
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
File: tv1vS0-3wyR8WZKZsui6-1qLunI.mft (raw, json)
Hash identifier: 5YmoSMzMG+Dgw8hzZSx13ddOMIZS80zXwOcNwGGfkLE=
Subject key identifier: D8:94:B8:1C:B4:BB:FA:BC:94:24:F1:34:6D:1C:15:2E:C4:AB:F5:04
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Certificate issuer: /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial: 071E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
Manifest number: 0709
Signing time: Tue 24 Mar 2026 21:40:39 +0000
Manifest this update: Tue 24 Mar 2026 21:40:38 +0000
Manifest next update: Tue 31 Mar 2026 21:40:38 +0000
Files and hashes: 1: tv1vS0-3wyR8WZKZsui6-1qLunI.crl (hash: Beafukgpwv96rmLEzsyj+KNImfgUshqddya2VXxajNY=)
2: 35341F3E4EAE11EF811DC17BC4F9AE02.roa (hash: 48dDt0a+xzb3indd8/ODeap3gsGRYkl9Ae79hCnDlqg=)
3: A40873CE7FB811EB82018D29C4F9AE02.roa (hash: t6apfvlYJvqq9FJWUtI8eDXqztkm176ohKOkUYdVlcw=)
4: EC427D64B16311ECA18ED12FC4F9AE02.roa (hash: TxcCtN38H5OlPjI5RyHb05Zr5Rw/P1AwnEYA5q9hLys=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1822 (0x71e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Validity
Not Before: Mar 24 21:40:38 2026 GMT
Not After : Mar 31 21:40:38 2026 GMT
Subject: CN=69c304d6-f955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:86:25:7b:1a:52:1a:f1:d7:a4:07:3c:91:
a0:cf:37:f9:54:97:1b:ae:a6:40:49:d5:ac:5d:1c:
35:c9:f5:31:4a:36:a4:71:fe:39:fe:7a:05:8d:59:
4a:56:1a:0e:ef:94:8e:82:d1:ed:e9:26:a8:12:b0:
ba:72:d1:08:ab:88:17:53:a6:8c:d2:d3:58:2c:00:
65:a4:98:e2:ba:ed:1f:f1:e0:00:d9:af:b7:89:8b:
f2:38:d3:85:66:ee:a2:14:b6:32:0a:57:77:56:18:
98:23:09:e9:73:a4:ab:fa:54:ca:30:46:04:3a:d9:
ac:52:40:89:83:37:37:d2:b2:12:9b:68:83:df:9d:
9e:dd:05:5d:23:97:2f:d8:7b:f1:93:64:dc:3b:d3:
64:b9:fd:7b:d5:d1:52:53:f2:d7:89:71:05:61:c2:
14:d0:0d:fc:b2:84:70:2b:fa:2b:e8:f4:9f:da:a9:
69:ab:9b:d7:fb:ed:c1:13:8e:87:19:0e:8b:48:57:
58:25:0c:a8:69:4b:3a:45:01:bf:d8:ce:a2:98:6d:
f2:04:0d:b3:eb:81:62:f9:c5:37:2e:58:35:92:75:
a5:29:fe:5c:c2:6c:00:d1:e2:d4:bd:99:98:49:b5:
6b:6a:81:7d:41:35:4f:d2:05:c7:d0:6f:4c:2a:fe:
50:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:94:B8:1C:B4:BB:FA:BC:94:24:F1:34:6D:1C:15:2E:C4:AB:F5:04
X509v3 Authority Key Identifier:
keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:7d:a3:a1:94:da:06:11:e9:a1:ea:02:55:ab:1c:58:6f:db:
