
$ rpki-client -vvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
File: tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json)
Hash identifier: zFJJyn90mCwaiG09OhRvwOXouwjkHRw3oe2ERZKVLiw=
Subject key identifier: 8E:93:DF:29:F6:3B:75:65:FE:C3:54:DE:F4:B9:AD:6C:95:F5:D6:05
Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00
Certificate issuer: /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900
Certificate serial: 0263
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
Manifest number: 0255
Signing time: Fri 17 Apr 2026 02:01:40 +0000
Manifest this update: Fri 17 Apr 2026 02:01:39 +0000
Manifest next update: Fri 24 Apr 2026 02:01:39 +0000
Files and hashes: 1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: F+GqB7nT6XnXbFpqDnm9o4b0Q/Tk08srRWGUkE/em7U=)
2: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: eZ7E672T6C2NAQF7FO/EpOxkj6QwEhrMyFrT7Izg/p4=)
3: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: S3mtiXgsL+/eI/0ypZKkTLQQz8Kl0Q3Gz9IYr9ftMk4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl
rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 611 (0x263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91933FE, serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900
Validity
Not Before: Apr 17 02:01:39 2026 GMT
Not After : Apr 24 02:01:39 2026 GMT
Subject: CN=69e19484-a660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:8c:5a:47:6a:43:17:7b:91:62:e8:1f:17:
2b:a1:8c:31:f8:ae:7d:23:f0:c5:29:7c:e4:c0:29:
a2:d2:48:6c:b5:97:68:9e:53:65:e5:3d:e1:3e:d4:
a5:93:c2:71:19:44:ce:dc:c1:f4:5e:64:17:88:5f:
72:a4:53:0f:13:85:55:e5:98:fd:c1:ec:51:af:66:
3b:47:ad:71:0e:55:ca:7b:da:a2:17:28:06:94:f7:
b3:c3:c0:3c:67:c4:7e:ec:b6:91:c7:f0:d2:bd:60:
11:49:ee:29:1e:86:e3:d2:d0:89:bf:ab:89:ed:90:
0f:c3:55:2b:94:69:11:0a:99:d8:bd:db:e2:12:6d:
45:10:c1:d0:12:41:68:02:2a:62:dd:29:71:7c:16:
59:6c:2f:39:81:8b:3f:bd:87:5b:e4:00:cd:40:32:
b8:cd:3e:ab:a5:4f:75:95:9b:46:97:cc:bb:58:27:
ce:ab:2f:b0:de:7f:d5:8a:95:3a:5d:12:0e:39:e2:
cd:66:cc:ba:bb:cc:13:b9:59:69:7b:37:a5:26:75:
65:a7:c7:20:ec:51:65:79:a8:26:28:6d:c7:8e:0e:
48:08:e1:97:09:bc:dd:dd:ad:c5:04:72:2f:de:c2:
34:c9:8a:39:06:b3:db:75:46:e2:1d:d6:37:fc:77:
20:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:93:DF:29:F6:3B:75:65:FE:C3:54:DE:F4:B9:AD:6C:95:F5:D6:05
X509v3 Authority Key Identifier:
keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:71:1e:f4:ea:f3:4f:12:1a:71:69:9f:3f:d6:5c:5e:0b:ae:
cf:f5:63:90:46:ff:17:55:5a:8e:07:5c:07:cc:aa:a0:78:cf:
67:cb:fc:5e:a2:db:f0:64:ff:3d:3d:31:6b:ee:c7:9d:85:3e:
e3:5a:e8:fb:55:59:13:ed:4f:32:d1:2e:69:5c:84:7b:73:91:
93:aa:ca:cc:8d:c8:28:e4:45:d8:64:2e:78:c7:c3:05:27:f2:
49:4f:82:84:22:75:bf:cb:89:c5:2b:cd:34:42:5b:b8:8b:ef:
d8:e2:46:86:2c:3e:d7:72:d4:37:08:cc:b0:6c:d0:36:46:a5:
46:10:7b:73:fb:45:47:6d:91:22:80:49:7c:b0:8f:84:7f:af:
a4:05:65:3b:07:a9:a6:1b:78:dd:3f:90:69:9e:35:92:b1:76:
75:4a:12:ec:85:5d:df:19:bc:c2:d4:0f:ce:32:4d:88:f4:f2:
57:9f:a0:a1:43:9e:a6:0c:aa:ba:e2:a5:a2:51:c5:3c:75:d2:
a6:fb:e4:c3:1b:8e:e2:79:4a:00:e2:90:82:0b:79:ea:9a:08:
d4:25:fb:45:97:c6:73:09:8d:c2:ca:a1:d2:45:97:52:b2:25:
e2:f5:c6:4b:af:30:0a:f7:e5:98:6f:d8:78:03:14:55:ef:20:
41:c4:22:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:40:33 2026 by rpki-client