 Jul 2026 10:18:38 +0000
Manifest this update: Mon 27 Jul 2026 10:18:38 +0000
Manifest next update: Mon 03 Aug 2026 10:18:38 +0000
Files and hashes: 1: TYBwR6bhsNMLr2Qme_lSJIr906k.crl (hash: PwRZ/5LP3xz7fMDzNsx/FXTcpcSV0l9gfBsERsmiaMw=)
2: 07DEEBF0F20311F09027AFE1496F56BC.roa (hash: iWkfkl8IPV0JFK1Zl8pweCdJ/SFodByB+0jA5hETEao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.crl
rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:18:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7D5E, serialNumber=4D807047A6E1B0D30BAF64267BF952248AFDD3A9
Validity
Not Before: Jul 27 10:18:38 2026 GMT
Not After : Aug 3 10:18:38 2026 GMT
Subject: CN=6a67307e-69e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:94:33:f3:c8:bd:0a:15:2d:28:9b:fc:85:
e5:cf:49:68:08:07:66:25:50:8b:79:60:b1:5d:16:
0d:ae:a7:b6:a1:dd:a8:f4:5c:6a:5a:26:9e:d9:9b:
98:e3:9f:da:53:60:05:32:b6:55:36:2c:24:d7:a0:
a9:5a:cf:66:44:ee:26:5e:41:91:dd:cb:cb:a9:b7:
02:c0:64:46:f5:9c:52:82:68:9a:85:d1:3e:e2:4d:
b3:e3:bc:af:30:4f:0b:6b:32:16:ae:f0:b0:af:5c:
89:9f:75:19:cd:f7:1d:c0:85:2c:77:5f:d0:9c:9a:
f4:7e:10:ab:58:88:0a:0f:4f:78:d8:e5:61:af:6d:
cd:31:49:28:4e:ba:4c:f4:07:67:c6:32:5f:ca:8c:
d0:33:fa:31:43:9b:76:78:b4:6e:ed:86:67:0a:bf:
48:ca:f0:07:4a:fe:1f:9f:c4:ad:a8:bf:3c:0b:e1:
b2:71:55:5c:87:37:c9:1f:93:8f:42:6d:cc:81:b4:
50:0b:31:a2:13:0e:eb:5c:55:5b:05:8c:01:ee:ac:
cf:f3:7c:94:92:52:d7:2d:cc:98:ff:de:30:69:26:
c2:e7:fc:ad:55:0e:aa:db:b1:c8:96:33:b7:b7:19:
f0:ed:21:53:a5:3b:46:06:ef:1e:29:d4:0b:a0:89:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D8:13:B4:9E:15:C5:AC:65:2C:99:9E:CC:8D:14:EF:B0:D5:66:39
X509v3 Authority Key Identifier:
keyid:4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:72:55:fc:4e:a9:9c:f3:b7:88:b3:97:ed:2f:84:86:60:a3:
7a:4b:bf:f1:e8:c0:41:3f:08:63:2d:29:cd:e8:59:1a:b1:db:
28:c7:bd:c1:10:4e:41:2a:ca:06:cf:75:ba:0f:95:52:88:04:
02:5b:85:5f:94:37:ec:1b:f8:8d:0c:72:47:01:5b:55:a1:d4:
1a:7c:51:a7:01:60:a0:bc:35:cc:f2:c6:14:2e:09:f5:82:94:
f0:1c:20:e7:eb:7c:1f:23:18:7b:9d:09:d3:81:75:09:ca:e4:
37:6d:22:f6:d9:b0:56:69:52:23:3d:98:cc:9e:b5:cd:79:02:
ab:72:49:13:f5:96:bc:fc:d4:e9:9f:07:61:22:19:1e:c4:a2:
44:fe:28:39:1f:b2:5b:22:55:30:ee:d0:d4:4c:73:ae:29:a1:
e3:e0:d0:19:ca:af:d5:8f:02:65:50:33:97:71:2d:ba:51:c5:
4e:e0:20:69:f6:40:ff:c7:cb:1c:42:39:85:32:5e:ff:0b:cc:
d8:26:fc:d0:d9:1e:20:16:b2:07:72:6c:42:48:1d:cf:e9:1e:
b7:56:1d:0a:16:13:ad:0d:ef:64:d3:6b:55:5d:74:87:55:6b:
3e:cd:1d:e9:4f:12:ac:5e:05:f2:85:e1:eb:f9:03:c5:c0:c2:
9c:0e:d9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:00:44 2026 by rpki-client