
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
File: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft (raw, json)
Hash identifier: OqgIILMexGW9McCRC4zzMhWYqiBF7Xe3sUklM/YYokQ=
Subject key identifier: D3:BD:17:EC:99:A9:71:D9:33:1C:9F:E8:25:A6:F7:5B:C5:7D:64:69
Authority key identifier: 4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4
Certificate issuer: /CN=A91E82C4/serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4
Certificate serial: 0898
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
Manifest number: 0888
Signing time: Tue 12 May 2026 20:43:18 +0000
Manifest this update: Tue 12 May 2026 20:43:17 +0000
Manifest next update: Tue 19 May 2026 20:43:17 +0000
Files and hashes: 1: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl (hash: EP0athAHWpks+lOLevQazV/7+nOy03/+nZlEQ50qbk8=)
2: EE7FBFECF5DA11EAA1976953C4F9AE02.roa (hash: iPjKL2ZgrtC9Tvx6I57sdrTIecoMgsexB7eAngqUnWA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl
rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2200 (0x898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E82C4, serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4
Validity
Not Before: May 12 20:43:17 2026 GMT
Not After : May 19 20:43:17 2026 GMT
Subject: CN=6a0390e6-1d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b9:05:db:5b:f5:9f:40:29:11:68:29:5d:06:
1f:f2:18:b4:64:af:2f:58:a3:ad:b8:dd:f5:48:0c:
a6:4d:25:6d:6d:20:52:f6:81:6c:fc:69:56:4f:03:
8e:d3:3b:4c:f0:a5:05:99:1a:79:40:3b:45:c6:b0:
99:2b:12:9d:6f:14:9f:47:0c:68:f1:f6:2a:fb:f9:
62:8d:32:0f:63:d6:7a:dc:de:2b:b0:50:1f:fd:b2:
9d:0c:7f:3e:88:31:6b:f3:30:e3:e6:18:44:1c:15:
a0:4a:a8:cb:e9:2c:d1:ff:c1:46:7d:c0:48:82:e6:
b5:c9:c6:bb:5e:74:d6:71:6b:0d:fd:b9:d3:a4:83:
c4:4c:01:ab:11:32:e6:33:b8:f6:a2:15:de:c8:28:
1c:3f:7f:e4:b4:48:d5:e0:b9:20:8f:83:11:bb:c1:
d3:59:ba:a5:d1:2a:32:88:4f:36:3c:bc:4b:c6:5c:
02:69:e5:1f:05:20:ba:85:13:70:65:73:6a:9d:a2:
d2:e2:bd:66:f0:18:04:70:31:c9:9a:01:8a:1f:3f:
58:ec:64:40:1d:11:2d:a0:29:6a:03:35:61:c2:9b:
88:f3:4b:25:8d:61:dc:09:49:4a:8e:a4:3e:a1:26:
f8:4d:fe:82:31:94:3e:f1:34:d1:f1:97:9b:24:25:
c0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BD:17:EC:99:A9:71:D9:33:1C:9F:E8:25:A6:F7:5B:C5:7D:64:69
X509v3 Authority Key Identifier:
keyid:4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:05:9a:87:cb:86:cc:21:53:78:40:70:45:fd:da:35:9e:70:
d2:05:74:76:6c:60:18:24:5d:b1:fc:10:46:78:58:e0:b3:a4:
a4:5f:df:07:0f:6f:af:88:cb:95:60:d4:a2:81:2f:e5:94:64:
88:94:56:8a:d7:30:f3:d7:fc:d0:e6:5b:70:19:40:95:c9:3a:
22:d6:de:c5:23:61:62:13:88:9a:09:7c:c6:e4:43:cc:43:ff:
12:17:1a:84:18:53:1d:ee:a2:14:ca:cb:3c:12:fe:a5:53:cf:
43:c7:b3:1b:4f:11:b0:f0:0e:da:98:dd:e6:fd:f9:a0:a5:e8:
86:ff:69:0a:15:ed:e7:03:4e:46:8f:53:0a:fa:70:97:7a:4a:
b4:a9:68:fc:08:c2:bb:3b:92:d0:59:be:42:64:c9:f0:a2:bc:
3a:bc:c1:ee:02:22:fb:32:78:b8:52:4c:38:2c:e8:31:2c:68:
a2:56:1a:6e:c7:7b:ca:d1:04:fe:ea:d4:f7:2b:5a:26:c9:af:
9a:67:38:f5:75:d5:b6:6b:4e:df:6b:6e:97:46:2e:48:5a:4a:
08:08:9d:4f:c9:94:a9:84:c5:f2:68:91:c1:0f:70:ea:2d:c9:
04:61:de:3a:3c:d5:5c:c4:14:aa:b8:0d:13:40:90:9a:bd:52:
a8:56:5f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:58:58 2026 by rpki-client