
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
File: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft (raw, json)
Hash identifier: +lxZFSYGupunl+7ptleyFtr5GSmxkphiCDR2raxn++Q=
Subject key identifier: D9:F7:CA:3B:B3:AE:7B:C1:BF:F7:26:75:01:36:5C:DF:CF:D0:81:59
Authority key identifier: 4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4
Certificate issuer: /CN=A91E82C4/serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4
Certificate serial: 087F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
Manifest number: 086F
Signing time: Tue 24 Mar 2026 20:28:12 +0000
Manifest this update: Tue 24 Mar 2026 20:28:11 +0000
Manifest next update: Tue 31 Mar 2026 20:28:11 +0000
Files and hashes: 1: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl (hash: fWZ/gh5SJCDA0VPNU7IMzf7btf0Q6gcDTghj9bt/f30=)
2: EE7FBFECF5DA11EAA1976953C4F9AE02.roa (hash: iPjKL2ZgrtC9Tvx6I57sdrTIecoMgsexB7eAngqUnWA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl
rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2175 (0x87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E82C4, serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4
Validity
Not Before: Mar 24 20:28:11 2026 GMT
Not After : Mar 31 20:28:11 2026 GMT
Subject: CN=69c2f3dc-68db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:48:b5:66:ef:f2:84:b4:b1:30:8e:00:83:
ef:4f:95:43:64:2b:b9:44:6e:bb:3b:6b:4c:cc:84:
3b:9b:7f:24:4e:8c:ad:0c:32:2f:f3:64:59:f4:ae:
da:c9:1a:7d:65:df:a9:5f:49:b1:8d:01:34:11:dc:
32:9e:90:10:67:d0:70:b5:10:1e:c4:bd:ca:d3:e7:
0c:17:4a:9c:91:31:3f:b8:32:20:4c:ae:f0:40:32:
07:19:2d:99:16:b8:6e:e1:2a:fa:e1:80:47:e4:76:
c7:55:1e:bc:12:71:eb:3b:3e:78:17:8d:86:10:0e:
2e:fa:07:1c:dc:b7:a1:fb:47:fb:6d:20:e4:0a:21:
27:a5:2e:75:57:39:f3:af:0f:6f:1f:9a:91:85:47:
a3:1d:b8:35:e5:b9:49:ec:0b:e1:2b:5c:a8:69:5f:
b6:a8:9f:b6:21:85:21:c6:0e:d1:f4:35:0e:c1:3c:
61:81:6d:aa:ca:56:de:2b:93:ac:b8:6d:66:9e:4b:
3f:41:74:60:f5:d2:f0:46:71:9b:b0:62:1a:42:a6:
0f:2c:98:35:97:95:a5:61:b3:ff:42:14:15:e7:3b:
52:e6:9a:9a:9e:f4:b9:8c:25:10:d7:5d:25:38:32:
ed:83:ae:cc:61:96:27:f4:bb:51:13:99:b2:28:d2:
67:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F7:CA:3B:B3:AE:7B:C1:BF:F7:26:75:01:36:5C:DF:CF:D0:81:59
X509v3 Authority Key Identifier:
keyid:4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:35:9b:9b:78:f8:0d:2f:71:47:90:d4:33:4a:e3:bb:e9:2b:
3a:05:58:c0:5f:c9:60:f5:04:da:50:37:d5:84:6f:6e:3f:93:
e0:5a:76:5a:67:15:f7:a1:99:09:d9:0f:9a:96:76:44:ee:ee:
1d:87:ff:ae:09:f8:cf:e1:f2:26:fa:31:00:c1:cd:9c:0d:f7:
8f:21:c6:26:14:ab:d1:27:56:ec:fb:c7:e9:01:f9:33:fc:7e:
44:c7:3f:5a:50:06:23:05:69:98:5a:93:71:89:64:97:c4:ab:
dc:1e:fd:38:ed:6e:9f:00:0d:7e:88:93:d8:2a:2a:e2:83:4c:
3f:da:f8:2f:3d:19:17:ac:5b:13:d1:73:df:b1:d1:0b:26:18:
38:8d:5d:67:12:ef:4a:07:bd:40:43:6d:50:ed:29:f2:fe:1a:
59:b9:57:61:bf:08:1a:33:d5:0e:bd:da:d1:d1:b0:68:26:ad:
fd:63:89:22:99:0b:d3:09:33:fe:53:11:74:f2:9d:bd:d1:75:
a3:c8:54:43:12:d8:a4:d3:0e:5a:9f:62:ac:cb:4d:f3:3c:6e:
82:7d:f7:8a:07:05:b4:65:da:bc:a7:2a:a3:74:fa:d8:bb:30:
79:90:41:9c:c5:37:22:ae:a0:90:0d:bc:d4:b2:fd:6d:58:e3:
d8:c5:e4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:33:23 2026 by rpki-client