
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
File: tPvjSrdmEqnSCuUrCttB_PgKEv8.mft (raw, json)
Hash identifier: rWIFEXAEvxAyqDwcZAVt77zZV0z4/nvjj8UaUM2ZKU0=
Subject key identifier: 27:EB:B4:FF:ED:3D:66:DF:2A:55:82:C1:FF:8C:35:7B:4E:A7:4D:88
Authority key identifier: B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF
Certificate issuer: /CN=A91BF6CD/serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF
Certificate serial: D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
Manifest number: CE
Signing time: Fri 25 Sep 2026 06:50:01 +0000
Manifest this update: Fri 25 Sep 2026 06:50:01 +0000
Manifest next update: Fri 02 Oct 2026 06:50:01 +0000
Files and hashes: 1: tPvjSrdmEqnSCuUrCttB_PgKEv8.crl (hash: kXcYpAONSutal9Fxtd0GOzoj25Whtl/qbUT2AWrmZAk=)
2: 3E99E81C816E11F0A5992F28C4F9AE02.roa (hash: PtxDOStSKg5v1Xktyj+xGCbDFKA4GPkHNsN6+Bx9sn0=)
3: 3E1ABB8C816E11F0A5992F28C4F9AE02.roa (hash: uyOU7OWturYo16z8/9jzgKBsXU3ESi7wumKHXnMPiW4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl
rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF6CD, serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF
Validity
Not Before: Sep 25 06:50:01 2026 GMT
Not After : Oct 2 06:50:01 2026 GMT
Subject: CN=6ab61999-ce3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:e3:73:ca:39:c5:4f:15:e8:c5:8e:af:ac:
0f:a3:80:a2:5e:c2:cc:a4:14:c9:83:9f:57:e7:00:
c0:66:38:95:1e:ee:c9:f5:59:5b:b3:62:cd:e2:a0:
10:d3:60:98:83:75:40:de:e1:2f:91:bc:dc:39:1d:
5b:b2:cf:e8:11:fa:65:f8:47:0d:76:6e:8b:f4:cf:
4d:1f:bd:f3:f1:15:e5:fb:d9:ee:1c:30:80:0c:b3:
44:7a:31:50:74:34:fd:53:93:19:44:eb:83:12:b1:
ff:a8:12:5a:b8:3f:df:4c:88:17:25:d2:19:e3:06:
1e:c6:95:22:ea:ff:79:e7:8a:65:9e:97:df:95:1e:
8a:ac:24:93:c3:67:c1:d4:20:64:ba:d8:19:91:8a:
dc:cc:6a:c9:4a:da:16:8f:97:18:02:f6:cf:24:7c:
93:a8:8d:87:28:bf:11:67:d2:4c:4e:12:e3:09:77:
fc:14:1c:0f:ee:bc:87:d1:56:f3:15:bb:a8:c7:23:
8c:48:e6:cb:a0:64:3a:f3:da:8c:ff:67:1b:dc:df:
b3:7c:91:2a:a9:b1:73:2b:3d:91:8f:cf:cf:d0:e5:
54:58:eb:79:4d:7f:41:7d:e2:e1:2d:52:20:af:7a:
0c:a2:3a:22:c2:55:63:45:ef:d4:d1:d9:37:08:44:
53:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EB:B4:FF:ED:3D:66:DF:2A:55:82:C1:FF:8C:35:7B:4E:A7:4D:88
X509v3 Authority Key Identifier:
keyid:B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c9:53:0f:3e:60:61:8f:7d:22:6a:38:8c:31:0d:de:1d:54:
