
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
File: TvuTtJvxulYAjfxgYItSFq7JmsY.mft (raw, json)
Hash identifier: arnoVyOGUmBPdIyJSIFGd3Xd1pkodhdmymulKlCOci0=
Subject key identifier: E1:4C:AD:C8:23:04:26:A6:85:32:2D:A2:42:A2:3A:A5:F3:B0:81:9F
Authority key identifier: 4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6
Certificate issuer: /CN=A91B8070/serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
Manifest number: C0
Signing time: Wed 25 Mar 2026 06:16:43 +0000
Manifest this update: Wed 25 Mar 2026 06:16:42 +0000
Manifest next update: Wed 01 Apr 2026 06:16:42 +0000
Files and hashes: 1: TvuTtJvxulYAjfxgYItSFq7JmsY.crl (hash: hT6MlNYILC653wG7RB1MXxQ7RGmainkihC7H4qvmib4=)
2: BA8DE47CDFE311F08DEF0674556F56BC.roa (hash: mmdoH+5fMH1SUT2ncOmpXZx/2twUEHAZ4APCf5ovSWY=)
3: 5905CBAEDFE111F083058845556F56BC.roa (hash: 4DuTgqQScmTd+yOhRtQdVkw1Ggj97Z9py9s2ziQdubQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl
rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:16:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8070, serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6
Validity
Not Before: Mar 25 06:16:42 2026 GMT
Not After : Apr 1 06:16:42 2026 GMT
Subject: CN=69c37dca-2eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:df:4f:70:51:d9:73:64:c6:a7:25:aa:52:
c9:eb:68:43:69:d0:b1:db:c7:8e:db:3b:85:bd:99:
d0:4a:bf:2f:04:43:6b:7b:d5:01:7f:37:97:03:c5:
4f:46:50:03:56:04:9c:c5:46:47:21:01:7a:d2:80:
74:a7:8a:ec:68:54:ef:c9:8f:36:08:f4:c6:34:99:
b4:73:e6:a5:3b:2a:91:bd:09:ea:52:65:5c:a7:4b:
b3:f0:e8:4a:68:c2:a8:fe:9a:b2:26:2b:36:6f:fa:
b8:cf:d5:36:b4:7c:50:4d:c6:b5:bc:41:8a:c1:ec:
63:60:5c:b7:e3:0a:9f:41:7a:26:a3:b0:8d:2a:ce:
0d:61:fb:a3:62:03:33:d5:fa:84:3b:35:ff:c9:96:
89:0f:73:10:61:df:b2:40:49:af:c5:bc:96:15:ca:
13:77:62:f2:c3:14:7f:2b:42:f1:99:1b:ef:12:26:
34:cd:17:81:6b:73:ee:eb:c7:b5:e4:f0:2d:33:5a:
2a:7a:af:d7:2f:c7:f6:1c:e1:92:c4:c8:fc:25:5a:
b9:6d:f3:17:ae:78:39:c4:73:67:90:4b:5b:7b:2e:
ce:46:35:d2:5d:2b:0d:39:79:1c:55:00:56:61:94:
20:0a:5e:a5:01:c2:9e:c1:90:fa:e0:5a:0a:04:07:
a2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4C:AD:C8:23:04:26:A6:85:32:2D:A2:42:A2:3A:A5:F3:B0:81:9F
X509v3 Authority Key Identifier:
keyid:4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:54:32:d2:f7:5f:00:ff:ed:83:a7:47:b5:2c:0f:66:4c:70:
