
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json)
Hash identifier: U+0RG8kjg3LJ4wfhilDGKtT1yUKirPg6nMRG4HJDf8c=
Subject key identifier: 40:E4:6D:C9:D4:88:95:EF:10:9F:B8:7B:16:4D:BB:AB:61:46:C3:ED
Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08
Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208
Certificate serial: 28F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
Manifest number: 28DB
Signing time: Tue 06 Oct 2026 15:35:44 +0000
Manifest this update: Tue 06 Oct 2026 15:35:43 +0000
Manifest next update: Tue 13 Oct 2026 15:35:43 +0000
Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: GI4RdnfePo21iOBP4ZdSRupXO2pJTv5kntDAM22zyGA=)
2: 1149FE16984211F0B5591074C4F9AE02.roa (hash: LsrfohQQqBt1OXduUHyIG+bruizijWoUQfCjHYmeZgg=)
3: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: UmJO0KSnCSvHXcJ5e26UAgnZ2y1lkvWGmHME2yVB9kg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl
rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10488 (0x28f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208
Validity
Not Before: Oct 6 15:35:43 2026 GMT
Not After : Oct 13 15:35:43 2026 GMT
Subject: CN=6ac5154f-6c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:12:87:d0:87:c8:a3:a5:1a:61:fa:9f:cc:17:
1e:b7:b3:d0:1f:52:92:9a:0b:e1:37:45:eb:5c:db:
91:bd:bd:f1:e8:a1:32:9b:cf:e5:3c:50:db:24:b3:
19:a2:02:1d:5d:bc:03:a4:e7:49:10:63:d1:4c:33:
d1:bb:f4:78:2a:d7:0d:79:87:d3:b3:68:4e:60:24:
54:42:22:33:0a:17:ad:a4:48:f2:5c:77:be:f9:b8:
6c:ae:85:fa:94:94:80:01:c8:02:bf:d1:d5:50:e0:
7a:b7:57:e9:bb:2e:b1:57:bd:cd:16:68:74:1d:a8:
06:c5:7c:3b:b4:40:a6:0d:f0:d5:98:d5:d1:89:86:
e0:c1:df:df:2c:25:aa:65:3d:5c:9b:ce:95:68:f3:
08:26:ec:5e:64:e3:78:14:ef:56:e4:13:a8:45:8a:
e2:66:aa:32:6b:ee:18:bd:1e:41:4e:7b:64:bb:ee:
25:16:54:98:f5:0f:12:e6:29:fb:59:59:c9:9d:ed:
67:c8:d2:dd:5f:80:65:11:34:a6:99:ad:c8:6f:70:
23:ce:e4:75:51:c9:09:1d:83:79:ea:b0:b6:59:db:
67:45:60:ac:61:ba:ab:7c:50:cc:e0:26:dc:60:26:
75:4c:1b:b4:0a:ca:00:ee:a4:c0:d7:16:58:5b:66:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E4:6D:C9:D4:88:95:EF:10:9F:B8:7B:16:4D:BB:AB:61:46:C3:ED
X509v3 Authority Key Identifier:
keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ed:42:cc:09:fa:6b:a9:51:17:25:14:fe:b3:a2:d3:ce:0c:
f8:f6:6e:63:0d:12:d5:4e:97:d2:6a:92:44:88:88:a3:7d:ca:
45:39:49:44:05:b3:2b:c3:7e:bf:83:55:ae:85:96:71:81:e4:
23:11:da:42:a7:af:9a:43:09:4b:ba:97:af:e2:be:4f:ec:88:
78:cc:b2:d3:94:2f:9b:33:fc:c4:46:64:b1:3e:29:74:73:27:
fc:bf:1e:cc:9f:c3:8c:f5:4f:99:22:af:95:17:e0:f1:25:45:
6c:fb:47:8f:d2:9f:f4:ac:e5:12:8b:56:02:26:81:74:d9:5a:
72:ce:2e:cd:31:1b:4d:aa:3b:a3:7a:85:5e:b3:34:c6:f3:5b:
c2:ec:e6:a1:ba:6d:a8:f8:60:2b:0f:94:dc:85:c8:f2:bd:7d:
d9:06:13:7d:1c:07:66:bb:46:87:5f:be:d8:71:f4:1f:08:fb:
03:8b:b4:c5:42:ad:72:7f:56:3c:b6:6a:06:5d:9b:16:cd:00:
90:de:b0:ab:91:aa:77:bb:5a:c8:d2:40:60:3b:48:d1:4c:bd:
ed:3d:03:6c:a2:a2:08:7c:c4:b1:c6:9b:39:00:db:43:ee:83:
4d:59:6b:d7:44:0d:e0:4a:3e:06:45:e8:53:78:53:19:ef:3e:
9e:70:1e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:19:29 2026 by rpki-client