3c:09:d9:e4:30:d2:4e:f8:2e:e6:ee:ad:26:ef:c8:86:33:c7:
61:6c:bc:72:f1:c2:dd:a1:91:79:6e:15:ad:87:c8:6a:24:bc:
f3:ba:ad:38:a8:93:8b:4a:fe:d5:de:21:df:6d:26:ad:d6:6e:
84:48:bc:9b:3c:ac:b0:eb:58:a5:34:ef:63:73:b5:d3:8d:08:
19:89:02:33:bc:64:b9:d9:08:c0:2b:a5:27:07:bf:f7:60:30:
61:d5:01:1c:a1:18:65:95:16:b9:ed:dd:49:a0:5b:52:d4:f0:
a7:45:1d:94:5f:92:ab:60:15:d3:4c:0a:58:a4:f3:29:e3:63:
db:72:a6:09:d5:9e:40:fd:ce:75:d0:6d:12:cd:5b:6d:14:2a:
a3:3b:93:49:8c:f7:c6:c4:9a:d1:c9:82:72:b8:3d:c9:65:70:
68:ec:3d:e5:60:c2:a7:92:b8:d3:27:aa:89:13:33:ba:d3:69:
5a:cd:54:a4:3a:92:37:7c:45:e4:9d:d7:17:b3:d0:39:e5:64:
f1:86:6e:c8:75:8f:b1:d9:77:b6:55:b8:04:37:0e:de:b3:8d:
f0:57:d0:98:46:27:a3:41:56:29:9c:6e:45:24:1a:79:b5:a9:
78:cb:6e:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkY2Q0QxMTAvBgNVBAUTKEI0RkJFMzRBQjc2NjEyQTlEMjBBRTUyQjBBREI0MUZD
RjgwQTEyRkYwHhcNMjYwOTI1MDY1MDAxWhcNMjYxMDAyMDY1MDAxWjAYMRYwFAYD
VQQDEw02YWI2MTk5OS1jZTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvunjc8o5xU8V6MWOr6wPo4CiXsLMpBTJg59X5wDAZjiVHu7J9Vlbs2LN4qAQ
02CYg3VA3uEvkbzcOR1bss/oEfpl+EcNdm6L9M9NH73z8RXl+9nuHDCADLNEejFQ
dDT9U5MZROuDErH/qBJauD/fTIgXJdIZ4wYexpUi6v9554plnpfflR6KrCSTw2fB
1CBkutgZkYrczGrJStoWj5cYAvbPJHyTqI2HKL8RZ9JMThLjCXf8FBwP7ryH0Vbz
FbuoxyOMSObLoGQ689qM/2cb3N+zfJEqqbFzKz2Rj8/P0OVUWOt5TX9BfeLhLVIg
r3oMojoiwlVjRe/U0dk3CERT/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCfrtP/t
PWbfKlWCwf+MNXtOp02IMB8GA1UdIwQYMBaAFLT740q3ZhKp0grlKwrbQfz4ChL/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjZDRC8zMzNCQzYwODgx
NkQxMUYwQTkwNjZEMjVDNEY5QUUwMi90UHZqU3JkbUVxblNDdVVyQ3R0Ql9QZ0tF
djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RQdmpTcmRtRXFuU0N1VXJDdHRCX1BnS0V2OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjZDRC8zMzNCQzYwODgxNkQxMUYwQTkwNjZEMjVDNEY5QUUwMi90UHZqU3JkbUVx
blNDdVVyQ3R0Ql9QZ0tFdjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmslTDz5gYY99Imo4jDEN3h1UPAnZ5DDSTvgu5u6tJu/IhjPHYWy8cvHC3aGR
eW4VrYfIaiS887qtOKiTi0r+1d4h320mrdZuhEi8mzyssOtYpTTvY3O1040IGYkC
M7xkudkIwCulJwe/92AwYdUBHKEYZZUWue3dSaBbUtTwp0UdlF+Sq2AV00wKWKTz
KeNj23KmCdWeQP3OddBtEs1bbRQqozuTSYz3xsSa0cmCcrg9yWVwaOw95WDCp5K4
0yeqiRMzutNpWs1UpDqSN3xF5J3XF7PQOeVk8YZuyHWPsdl3tlW4BDcO3rON8FfQ
mEYno0FWKZxuRSQaebWpeMtuZQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 15:50:31 2026 by rpki-client