b4:34:73:85:3f:e5:c6:83:62:6e:19:c4:15:54:c0:81:ec:92:
00:87:01:93:bb:70:75:a6:31:21:a1:d9:9e:ef:6d:53:00:d6:
e9:33:b4:72:2c:e6:b2:3f:2d:cc:af:3f:b7:7a:16:ca:bd:a1:
6c:7d:11:d2:29:ed:2b:95:3a:3d:26:97:af:21:3a:af:50:67:
b0:f4:3b:54:9d:f7:a8:b7:47:be:32:49:cb:50:df:6c:c4:83:
73:62:4f:e1:4b:6c:03:64:67:16:c0:0e:b7:6b:0f:81:2f:aa:
bc:02:13:ba:cf:d5:a6:19:cb:34:4e:10:6a:ca:c8:ba:5e:dc:
f3:64:91:39:3c:46:8a:0c:8b:ce:f8:a4:12:5e:d2:b9:1f:f7:
e9:20:01:4e:3d:4a:1e:b0:a9:3b:39:05:d7:66:09:62:8a:43:
0b:5f:12:e5:dc:ed:dc:88:76:c6:67:e8:f3:6d:a8:53:15:50:
9e:e9:c7:46:7e:10:d1:87:62:ae:84:a1:95:b3:d6:2f:8a:1a:
8a:ec:22:c7:96:92:28:0e:bf:c5:33:dd:11:7d:78:8d:fb:7f:
1d:48:9d:c6:61:0f:e0:61:c9:79:bf:b7:16:16:5f:c1:2a:5a:
bd:a1:f2:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjgwNzAxMTAvBgNVBAUTKDRFRkI5M0I0OUJGMUJBNTYwMDhERkM2MDYwOEI1MjE2
QUVDOTlBQzYwHhcNMjYwMzI1MDYxNjQyWhcNMjYwNDAxMDYxNjQyWjAYMRYwFAYD
VQQDEw02OWMzN2RjYS0yZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmvrfT3BR2XNkxqclqlLJ62hDadCx28eO2zuFvZnQSr8vBENre9UBfzeXA8VP
RlADVgScxUZHIQF60oB0p4rsaFTvyY82CPTGNJm0c+alOyqRvQnqUmVcp0uz8OhK
aMKo/pqyJis2b/q4z9U2tHxQTca1vEGKwexjYFy34wqfQXomo7CNKs4NYfujYgMz
1fqEOzX/yZaJD3MQYd+yQEmvxbyWFcoTd2LywxR/K0LxmRvvEiY0zReBa3Pu68e1
5PAtM1oqeq/XL8f2HOGSxMj8JVq5bfMXrng5xHNnkEtbey7ORjXSXSsNOXkcVQBW
YZQgCl6lAcKewZD64FoKBAeivwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOFMrcgj
BCamhTItokKiOqXzsIGfMB8GA1UdIwQYMBaAFE77k7Sb8bpWAI38YGCLUhauyZrG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODA3MC9BRTM2NDY5NjEz
ODQxMUYwQkM1RjQ1NDdDNEY5QUUwMi9UdnVUdEp2eHVsWUFqZnhnWUl0U0ZxN0pt
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R2dVR0SnZ4dWxZQWpmeGdZSXRTRnE3Sm1zWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODA3MC9BRTM2NDY5NjEzODQxMUYwQkM1RjQ1NDdDNEY5QUUwMi9UdnVUdEp2eHVs
WUFqZnhnWUl0U0ZxN0ptc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALlQy0vdfAP/tg6dHtSwPZkxwtDRzhT/lxoNibhnEFVTAgeySAIcBk7twdaYx
IaHZnu9tUwDW6TO0cizmsj8tzK8/t3oWyr2hbH0R0intK5U6PSaXryE6r1BnsPQ7
VJ33qLdHvjJJy1DfbMSDc2JP4UtsA2RnFsAOt2sPgS+qvAITus/VphnLNE4QasrI
ul7c82SROTxGigyLzvikEl7SuR/36SABTj1KHrCpOzkF12YJYopDC18S5dzt3Ih2
xmfo822oUxVQnunHRn4Q0YdiroShlbPWL4oaiuwix5aSKA6/xTPdEX14jft/HUid
xmEP4GHJeb+3FhZfwSpavaHyNA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:28:52 2026 by rpki-client