
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
File: TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json)
Hash identifier: 36jKJMfvekiFNqrA7PKeBUTq/9YRYsoffPxjxB0oKvA=
Subject key identifier: 32:B2:98:AB:32:E1:E0:24:9B:EC:90:E7:E1:74:AA:7C:0B:31:23:62
Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65
Certificate issuer: /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365
Certificate serial: 020B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
Manifest number: 0205
Signing time: Sat 13 Jun 2026 03:04:35 +0000
Manifest this update: Sat 13 Jun 2026 03:04:35 +0000
Manifest next update: Sat 20 Jun 2026 03:04:35 +0000
Files and hashes: 1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: Y+RleDNdHteMznqSdDdWIqbXocDw3/03j5d0Gk4iUVg=)
2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: dLUeKe6QaZ4GPKIE3nlD7SGlABym7P6qS+9RNwN3OQ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl
rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4B3F, serialNumber=4E754F7B08C800067CE071097AD3946890DAA365
Validity
Not Before: Jun 13 03:04:35 2026 GMT
Not After : Jun 20 03:04:35 2026 GMT
Subject: CN=6a2cc8c3-b4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:f7:c2:de:df:02:6c:9a:1e:de:31:b1:8b:
26:e1:8f:24:b5:ef:78:66:19:4d:64:c3:15:32:e3:
57:9f:58:55:20:10:f3:1a:a7:ea:ff:a7:05:9d:67:
d2:a0:cd:1e:0d:1c:ea:a4:02:3e:9e:2b:5f:9b:d0:
51:ac:86:a7:a1:30:4f:09:0f:b1:59:61:67:52:91:
13:91:c3:5f:8d:13:2c:df:87:c1:af:15:c0:00:97:
a6:b3:11:8e:61:88:4d:fc:bc:5b:75:85:ff:f1:79:
ba:6d:70:5d:4a:dd:b0:a3:ed:1e:52:f3:58:d0:6e:
0e:c2:b8:5f:b4:ae:1f:ef:01:9b:2b:02:7c:10:29:
e2:43:59:fe:d2:fb:44:aa:62:ef:1f:b3:dc:1c:e1:
80:e6:11:bb:9b:9c:18:3d:d3:5b:f4:d3:38:67:f5:
84:6e:58:79:19:51:22:93:fc:28:36:66:6f:8c:7c:
1f:a9:4c:15:ec:6a:ee:5e:08:3b:72:31:25:d4:64:
24:48:21:30:a6:82:74:40:44:c4:b0:8c:ec:f2:35:
07:7b:ea:02:f3:b3:16:a8:8d:03:df:83:f7:9c:fd:
e2:12:95:ed:50:ef:40:76:02:e7:68:0d:c1:0c:0d:
ec:7b:ec:09:bd:1d:53:12:79:56:6e:c9:fb:c1:97:
21:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B2:98:AB:32:E1:E0:24:9B:EC:90:E7:E1:74:AA:7C:0B:31:23:62
X509v3 Authority Key Identifier:
keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:c0:e1:3c:af:be:37:69:34:b4:31:25:61:6a:bb:1b:0a:2f:
b6:dc:7b:33:62:16:aa:38:c5:8a:05:df:68:19:58:7b:df:23:
73:1a:22:6e:bb:b4:81:f9:e2:6c:40:6d:8b:27:29:2a:00:22:
63:7e:e3:63:ef:5b:be:2c:a2:bc:b5:c0:55:39:02:b3:5a:62:
0f:fe:28:2a:f8:72:59:36:a1:fa:ef:c5:f5:5a:39:05:dd:d0:
e1:03:2e:82:b5:b9:5d:d7:ec:d7:76:cb:ba:5f:83:cb:48:a2:
22:2d:b5:24:36:b1:0a:a2:a8:84:69:a1:1c:71:a4:1b:fa:84:
c9:b2:2e:7e:40:01:02:6d:18:67:1f:57:a7:00:b1:a0:ae:c9:
a5:e3:60:77:a1:a4:26:e3:a0:5d:bf:1f:01:eb:07:0f:80:c5:
12:55:39:75:d8:0d:4d:36:18:d1:46:72:1e:d0:70:1d:af:43:
c0:7a:46:62:1f:0d:bc:f1:f0:61:dd:91:b0:3e:50:48:db:47:
47:8e:f5:e3:9d:61:c4:95:d3:66:5e:18:fe:5a:01:09:69:a5:
fd:d4:bd:ac:5b:3f:d6:46:db:14:53:fa:e5:f5:7f:06:f7:77:
c1:27:9d:94:82:6c:1a:ba:9a:51:a5:35:94:78:a0:17:43:49:
27:b2:23:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:28:32 2026 by rpki-client