
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft
File: tpVKYo70-TShCnBay8uQbtYQSAw.mft (raw, json)
Hash identifier: +yXMZAKUKqMpXhNrRc0oob2VQJ3bdMtUirX6qJ1hUO0=
Subject key identifier: 43:84:F0:EA:EA:C9:85:3D:57:EF:28:59:D3:00:34:B4:BA:AA:C0:00
Authority key identifier: B6:95:4A:62:8E:F4:F9:34:A1:0A:70:5A:CB:CB:90:6E:D6:10:48:0C
Certificate issuer: /CN=A91DE43E/serialNumber=B6954A628EF4F934A10A705ACBCB906ED610480C
Certificate serial: 0C8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tpVKYo70-TShCnBay8uQbtYQSAw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft
Manifest number: 0C7F
Signing time: Fri 02 Oct 2026 18:53:53 +0000
Manifest this update: Fri 02 Oct 2026 18:53:53 +0000
Manifest next update: Fri 09 Oct 2026 18:53:53 +0000
Files and hashes: 1: tpVKYo70-TShCnBay8uQbtYQSAw.crl (hash: crPoUuNFpElchc9N97n9mvsb1M4ytKIC0ec1jl9OQCk=)
2: 5E117DC82AFC11EAB5FEC955C4F9AE02.roa (hash: EyRtY8sGXhVLDI0pwCgdo02VTIkeCLp4JlBiXWPGscw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.crl
rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tpVKYo70-TShCnBay8uQbtYQSAw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 18:53:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3212 (0xc8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE43E, serialNumber=B6954A628EF4F934A10A705ACBCB906ED610480C
Validity
Not Before: Oct 2 18:53:53 2026 GMT
Not After : Oct 9 18:53:53 2026 GMT
Subject: CN=6abffdc1-a696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:0a:3f:cf:0c:00:f0:09:ce:14:b7:56:82:
a6:9a:27:cb:49:4a:45:33:34:9f:28:81:2f:01:24:
28:58:4b:f1:be:45:4f:21:ad:d2:41:96:8f:03:a8:
40:97:ce:b8:5c:dc:bc:73:ea:83:de:e4:7e:4f:87:
02:66:45:a7:74:fe:2a:08:38:31:1f:01:eb:d4:20:
ab:f7:9d:c2:70:a5:22:3f:e7:a7:d2:a1:e4:2e:96:
1d:76:07:f7:13:c1:93:93:cb:1b:74:d0:84:47:29:
37:03:b7:2b:04:97:95:0f:95:87:96:75:51:2b:e7:
ee:05:7e:9e:b2:57:ae:3d:bc:23:65:3b:b3:ad:d4:
33:dc:41:c0:e8:1d:99:18:ff:90:1e:77:9d:ce:12:
50:ac:b2:61:fb:6e:0d:eb:97:b3:7e:4e:4a:8b:47:
f6:5b:83:07:2c:aa:ca:a4:96:3f:d0:35:27:8b:7d:
9b:a2:fb:3d:a9:91:7e:02:5c:9e:4c:ba:39:68:d3:
d8:3f:fc:cd:ac:a0:8b:46:13:6c:0c:75:7c:ff:3b:
ea:e4:9a:48:aa:12:29:0c:33:fe:43:52:85:4f:83:
f5:f9:35:d5:c3:cc:ad:3e:95:bf:bd:2d:4c:17:19:
b8:c4:5b:d7:09:4b:08:e8:53:bb:5e:5d:1f:5d:50:
ad:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:84:F0:EA:EA:C9:85:3D:57:EF:28:59:D3:00:34:B4:BA:AA:C0:00
X509v3 Authority Key Identifier:
keyid:B6:95:4A:62:8E:F4:F9:34:A1:0A:70:5A:CB:CB:90:6E:D6:10:48:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tpVKYo70-TShCnBay8uQbtYQSAw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:7c:77:65:28:d3:c5:cf:f5:4c:4d:9c:a9:3b:a5:12:8b:de:
db:5d:8f:b3:a4:70:88:86:b5:95:64:c7:e9:d7:02:4d:ad:b1:
51:4f:11:b5:b2:1d:b7:5d:c9:63:23:f9:ab:f9:55:b6:bd:2a:
0f:34:28:d2:8c:02:b1:43:84:3a:b7:a7:f6:f0:15:22:3c:92:
99:af:9c:54:cf:4e:07:ac:fd:7c:bb:68:9c:7f:b5:48:ac:4a:
e2:ae:0d:dc:af:d0:60:ab:d2:8a:40:b4:e1:8f:6a:64:91:c0:
11:da:28:37:46:b0:2a:e7:d1:05:5d:47:e1:ec:8d:13:7f:28:
cc:f7:ef:d2:34:96:10:19:f6:4f:df:11:a0:da:f9:97:2c:06:
14:6b:0f:74:d6:70:ae:33:30:96:93:02:8b:1e:99:74:39:03:
b5:62:d7:1f:87:ee:e6:5e:cc:32:48:b4:e4:f8:2b:03:c9:ae:
1a:22:63:d1:e6:e6:f4:5f:25:2e:e3:91:cb:eb:52:b6:5e:0c:
81:f5:86:df:70:f2:18:c5:f9:21:64:75:60:09:7b:a0:f9:87:
9b:45:5c:16:d8:f1:94:74:10:38:4a:c5:5c:22:3e:22:9c:a0:
33:6b:39:f4:17:11:b1:e7:7e:6a:3f:1d:d2:d4:28:60:b2:e1:
bd:73:11:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:26:36 2026 by rpki-client