
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
File: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft (raw, json)
Hash identifier: IDCe7dQSQojyyZ4xVvMEbJNdm0WRdUUmUq3sR36v6oc=
Subject key identifier: 9A:6D:10:3D:F3:6C:C0:94:FE:AE:08:63:FC:AB:7B:26:48:CD:7D:DA
Authority key identifier: 4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04
Certificate issuer: /CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804
Certificate serial: 0B2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
Manifest number: 0B0F
Signing time: Mon 28 Sep 2026 19:27:56 +0000
Manifest this update: Mon 28 Sep 2026 19:27:55 +0000
Manifest next update: Mon 05 Oct 2026 19:27:55 +0000
Files and hashes: 1: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl (hash: f3AeYCIrw4BZ5NQOosXhxiE0RyasvUAVRkdg6xa+WTA=)
2: 6897409A73E811EA93705B7CC4F9AE02.roa (hash: 2QYkb5FVx71rENTmOt/nZuraN9UNA+Z+eXoz/Zp7XRg=)
3: F94FA23C92F211EC8D04F649C4F9AE02.roa (hash: bQX6Igw4+me+Rv2v5T9mzIr7bWVJ8PFd0yJC0JehJ5U=)
4: F61F817C9B3B11EBA5C76B80C4F9AE02.roa (hash: zOty70yAmXIWntlxppQaWlD8QTQjPqogBr4hz0mKPbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl
rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 19:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2859 (0xb2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91149EA, serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804
Validity
Not Before: Sep 28 19:27:55 2026 GMT
Not After : Oct 5 19:27:55 2026 GMT
Subject: CN=6ababfbc-cadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:08:cf:03:e4:c2:40:f7:b2:1b:1e:06:ac:
94:c1:4d:a0:13:ec:91:32:2c:32:31:d3:1c:81:d8:
b3:e3:ee:e2:fd:f5:4f:71:aa:fd:8f:29:ef:ff:eb:
90:78:33:bb:90:02:9d:b2:ea:93:f3:6d:d9:f6:bc:
01:56:d7:ff:bf:d3:19:9f:8f:e6:e8:1c:44:20:cb:
8e:d6:4d:17:be:5c:82:3c:0a:7a:58:01:bb:85:67:
3c:1e:88:13:94:09:33:94:25:53:27:d5:4e:46:1b:
2d:64:fb:f9:db:9a:86:14:22:86:76:05:5c:e8:9c:
33:1c:ac:0e:b3:26:6e:ab:08:8b:07:83:eb:f4:39:
db:00:d6:58:9b:ec:d9:af:66:8c:b4:a5:8a:bc:b0:
4e:1d:c2:dd:92:de:3d:d7:78:8d:4d:a8:a1:5f:20:
4f:a6:ea:a3:37:9a:e3:e3:22:1c:dc:40:08:ba:c2:
8f:5d:93:98:f1:ee:76:33:7d:de:d1:48:0a:e0:09:
3a:c2:f6:8c:c4:52:2c:00:1a:ec:38:90:64:8c:6b:
bc:c9:86:ff:f2:3b:c5:45:3c:22:8d:92:af:db:eb:
39:9b:51:fa:0a:09:aa:3d:5c:9a:c3:79:07:b2:d4:
5b:b4:ab:10:64:ca:29:8b:77:56:86:b4:e7:64:d6:
df:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6D:10:3D:F3:6C:C0:94:FE:AE:08:63:FC:AB:7B:26:48:CD:7D:DA
X509v3 Authority Key Identifier:
keyid:4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fe:e0:57:9e:ae:51:4e:f0:6f:b4:ba:da:9c:d8:62:78:e2:
68:1f:8a:17:c9:53:9c:45:cd:2b:8a:5f:c3:8f:72:01:7e:8d:
d5:13:54:87:2f:12:8a:0a:d3:83:80:f2:9d:23:24:39:b1:4c:
1d:f4:e0:1f:80:56:ab:06:75:e3:e5:a5:b2:cd:71:00:e6:4a:
41:29:36:a3:7c:b8:42:59:26:b4:8b:9f:32:a7:5c:1e:6d:26:
ff:ea:b0:87:4f:27:bb:38:c6:48:1b:fb:41:a0:75:56:0e:e4:
13:64:2b:32:3e:55:93:b7:7b:c7:d0:bf:24:d5:8d:62:34:70:
a3:b5:61:78:d2:3f:72:6a:fc:ec:f8:27:44:c6:dd:33:20:b3:
e4:17:86:08:9f:34:e1:36:61:12:08:bb:cf:92:dc:ac:36:75:
bc:94:28:83:bd:37:63:cd:c3:fc:c1:cb:bc:a7:a4:b4:52:01:
60:84:4d:f0:81:65:4f:7c:1f:e9:95:f9:c4:ca:37:1f:68:0e:
85:81:7b:78:8a:d1:7b:ae:16:8a:3f:40:74:a0:d8:2c:cd:87:
4c:78:36:7e:c5:d0:bf:c2:6f:bc:b9:58:1a:2c:b5:bc:89:e1:
d9:ab:12:5a:6c:6a:c1:50:c8:0c:4e:b9:18:32:c6:5a:d4:ce:
66:4b:e1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:11:56 2026 by rpki-client