
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
File: tv1vS0-3wyR8WZKZsui6-1qLunI.mft (raw, json)
Hash identifier: TsBK8R++Zy4YCeuso7lC5usn05EcQ6FyTfWOMZs0+/Y=
Subject key identifier: 44:A1:09:70:9C:2F:D5:53:9C:C8:1C:4F:72:3A:4E:87:1F:2A:48:62
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Certificate issuer: /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial: 077F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
Manifest number: 0767
Signing time: Sun 20 Sep 2026 21:36:04 +0000
Manifest this update: Sun 20 Sep 2026 21:36:04 +0000
Manifest next update: Sun 27 Sep 2026 21:36:04 +0000
Files and hashes: 1: tv1vS0-3wyR8WZKZsui6-1qLunI.crl (hash: jbG/3PCPV2+ul1WlmlyqqwSx9oB+24KrT+J7ZN8gyGQ=)
2: A40873CE7FB811EB82018D29C4F9AE02.roa (hash: DwkOyNqHpDdS7Fd7fdK5+12iodhZ87+NZFCN1mCEus8=)
3: 35341F3E4EAE11EF811DC17BC4F9AE02.roa (hash: NWWfC45uzKuvZ4dw6yp0ErfNgMsQne0/8ctWSm0IyCU=)
4: EC427D64B16311ECA18ED12FC4F9AE02.roa (hash: cQH/POh8o+aP5ihP0cfrYaYM446EMCWcB+KlRcczvBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1919 (0x77f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Validity
Not Before: Sep 20 21:36:04 2026 GMT
Not After : Sep 27 21:36:04 2026 GMT
Subject: CN=6ab051c4-11eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:50:9b:a7:4d:db:f4:7e:10:27:fa:82:32:
0f:1a:74:ff:fd:4c:55:38:34:ae:df:1f:25:3c:b6:
2b:b5:62:8b:a9:13:1e:40:2b:0f:e0:20:59:d0:0f:
fb:71:b1:c2:9f:71:ad:d8:24:f4:17:34:f7:74:7d:
ee:06:f8:f4:89:a1:1e:40:c7:bb:70:4b:21:0b:33:
31:30:36:19:da:d1:c6:bb:a2:17:2b:30:84:68:ba:
fa:e2:db:c8:a3:3b:3b:a2:65:1f:72:b0:ae:c7:df:
5c:b3:92:79:79:cd:9c:04:ed:80:43:2c:fd:84:a0:
1f:e8:5a:ba:63:aa:53:9a:6d:a8:f0:e0:19:8c:1e:
52:11:cc:33:8c:1b:9a:86:6b:ca:da:b0:21:c6:01:
87:75:36:e9:e1:7f:e7:a5:40:ff:65:a6:59:53:59:
4f:94:4d:84:51:72:26:84:10:ae:91:98:ca:57:a4:
c7:4a:fb:2b:83:a4:9d:33:5b:08:e4:11:92:e7:bd:
04:7e:e5:6d:77:cb:05:37:5b:41:e2:44:85:01:32:
16:87:6e:46:1a:91:84:6d:f3:6e:6a:f3:38:c8:42:
a4:93:f9:e4:83:13:f4:39:01:a8:6e:32:e1:a2:88:
e4:78:62:72:7b:9d:a3:77:10:9e:19:8c:ee:dd:77:
66:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A1:09:70:9C:2F:D5:53:9C:C8:1C:4F:72:3A:4E:87:1F:2A:48:62
X509v3 Authority Key Identifier:
keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:96:1d:7c:45:0d:ca:24:62:ae:91:a2:88:25:c8:48:51:8b:
ab:46:3b:40:5b:b4:17:e5:93:4c:98:52:b8:73:52:7a:cd:8c:
ce:56:bf:c1:c9:5d:7f:56:d2:f3:28:e9:27:8e:ee:3d:96:6e:
0d:1b:5c:9b:d6:35:46:0b:7b:d3:1b:30:4a:ae:0a:d2:68:70:
d5:09:54:a5:51:fe:87:97:d2:83:86:1e:37:2b:43:25:b0:b5:
e9:b2:5d:fa:33:e4:27:74:1b:c6:b7:19:34:14:73:ca:cb:b8:
69:5d:5a:a4:95:38:97:f2:c1:ae:06:c4:ca:ee:39:14:0c:ff:
c9:13:74:de:1c:e8:8a:f9:bb:3c:b8:19:b2:41:64:59:c0:b5:
9c:7a:98:99:f0:a1:c1:39:f1:dc:a3:ea:94:e1:e4:5a:da:cc:
46:44:48:20:a7:96:8e:1f:ac:69:4e:2b:cd:50:42:00:fd:6c:
3b:11:64:dd:0f:c0:52:ac:10:95:e0:78:9a:e7:41:96:0f:3c:
43:52:c5:87:fe:47:44:5b:01:14:b3:db:68:28:fb:e7:85:eb:
bb:71:0b:97:49:b6:96:6b:a0:03:9c:08:de:da:8b:00:c3:ec:
57:1b:38:18:49:0e:67:47:c7:13:4c:de:6d:2f:c8:4d:40:77:
df:cf:0e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:33:51 2026 by rpki-client