
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
File: TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft (raw, json)
Hash identifier: ZHDBD+6+KmeWn7mjbsoBqgveKuUSHm2yAnveAXD+iOE=
Subject key identifier: 4F:11:13:B4:A0:41:D8:81:67:5C:7C:C5:83:53:62:12:CD:28:47:AF
Authority key identifier: 4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C
Certificate issuer: /CN=A91EF590/serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C
Certificate serial: 07C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
Manifest number: 07B3
Signing time: Mon 02 Mar 2026 02:44:16 +0000
Manifest this update: Mon 02 Mar 2026 02:44:14 +0000
Manifest next update: Mon 09 Mar 2026 02:44:14 +0000
Files and hashes: 1: TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl (hash: lPRmJg9j6krAdQlDo1fYipIRbQOF3MW7DEiyjX4ptEI=)
2: 3B85CDCC5AC611F0A650577AC4F9AE02.roa (hash: rkgRpPSntDWQ2i3VpXZyC4ruluhTZVPYdcmhYGZ+wkU=)
3: 3C4D39C05AC611F0A650577AC4F9AE02.roa (hash: dHWgiPZABmcNXGx9o3LJNG6tvTY4miZBB7QZi5QjuNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl
rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1987 (0x7c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF590, serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C
Validity
Not Before: Mar 2 02:44:14 2026 GMT
Not After : Mar 9 02:44:14 2026 GMT
Subject: CN=69a4f97f-4b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:a2:02:57:17:c8:f2:65:25:c5:94:d6:1b:
cf:0b:48:0a:0b:a7:59:70:02:16:51:88:aa:01:8c:
73:5f:d3:8c:3e:f2:b5:2c:85:52:36:46:33:fa:36:
e8:52:e9:ce:00:6d:c0:62:c0:e6:24:f3:ce:4f:e1:
45:cf:9d:ec:9a:ee:d5:8a:54:e1:a0:88:30:38:f4:
39:2b:47:46:cd:25:85:f1:e8:de:0c:63:e9:cd:8c:
2f:1d:9d:bd:bc:87:9c:8c:c6:fe:a8:7d:1f:d6:a7:
be:5b:2c:91:25:04:f0:c4:e3:93:e7:cd:70:fd:52:
07:b9:c8:ea:b4:cc:0c:ab:2d:0a:53:51:7c:1f:f0:
72:76:d1:ac:24:ac:f4:c4:2f:5d:9a:9e:f6:f3:72:
0b:b4:47:32:3a:f7:61:a1:17:35:54:1d:28:96:31:
e0:ff:86:24:43:0b:71:4c:ed:2a:d5:8b:c5:d1:93:
70:b6:b5:07:64:8c:96:8f:2b:fe:72:55:e8:22:ea:
65:63:dd:70:ad:b0:ee:0b:9f:c4:cf:f7:27:84:31:
58:e7:73:ab:d3:12:5f:21:db:91:a0:9c:62:d5:d2:
b3:b1:6d:a0:41:e2:45:51:b1:b8:2c:82:0c:fd:5b:
2f:d3:95:dd:34:e2:b7:ce:5e:a5:53:2f:97:d5:98:
19:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:11:13:B4:A0:41:D8:81:67:5C:7C:C5:83:53:62:12:CD:28:47:AF
X509v3 Authority Key Identifier:
keyid:4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:08:67:b0:41:b3:3d:ed:fb:51:d0:23:fd:37:0a:72:77:a5:
d6:66:cc:2d:98:98:ab:46:3e:17:d5:dd:38:fb:49:04:15:f1:
41:bd:d9:b8:47:78:4d:eb:eb:b3:3e:70:5e:45:75:6d:fc:e8:
35:04:57:67:1e:96:ed:bc:99:11:f0:a6:81:a1:80:f4:2b:62:
11:a6:bd:14:b9:c6:a3:55:c1:5f:f5:fb:7f:71:7a:4f:f1:04:
ce:6f:1c:d1:5b:01:5f:2e:d5:4e:eb:72:79:7f:79:b0:4e:9f:
30:78:84:d4:6a:85:50:9e:ae:68:47:5d:c0:e6:de:4c:da:4b:
ab:9e:af:2f:05:43:6b:01:0d:2a:6b:fe:61:75:98:15:17:2b:
1d:d6:59:b2:5d:4c:18:2f:38:2d:de:51:4c:e8:75:25:31:11:
80:24:41:1d:6c:37:86:c9:3a:69:3d:f4:98:7b:96:92:23:5f:
76:28:8a:ba:a7:8f:2b:92:01:ae:30:1c:55:b8:60:2c:52:51:
39:9e:5a:fc:8d:fc:83:98:7b:4a:a7:da:58:c2:36:47:07:30:
39:83:4a:d2:44:83:b6:cd:1f:c8:70:7e:d6:ce:e8:5f:f2:fc:
a1:1b:79:e7:2a:8e:4d:d7:10:50:17:06:ea:66:19:1e:a5:34:
72:1c:5a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:39:40 2026 by rpki-client