
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
File: tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json)
Hash identifier: c0YMigQqW7VWHdUihfjYUUnhDyjFuiGtEw3H0Ezykes=
Subject key identifier: EE:1C:98:A4:D7:C0:E5:74:20:DC:7B:19:CF:1C:34:15:AB:8B:E5:C5
Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00
Certificate issuer: /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900
Certificate serial: 02B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
Manifest number: 02A8
Signing time: Fri 25 Sep 2026 01:34:39 +0000
Manifest this update: Fri 25 Sep 2026 01:34:38 +0000
Manifest next update: Fri 02 Oct 2026 01:34:38 +0000
Files and hashes: 1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: BPcXOuQaHg3BNdOrpquve5RZ7KAyQnrVfJDAPb2eT2Q=)
2: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: Nx8p40wpmQJaQ1ixRb0RaIHzHah1RRDJVUTvARd80Iw=)
3: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: TZdE3HJfuKeAgiwJf4jZ08pWEIcR5SdkaLtt8LTpMbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl
rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:34:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696 (0x2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91933FE, serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900
Validity
Not Before: Sep 25 01:34:38 2026 GMT
Not After : Oct 2 01:34:38 2026 GMT
Subject: CN=6ab5cfae-ae88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bf:77:cf:ae:e8:a2:f8:03:fc:6f:32:b8:92:
bd:3c:58:1b:01:2e:9c:c0:b1:e7:91:1b:08:b4:26:
71:fc:5f:8b:7f:2b:38:5f:44:0c:e0:9c:6b:ad:39:
ac:51:c2:65:10:5b:14:12:a3:44:fb:bb:d2:0c:80:
06:04:32:02:57:a3:c4:b2:8d:2e:0b:44:1b:85:cd:
5e:46:14:63:95:c3:4b:a8:61:fb:69:27:e5:ea:4c:
67:fa:f1:c7:e2:69:bf:fb:ce:5a:31:4d:d5:fc:ba:
42:b6:7f:bb:97:bd:03:19:85:70:10:0d:cd:e2:5f:
c3:a7:89:3b:dd:1a:a4:15:1e:0e:6d:4e:6f:39:ca:
a1:31:41:a9:62:1e:be:48:d0:81:34:39:09:d8:1a:
8e:7b:2e:36:40:73:df:5a:78:0e:62:d8:7b:0c:67:
bd:dc:09:a1:3d:31:9b:46:45:e4:70:40:91:89:26:
f9:f5:96:fb:3f:6d:77:bf:cd:ee:cd:51:4a:b4:1e:
10:89:7f:0d:54:61:ab:ae:17:14:48:0e:c1:8e:a6:
f5:2d:49:22:57:b1:a6:6f:1b:0f:f6:2e:75:b9:e2:
52:9c:d1:bc:01:d7:36:4d:a7:f2:36:c9:b2:c9:3e:
b9:62:b1:46:b1:fe:c9:7e:0e:7b:e3:18:4e:3c:ee:
00:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1C:98:A4:D7:C0:E5:74:20:DC:7B:19:CF:1C:34:15:AB:8B:E5:C5
X509v3 Authority Key Identifier:
keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:40:0a:79:09:d3:9a:3e:44:b2:c2:45:d4:a3:7e:04:5e:56:
4c:62:98:b6:31:1e:af:f8:bd:b5:87:5c:b3:a1:5a:22:9e:63:
82:61:f5:3b:0f:18:87:14:58:03:75:dd:75:fd:99:aa:d0:42:
dc:8a:5d:09:7e:04:ec:46:d6:d3:71:4d:3c:b0:d3:7e:b4:76:
2d:2b:85:80:3c:56:f6:f9:b8:04:2d:7c:8d:95:59:55:aa:10:
f4:52:2b:d1:b0:8d:7b:da:d1:37:98:4b:93:9a:ef:91:4f:87:
c9:cb:a8:4a:c9:16:c7:37:8f:6e:b2:a6:1e:cc:ef:42:44:0d:
8e:f5:78:27:14:a2:0a:b4:3f:a4:11:93:1d:ff:70:5a:29:90:
fe:14:a3:16:e2:19:f7:03:9a:d9:c5:4a:35:cc:85:94:e0:80:
7e:3f:f9:a2:30:69:b6:a0:0d:72:03:6e:17:e1:52:80:92:84:
0d:ca:12:8d:b9:2b:c9:c1:cc:cd:aa:a3:c9:ed:54:ea:65:3a:
26:ee:ad:4a:ed:a0:87:2e:77:d0:eb:3f:08:ec:3f:64:c3:bd:
68:c9:47:8b:50:be:54:ca:c0:9d:4b:83:ed:be:41:e2:09:17:
f0:89:04:9f:d8:90:c7:a6:e5:66:60:0f:3c:82:e1:fd:d2:2a:
4a:2e:c0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:33:10 2026 by rpki-client