
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json)
Hash identifier: 2cprD/b+0Mkd5Wj49tVYxUasU0Oq8xQxc+lAHE6W1G8=
Subject key identifier: 5E:A5:AD:46:27:A0:25:14:85:04:60:D5:38:1D:E1:B0:0C:97:D0:3A
Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08
Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208
Certificate serial: 28BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
Manifest number: 28A0
Signing time: Fri 12 Jun 2026 15:34:15 +0000
Manifest this update: Fri 12 Jun 2026 15:34:14 +0000
Manifest next update: Fri 19 Jun 2026 15:34:14 +0000
Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: joaYuUKXanHPLbnq8JcdShUqs6E2cKM1+eGYuihue9k=)
2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: UmJO0KSnCSvHXcJ5e26UAgnZ2y1lkvWGmHME2yVB9kg=)
3: 1149FE16984211F0B5591074C4F9AE02.roa (hash: LsrfohQQqBt1OXduUHyIG+bruizijWoUQfCjHYmeZgg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl
rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10429 (0x28bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208
Validity
Not Before: Jun 12 15:34:14 2026 GMT
Not After : Jun 19 15:34:14 2026 GMT
Subject: CN=6a2c26f7-069c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6e:d4:0c:0f:6d:81:55:76:04:be:38:69:d9:
59:dd:14:a0:f8:96:d5:56:2e:ed:08:d6:f3:77:a2:
85:6c:65:cb:9d:60:12:03:68:4c:a8:b5:55:cd:b6:
48:2d:a5:c3:15:36:8c:9c:e9:2e:0a:71:d7:5b:63:
4c:c2:6d:ae:4e:5c:6a:ef:ea:17:95:3c:eb:de:10:
a9:7f:c8:37:24:9f:33:0f:fe:50:29:57:53:13:2c:
20:7f:98:6f:d9:2a:b0:c8:20:5e:38:4f:e2:69:e3:
01:ff:bf:fa:31:ed:48:e0:ed:fd:9c:6e:34:d7:08:
89:ad:fc:37:be:c1:2c:ab:b4:e5:5c:94:85:3b:0c:
21:f7:9f:29:5f:29:ab:0f:36:43:da:bc:9d:9d:8b:
55:16:4c:65:df:bd:c5:07:0d:ff:ed:ae:2c:b5:d5:
0e:7c:fd:df:51:0b:c1:e8:dc:08:54:98:4f:6d:69:
bf:cc:1f:6d:80:24:72:a3:76:e2:5d:b9:08:25:04:
1e:5f:d0:0a:2b:07:1c:f5:f0:14:0b:18:ff:14:77:
a3:07:d8:a5:c3:53:a9:03:88:f7:51:14:6a:a9:c9:
7e:b8:c1:c2:82:05:3a:42:56:8f:8b:51:08:11:f4:
cf:66:f6:43:4a:be:e6:d2:fd:06:54:db:b5:2f:fb:
63:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A5:AD:46:27:A0:25:14:85:04:60:D5:38:1D:E1:B0:0C:97:D0:3A
X509v3 Authority Key Identifier:
keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:4b:55:b4:df:db:73:7c:99:be:c2:e6:1a:f6:90:0b:c0:41:
8c:7a:8d:f9:4e:54:dd:02:72:79:36:ae:54:13:89:1a:4c:e0:
4b:e2:94:28:2d:46:3d:80:ca:1a:3a:37:14:5e:29:10:0e:79:
76:98:44:f9:0b:9f:94:e8:57:99:0a:e2:5b:e9:7a:97:ab:b1:
61:99:12:7f:42:88:02:17:e0:0e:f9:43:b7:3b:72:ee:0b:b3:
22:cf:4c:cf:6c:73:69:9e:b1:3c:eb:c3:69:2e:e4:c3:47:96:
8d:36:45:50:94:51:5d:1f:84:f7:cf:c7:e9:42:0a:85:2e:b5:
d6:4d:e4:02:b8:30:a7:8c:d2:aa:35:11:9e:f4:1f:e1:c0:e0:
71:f3:2d:23:80:ed:d7:23:93:bd:47:8b:a8:9c:6f:0e:2a:77:
b8:66:d4:cb:95:0d:62:e3:1b:2d:4e:70:bc:5e:81:a0:26:8a:
c5:e8:99:33:25:0a:fe:00:33:67:7a:42:ae:b1:3c:1e:6e:c3:
b3:4b:e6:56:f3:25:f0:d3:18:94:28:68:b6:71:a3:07:3e:d2:
d0:cb:7e:2a:48:11:35:ce:1b:4f:2e:e1:20:4d:64:78:b5:6d:
36:3c:4e:72:fb:f9:87:c0:27:c1:16:6b:44:1c:4f:ed:08:df:
d5:e1:2a:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4
NjYzODMyMDgwHhcNMjYwNjEyMTUzNDE0WhcNMjYwNjE5MTUzNDE0WjAYMRYwFAYD
VQQDEw02YTJjMjZmNy0wNjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0G7UDA9tgVV2BL44adlZ3RSg+JbVVi7tCNbzd6KFbGXLnWASA2hMqLVVzbZI
LaXDFTaMnOkuCnHXW2NMwm2uTlxq7+oXlTzr3hCpf8g3JJ8zD/5QKVdTEywgf5hv
2SqwyCBeOE/iaeMB/7/6Me1I4O39nG401wiJrfw3vsEsq7TlXJSFOwwh958pXymr
DzZD2rydnYtVFkxl373FBw3/7a4stdUOfP3fUQvB6NwIVJhPbWm/zB9tgCRyo3bi
XbkIJQQeX9AKKwcc9fAUCxj/FHejB9ilw1OpA4j3URRqqcl+uMHCggU6QlaPi1EI
EfTPZvZDSr7m0v0GVNu1L/tjVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF6lrUYn
oCUUhQRg1Tgd4bAMl9A6MB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG
OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NEIyNS9CMjFBNTcyODlGOTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxD
dS05M2RVeDZEbE9HWTRNZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKUtVtN/bc3yZvsLmGvaQC8BBjHqN+U5U3QJyeTauVBOJGkzgS+KUKC1GPYDK
Gjo3FF4pEA55dphE+QuflOhXmQriW+l6l6uxYZkSf0KIAhfgDvlDtzty7guzIs9M
z2xzaZ6xPOvDaS7kw0eWjTZFUJRRXR+E98/H6UIKhS611k3kArgwp4zSqjURnvQf
4cDgcfMtI4Dt1yOTvUeLqJxvDip3uGbUy5UNYuMbLU5wvF6BoCaKxeiZMyUK/gAz
Z3pCrrE8Hm7Ds0vmVvMl8NMYlChotnGjBz7S0Mt+KkgRNc4bTy7hIE1keLVtNjxO
cvv5h8AnwRZrRBxP7Qjf1eEqkA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:18:36 2026 by rpki-client