
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
File: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json)
Hash identifier: abRFcaUQSE2R88P7F4LwuuXHP75El+57q5B5xluVnyk=
Subject key identifier: 03:FA:4E:B7:FA:B6:EF:C9:9D:58:45:86:78:85:63:AA:2E:8E:92:E7
Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A
Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
Manifest number: 016E
Signing time: Thu 15 Oct 2026 05:55:32 +0000
Manifest this update: Thu 15 Oct 2026 05:55:31 +0000
Manifest next update: Thu 22 Oct 2026 05:55:31 +0000
Files and hashes: 1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: i9AAzDBbz8B6PdQ/FwBWuitK6M9sPYZ2izzDkFBcQ/8=)
2: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: iXPPbRwODBTS92FzdfuvK5J3jl/IZyMATy+kQwe/++Q=)
3: 12B6D40E37C511F19788E36ABE833773.roa (hash: f5bzM7j+pO8fCnEBI50cYrv56JA2HlZHuSFXp1GJx88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl
rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 05:55:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDEFE, serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A
Validity
Not Before: Oct 15 05:55:31 2026 GMT
Not After : Oct 22 05:55:31 2026 GMT
Subject: CN=6ad06ad3-e3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:49:5d:5e:fc:ad:b6:51:0a:ea:87:79:15:
55:62:7a:de:7f:34:b4:c9:00:9d:a8:8a:19:fc:a3:
d4:c4:39:d7:ee:b3:b4:f3:e6:75:b6:2b:c2:7f:56:
89:cd:60:f2:ba:88:1a:ad:32:9f:63:31:df:90:0e:
49:f1:3f:b3:82:06:8e:e3:db:bb:9e:a9:c1:27:50:
68:f3:92:27:1b:c2:b8:b7:f9:43:18:63:c5:18:28:
7c:2a:62:bb:54:20:e8:08:99:7e:e9:ca:68:50:f7:
0b:b8:03:ab:6f:b1:da:81:0a:42:be:90:94:17:f1:
9d:ea:30:bb:b8:76:e8:93:fe:0f:63:b1:7e:2f:fa:
a0:e8:ec:fb:44:3e:c8:5a:c4:57:bd:20:a0:b9:39:
fb:c9:a9:41:a6:8c:8d:cd:8a:f7:5b:d8:34:e5:f2:
97:76:31:72:df:50:a0:89:9b:3d:c7:db:e8:35:dd:
2f:d2:11:05:55:1d:53:3b:39:9c:e3:f1:c8:25:c5:
ce:7c:73:7a:72:3e:70:f9:74:08:0e:e8:35:03:a6:
d3:29:4b:cf:c3:4d:dd:ff:fd:9b:af:e3:3a:ba:c6:
52:b4:8b:c8:99:bc:93:9b:1d:3b:37:62:e0:24:5b:
db:78:6a:92:7d:6c:5c:aa:2e:aa:58:fe:cd:2a:36:
e5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FA:4E:B7:FA:B6:EF:C9:9D:58:45:86:78:85:63:AA:2E:8E:92:E7
X509v3 Authority Key Identifier:
keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:d8:d5:f7:2a:6c:03:a1:a1:f9:59:ad:f2:93:60:4f:d4:35:
16:d7:40:bf:18:b7:17:db:72:09:8d:5d:66:d0:a7:c8:ba:8a:
5c:51:39:83:4d:7f:ae:fd:2d:b2:61:01:78:c0:42:c3:c0:c5:
62:1c:f6:ae:02:cb:a7:b6:fc:c3:6d:da:6f:af:13:ce:db:d1:
34:d9:1b:35:3b:5a:f4:94:52:a0:78:50:59:fc:f6:5d:64:99:
c5:d9:48:1b:f6:f6:49:8e:dd:f9:99:09:79:9f:1a:3e:2e:04:
be:2b:8e:4e:8d:b4:d9:6d:7d:28:3f:06:cf:d5:85:97:76:21:
69:99:d9:de:48:ee:5f:ff:32:ef:d3:4e:b1:c0:1f:10:b6:28:
2a:ad:bb:ac:82:9f:dd:8c:61:84:b0:b9:bb:ae:0c:fa:a4:8d:
81:72:cd:02:36:29:ab:17:33:92:cb:44:63:24:43:8a:c9:c5:
9f:f9:20:3a:41:3c:9e:de:8e:ab:99:45:a8:67:ba:09:02:fd:
b8:51:f9:c4:fe:a4:a0:b9:08:51:0b:b4:62:d9:84:18:6f:c9:
e9:59:03:24:4a:43:83:e0:cc:72:c5:48:81:a4:42:ec:e5:0c:
58:a6:31:87:10:af:ed:ee:45:c1:0c:51:99:f1:92:3a:b9:e2:
0a:11:fa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:14:21 2026 by rpki-client