39:ce:42:83:79:37:02:15:07:6a:e5:fd:1d:13:e5:fd:aa:fb:
1b:35:15:85:ca:d3:3d:a2:5b:4e:ba:11:2a:37:9c:18:81:36:
4a:97:40:52:61:9f:fb:97:c7:f2:36:23:dc:cb:09:7d:73:d7:
87:72:fb:7b:36:6d:3d:e6:6d:76:74:cd:80:2a:9a:7d:59:0f:
70:2c:28:e9:99:86:fe:27:b5:27:52:42:fd:ea:c2:a0:be:16:
f5:7d:db:52:03:a0:4f:37:8c:7b:55:89:08:10:cb:a7:00:46:
c8:b9:45:9a:b1:ed:3b:54:47:63:45:2a:15:33:fc:51:07:69:
cb:4f:75:26:b3:bd:9a:a7:63:75:19:93:b2:a4:16:6b:1e:a8:
f2:dd:8d:2c:bb:96:ef:7a:58:52:bb:06:0e:f1:b5:48:af:83:
73:99:bf:1e:49:49:63:b9:24:e0:72:f0:7c:fd:9d:27:cf:ff:
c4:8a:54:b1:df:fd:6a:2c:8c:74:57:21:4c:71:fe:e6:43:98:
ac:bf:54:0b:db:2b:33:dc:5b:47:43:67:30:82:5f:28:cc:ec:
7f:a2:c2:bf:6f:13:54:2c:7a:8b:82:7f:74:19:84:e5:37:7d:
47:be:bf:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UzQzQxMTAvBgNVBAUTKEI2RkQ2RjRCNEZCN0MzMjQ3QzU5OTI5OUIyRThCQUZC
NUE4QkJBNzIwHhcNMjYwMzI0MjE0MDM4WhcNMjYwMzMxMjE0MDM4WjAYMRYwFAYD
VQQDEw02OWMzMDRkNi1mOTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAozGGJXsaUhrx16QHPJGgzzf5VJcbrqZASdWsXRw1yfUxSjakcf45/noFjVlK
VhoO75SOgtHt6SaoErC6ctEIq4gXU6aM0tNYLABlpJjiuu0f8eAA2a+3iYvyONOF
Zu6iFLYyCld3VhiYIwnpc6Sr+lTKMEYEOtmsUkCJgzc30rISm2iD352e3QVdI5cv
2Hvxk2TcO9Nkuf171dFSU/LXiXEFYcIU0A38soRwK/or6PSf2qlpq5vX++3BE46H
GQ6LSFdYJQyoaUs6RQG/2M6imG3yBA2z64Fi+cU3Llg1knWlKf5cwmwA0eLUvZmY
SbVraoF9QTVP0gXH0G9MKv5Q8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNiUuBy0
u/q8lCTxNG0cFS7Eq/UEMB8GA1UdIwQYMBaAFLb9b0tPt8MkfFmSmbLouvtai7py
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC82REQ5RjMzNDdG
OTcxMUVCQUREQzVGMTVDNEY5QUUwMi90djF2UzAtM3d5UjhXWktac3VpNi0xcUx1
bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3R2MXZTMC0zd3lSOFdaS1pzdWk2LTFxTHVuSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTNDNC82REQ5RjMzNDdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi90djF2UzAtM3d5
UjhXWktac3VpNi0xcUx1bkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgn2joZTaBhHpoeoCVascWG/bOc5Cg3k3AhUHauX9HRPl/ar7GzUVhcrTPaJb
TroRKjecGIE2SpdAUmGf+5fH8jYj3MsJfXPXh3L7ezZtPeZtdnTNgCqafVkPcCwo
6ZmG/ie1J1JC/erCoL4W9X3bUgOgTzeMe1WJCBDLpwBGyLlFmrHtO1RHY0UqFTP8
UQdpy091JrO9mqdjdRmTsqQWax6o8t2NLLuW73pYUrsGDvG1SK+Dc5m/HklJY7kk
4HLwfP2dJ8//xIpUsd/9aiyMdFchTHH+5kOYrL9UC9srM9xbR0NnMIJfKMzsf6LC
v28TVCx6i4J/dBmE5Td9R76/wA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:26 2026 by rpki-client