
$ rpki-client -vvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
File: tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json)
Hash identifier: 7kocr7IAUf/NXsCVcWLTGfj2LcCUdfQR4/0ei8LFWBs=
Subject key identifier: 07:56:07:04:19:D5:CF:BB:83:43:02:53:C6:46:E1:03:58:C9:02:4C
Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00
Certificate issuer: /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900
Certificate serial: 027F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
Manifest number: 0271
Signing time: Sat 13 Jun 2026 02:01:30 +0000
Manifest this update: Sat 13 Jun 2026 02:01:29 +0000
Manifest next update: Sat 20 Jun 2026 02:01:29 +0000
Files and hashes: 1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: 2xCJWxG6TdbgLc4cW100WrBHpQeybBH1JVpypwzADg8=)
2: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: eZ7E672T6C2NAQF7FO/EpOxkj6QwEhrMyFrT7Izg/p4=)
3: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: S3mtiXgsL+/eI/0ypZKkTLQQz8Kl0Q3Gz9IYr9ftMk4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl
rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 639 (0x27f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91933FE, serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900
Validity
Not Before: Jun 13 02:01:29 2026 GMT
Not After : Jun 20 02:01:29 2026 GMT
Subject: CN=6a2cb9f9-faf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:ce:81:97:8d:e1:5b:de:60:86:02:00:66:
37:c0:71:56:45:07:a2:85:69:80:59:4e:e6:d3:78:
67:98:2d:b6:2c:f8:41:1b:85:e0:11:18:d2:79:80:
8d:13:e5:24:d3:07:8e:2d:4d:51:9f:2a:18:40:4b:
23:d3:b1:95:bc:22:13:05:f6:64:aa:89:f0:e3:43:
c8:f0:6a:fc:3c:aa:ec:8a:48:eb:a8:42:18:26:fe:
f2:de:aa:f9:b8:52:eb:f4:96:ca:ea:6f:b3:24:21:
f7:9b:b1:73:8c:0c:f2:02:ea:ab:1f:5c:ac:37:5c:
3f:d9:87:c0:c5:ee:e7:3e:b8:50:70:d4:51:df:85:
90:45:f9:f5:16:3d:02:ee:f4:79:98:13:b3:f7:f1:
9d:99:6d:c7:44:44:d0:08:1f:c4:0a:45:a3:0a:f1:
69:6a:ca:5a:e5:fd:ee:5b:ae:b1:b0:26:23:0d:d7:
68:74:82:c0:e4:fb:9b:ae:df:9f:c4:65:71:2f:6a:
c3:2a:17:bb:4c:34:fe:20:75:ba:e7:a5:0b:be:cf:
bf:d2:d2:fc:77:38:96:bb:46:d6:0b:e6:a7:a5:65:
50:59:b4:8a:8a:bf:ba:fe:c5:f4:0a:7a:8f:76:ac:
1e:c5:b5:48:91:f3:e6:dd:94:00:e2:00:29:30:54:
f2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:56:07:04:19:D5:CF:BB:83:43:02:53:C6:46:E1:03:58:C9:02:4C
X509v3 Authority Key Identifier:
keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:38:3b:bf:da:fa:44:ea:24:cf:72:fd:be:1a:6c:54:e7:25:
72:5a:e2:5f:23:50:5c:ab:31:39:fb:9c:38:62:12:ef:14:28:
07:8a:07:23:57:85:f6:18:39:00:9c:eb:8f:7d:6e:f4:28:c7:
3d:3c:19:b1:1b:de:e9:1d:88:7e:0c:f2:dc:c6:5d:a2:24:59:
40:01:96:09:90:40:e0:1c:a0:fd:38:f3:39:c4:59:b8:c6:8c:
83:69:7b:00:6a:a7:90:63:cd:87:9c:dd:ab:b1:85:43:42:40:
f4:80:1a:ca:29:9b:3b:34:99:20:51:46:6b:a3:92:ba:14:7e:
f3:eb:67:fe:eb:03:02:f4:2a:b9:d1:2d:f7:38:22:74:bd:a6:
a0:76:38:a5:6d:d0:cb:24:a2:3c:9e:53:53:20:51:4a:20:51:
66:dd:cd:85:3b:a7:77:67:69:98:2a:0f:b8:4f:a8:8f:43:93:
97:3c:a2:fe:c1:db:df:47:44:31:87:15:1f:0b:4b:ab:68:c9:
f0:69:d2:fa:39:13:37:79:43:5a:8a:61:5d:b9:56:a3:49:0d:
6f:a4:32:fd:78:ed:8f:16:7e:0b:c6:b5:8a:a5:05:cd:39:b8:
1f:ba:e8:9c:2c:97:e2:41:34:b2:e1:2e:85:1d:97:99:fa:e7:
b0:a1:03:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:21:50 2026 by rpki-client