
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft
File: tpVKYo70-TShCnBay8uQbtYQSAw.mft (raw, json)
Hash identifier: KECuLvjmHASr/v4FrSUz18XYJlLZzmrXkgmW2VVVOF4=
Subject key identifier: E0:1F:09:59:84:07:7A:4E:37:C5:4F:7F:80:DE:06:98:F5:FA:D7:36
Authority key identifier: B6:95:4A:62:8E:F4:F9:34:A1:0A:70:5A:CB:CB:90:6E:D6:10:48:0C
Certificate issuer: /CN=A91DE43E/serialNumber=B6954A628EF4F934A10A705ACBCB906ED610480C
Certificate serial: 0C36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tpVKYo70-TShCnBay8uQbtYQSAw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft
Manifest number: 0C29
Signing time: Thu 16 Apr 2026 18:42:03 +0000
Manifest this update: Thu 16 Apr 2026 18:42:02 +0000
Manifest next update: Thu 23 Apr 2026 18:42:02 +0000
Files and hashes: 1: tpVKYo70-TShCnBay8uQbtYQSAw.crl (hash: LmqVp36DNFRo9Kt0tCw/Qdu8hcmz0iE7WupJBlVxY9Q=)
2: 5E117DC82AFC11EAB5FEC955C4F9AE02.roa (hash: EyRtY8sGXhVLDI0pwCgdo02VTIkeCLp4JlBiXWPGscw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.crl
rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tpVKYo70-TShCnBay8uQbtYQSAw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:42:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3126 (0xc36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE43E, serialNumber=B6954A628EF4F934A10A705ACBCB906ED610480C
Validity
Not Before: Apr 16 18:42:02 2026 GMT
Not After : Apr 23 18:42:02 2026 GMT
Subject: CN=69e12d7b-d406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:48:a4:3b:1c:c7:ab:18:e5:a9:25:24:b9:fa:
81:e6:fe:6b:fe:ac:35:ff:5a:af:0b:af:7b:d6:a7:
9d:73:10:17:df:cd:7c:85:4f:da:96:11:23:0e:ed:
41:32:43:13:84:c0:b9:d4:9a:1d:26:63:c7:88:97:
6d:a2:3b:2f:b6:75:f2:a0:c3:09:81:39:c4:86:d3:
8f:54:f4:fb:32:42:e0:a3:f8:51:9f:3b:e0:5e:c1:
9c:3c:b6:87:ab:76:6b:65:f5:d0:8e:de:28:0d:ce:
56:d3:7e:af:2d:86:99:26:de:d7:f2:a7:20:ef:88:
28:7c:84:a1:f8:18:26:85:ab:2d:fe:f0:77:f3:9a:
ca:e0:9a:c4:8d:67:8b:54:51:3e:c9:fa:40:48:d0:
33:36:9e:5b:41:5e:52:2e:93:c7:bc:26:a2:69:cf:
13:a0:38:b0:dc:f7:05:f9:97:6e:28:21:85:b9:8a:
6c:df:53:1a:63:c7:f0:0a:e3:6e:3f:8b:2d:03:c3:
23:39:c2:42:eb:76:fb:9d:c4:0d:09:3b:e4:67:6d:
49:16:9d:19:c2:dd:d1:31:8b:5d:27:9d:f9:b3:90:
c1:cc:93:30:b2:75:e6:c5:74:2e:4d:88:fc:b5:54:
1c:9a:34:9d:ff:fd:e1:d4:96:1b:66:7c:55:7e:b6:
81:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1F:09:59:84:07:7A:4E:37:C5:4F:7F:80:DE:06:98:F5:FA:D7:36
X509v3 Authority Key Identifier:
keyid:B6:95:4A:62:8E:F4:F9:34:A1:0A:70:5A:CB:CB:90:6E:D6:10:48:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tpVKYo70-TShCnBay8uQbtYQSAw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:76:7e:4e:83:4a:16:5e:30:2b:d0:52:84:a3:ca:8b:a9:61:
20:7c:a9:f4:b3:f7:d1:9e:e6:22:64:ed:49:82:6c:ac:e1:28:
28:13:03:c0:d0:f0:96:99:ed:72:fa:b9:c6:ea:65:45:35:e9:
52:66:d0:06:8a:b2:39:88:e3:07:f3:74:f1:6a:c2:0e:d3:b1:
34:86:47:d5:5d:56:3c:4e:ff:ff:9b:a3:cc:8f:7d:00:93:e8:
0a:d7:86:b8:8a:47:8c:08:7e:67:18:d8:ba:8b:51:15:62:e4:
6e:28:ab:58:af:8e:b7:52:e0:af:97:c7:a7:78:de:40:41:92:
ce:bf:49:95:9b:18:e7:a6:70:51:23:05:76:e6:11:65:2b:2e:
e2:7b:82:38:d6:f4:ed:79:05:ba:cc:00:87:51:30:15:82:16:
ca:93:96:af:60:f3:b8:ed:d5:18:96:46:34:c6:a4:91:ba:e9:
85:78:55:d7:50:f0:de:c0:c9:cc:d6:d8:10:0f:f5:86:fc:55:
44:82:86:61:52:fa:74:59:9d:20:78:3d:47:4a:ba:5f:bd:7f:
4c:d6:8a:4d:48:c5:0f:e2:2a:fc:d2:12:fe:af:c6:74:f0:cf:
07:aa:a3:b0:75:d6:06:12:c3:e5:ca:b8:fc:52:2b:bd:96:eb:
c2:a3:fa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:38:48 2026 by rpki-client