
$ rpki-client -vvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
File: tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json)
Hash identifier: N2Cx1ociOwBZfrTddoqKCHnHlZXVSfuIShZm//ocfzM=
Subject key identifier: 98:19:B3:D8:C6:A2:50:41:3A:2F:F1:80:44:25:61:7C:56:75:E3:12
Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00
Certificate issuer: /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900
Certificate serial: 0270
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
Manifest number: 0262
Signing time: Wed 13 May 2026 02:12:39 +0000
Manifest this update: Wed 13 May 2026 02:12:39 +0000
Manifest next update: Wed 20 May 2026 02:12:39 +0000
Files and hashes: 1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: z3jwp5AXkYuha6Ahp5hGqR/Oq7heD/SfNTfdFJMmXhE=)
2: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: S3mtiXgsL+/eI/0ypZKkTLQQz8Kl0Q3Gz9IYr9ftMk4=)
3: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: eZ7E672T6C2NAQF7FO/EpOxkj6QwEhrMyFrT7Izg/p4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl
rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91933FE, serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900
Validity
Not Before: May 13 02:12:39 2026 GMT
Not After : May 20 02:12:39 2026 GMT
Subject: CN=6a03de17-aadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:4e:ec:91:0a:5c:f0:0f:38:b3:c8:75:0b:
9f:c5:11:d8:a9:5b:12:59:b5:85:ed:52:a8:fe:ff:
d2:3b:68:f2:ce:55:98:87:74:c3:4e:5a:ed:d8:d4:
2e:9e:03:07:63:d6:90:ad:d8:da:d2:b2:a0:8c:f2:
4c:04:b0:e2:1f:41:e6:4d:24:dd:36:79:66:6e:c0:
dd:3f:11:9b:1b:08:6d:91:73:56:f2:16:4b:0b:05:
27:be:f4:b7:5f:99:4e:19:63:c4:39:b1:c2:35:a3:
b1:af:b3:3a:09:25:89:ff:80:2f:00:1d:e3:f2:cf:
13:72:88:46:50:2e:a7:59:0f:dd:61:60:e5:f2:6d:
6f:13:d3:48:b9:90:b6:a7:cc:6c:a7:5d:5f:e4:70:
29:76:18:01:88:50:fc:da:10:4e:d9:dd:f6:59:15:
dd:30:fb:11:ce:1c:58:81:39:39:9d:1b:a4:c1:3d:
65:45:c8:05:8a:f9:4a:11:6d:2f:32:ea:23:43:71:
77:32:f6:b1:e8:3a:dc:62:a7:2d:2d:c5:05:d8:02:
81:f4:8f:74:14:3c:49:b9:8b:cb:2d:f2:6d:2a:3b:
8e:e5:36:18:b7:40:de:09:5a:35:d9:87:64:07:fd:
48:47:1f:b3:f2:90:e1:59:74:c8:d3:47:66:4b:02:
1c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:19:B3:D8:C6:A2:50:41:3A:2F:F1:80:44:25:61:7C:56:75:E3:12
X509v3 Authority Key Identifier:
keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:83:67:00:cf:69:a0:46:14:1a:b2:86:ad:17:e2:84:4a:f5:
bb:f6:5f:5b:23:c6:bc:27:36:76:20:1d:fa:29:ac:9d:6a:dc:
c9:20:53:76:0e:7d:bd:95:68:bc:90:4d:46:bb:25:28:80:c8:
fa:7a:82:27:69:9b:12:d1:10:c1:2a:92:af:5f:8b:bd:cd:e4:
ad:e7:37:dc:b5:4b:23:ec:10:a6:e6:47:31:93:a1:22:af:79:
3e:51:7e:1b:63:7f:04:5c:24:3b:e2:3c:3f:49:aa:7f:d2:9e:
ac:d3:27:4c:b4:3b:78:25:e9:42:ff:37:33:65:67:5d:1d:98:
76:68:9c:54:57:01:d4:90:04:e8:3d:84:3d:81:c6:f7:d2:55:
5d:8d:48:dd:d2:18:b1:14:26:7e:54:7c:c2:ac:b4:d6:ac:18:
d7:23:7a:4b:a8:18:e7:e0:73:5c:f0:67:aa:96:b5:b2:36:4f:
4f:3d:47:07:79:26:aa:43:de:d3:29:07:b9:e1:98:5e:a1:23:
0e:cf:d9:85:b5:88:f0:ca:f1:c0:92:4a:0d:d6:a1:8f:6e:e8:
37:f0:33:dc:01:2e:f2:b6:26:ef:c7:92:46:67:ec:38:8c:62:
fe:44:6a:5b:70:bb:d2:03:6c:e2:d8:17:c7:7f:ba:e9:07:ac:
40:2d:b8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:11 2026 by rpki-client