
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
File: TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json)
Hash identifier: vsZI6qF+LvTlOnZaaGeWS37TX6dHpJHXN0DMmrRGzqQ=
Subject key identifier: 03:97:7E:D0:D8:57:91:97:6D:95:56:9C:4D:9C:4A:C0:F3:C6:E5:4F
Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65
Certificate issuer: /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365
Certificate serial: 01D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
Manifest number: 01CF
Signing time: Sun 01 Mar 2026 04:23:01 +0000
Manifest this update: Sun 01 Mar 2026 04:23:00 +0000
Manifest next update: Sun 08 Mar 2026 04:23:00 +0000
Files and hashes: 1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: 7uNFFaUFg82hZ4GZ4CeOYg1Wikiak7NzQMKwUXag5cs=)
2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: qatvyS4SyJTNURVM2FsClClDPfP+4FEBMIeJZ8wIqMA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl
rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4B3F, serialNumber=4E754F7B08C800067CE071097AD3946890DAA365
Validity
Not Before: Mar 1 04:23:00 2026 GMT
Not After : Mar 8 04:23:00 2026 GMT
Subject: CN=69a3bf25-6ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:ed:04:74:44:b9:e3:96:b0:75:4b:c9:31:
f0:69:a7:be:4e:04:86:ba:86:92:cc:3c:51:db:1d:
a7:21:45:dd:26:a6:f5:8b:14:3a:b5:5f:12:d6:c4:
dc:62:17:02:a5:8f:6d:6c:fb:df:0a:b3:b7:8b:25:
d1:1a:f9:a9:2c:9b:27:a5:ba:f2:40:f1:58:df:6a:
bf:ac:cd:4d:eb:5f:c0:fe:44:9e:3c:a3:db:da:25:
00:cc:b6:9b:4d:b6:b4:bf:e9:59:69:5c:08:4f:c9:
cb:cf:81:2c:63:b5:2e:60:42:9b:22:54:04:45:59:
c7:84:cc:78:94:40:4a:ea:2a:66:82:ae:0e:45:aa:
9d:0e:81:a1:52:5e:a5:c2:47:14:f5:66:14:65:d9:
2e:d1:03:e0:d6:1c:de:fb:7b:6c:04:2e:83:a9:9e:
74:98:d9:ff:f1:66:31:8d:1c:a9:d3:ed:ba:ac:da:
0d:ff:47:af:dd:51:0a:ca:ab:9f:f6:2c:9e:16:99:
ce:7d:a6:90:fd:23:2a:7a:82:4c:c8:0d:fd:19:43:
72:a3:f3:11:2d:14:fc:36:70:4c:32:00:76:18:48:
da:ea:c3:63:47:53:e5:82:87:5c:28:ed:15:c9:ed:
b4:9f:39:31:89:49:69:7c:be:33:5a:75:de:da:97:
7b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:97:7E:D0:D8:57:91:97:6D:95:56:9C:4D:9C:4A:C0:F3:C6:E5:4F
X509v3 Authority Key Identifier:
keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:73:10:e1:2d:6b:99:b4:9f:ed:33:86:d1:2c:85:b9:66:4d:
a4:b0:f4:5d:3c:fc:47:b5:4c:29:aa:ca:6e:cd:fe:1a:50:50:
1d:00:23:91:e5:6c:0a:67:c9:a4:8c:21:f5:db:38:54:bc:32:
cb:d2:4a:78:a5:11:86:b3:ba:c8:08:9b:da:f2:b3:1c:4e:67:
16:a7:5a:5e:f6:e2:50:ef:57:81:c5:ca:f4:14:2f:82:cd:ff:
51:6e:15:32:75:ea:f7:ea:44:64:62:86:ec:c7:d7:15:04:08:
6e:f0:e7:00:0b:10:7f:3b:cd:fa:be:a3:d8:fb:bc:11:60:5c:
04:74:dc:e6:25:a4:37:01:7a:57:b4:05:4d:39:0a:98:5c:46:
cd:b0:5b:55:cb:49:ca:14:40:7c:9c:e8:1c:cc:69:83:cd:a6:
3c:49:2a:a6:f2:78:69:67:32:d3:9e:2e:5e:18:e6:5d:38:a2:
ec:82:b6:2c:08:18:af:c9:a9:38:c3:64:9f:a9:ba:db:3c:37:
5b:d6:59:13:c0:11:62:e5:e7:3d:eb:b2:c2:25:49:98:d1:a8:
fc:f0:b1:a5:c3:15:8f:89:0e:58:86:25:d1:70:50:6b:cd:f8:
1f:87:2e:1a:09:ce:11:01:bf:d7:e7:06:9d:6f:90:e3:9b:c4:
53:d7:b5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:05 2026 by rpki-client