
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json)
Hash identifier: Dyx8pvaTFCSlsynyljVGQfmLfXu452sATNwcIk+SNAs=
Subject key identifier: F8:39:2A:01:23:B8:22:2B:A6:48:5B:4B:4E:37:56:48:67:84:43:B4
Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08
Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208
Certificate serial: 28AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
Manifest number: 2890
Signing time: Tue 12 May 2026 15:36:03 +0000
Manifest this update: Tue 12 May 2026 15:36:02 +0000
Manifest next update: Tue 19 May 2026 15:36:02 +0000
Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: 6ZdJPacjPr4r1vIUUMiHTi5dh1rMJtXdPu1X3Y/FCSY=)
2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: UmJO0KSnCSvHXcJ5e26UAgnZ2y1lkvWGmHME2yVB9kg=)
3: 1149FE16984211F0B5591074C4F9AE02.roa (hash: LsrfohQQqBt1OXduUHyIG+bruizijWoUQfCjHYmeZgg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl
rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10413 (0x28ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208
Validity
Not Before: May 12 15:36:02 2026 GMT
Not After : May 19 15:36:02 2026 GMT
Subject: CN=6a0348e3-40b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:9c:05:5d:af:52:0e:d4:9c:e7:1c:5b:5e:
91:14:45:80:40:3e:00:a8:1d:77:06:b1:e0:e2:61:
d0:46:01:d2:49:9c:91:08:73:b8:1d:d8:db:dc:c2:
5e:5e:10:9c:51:1e:f3:c7:35:f6:db:da:aa:bf:f2:
45:32:94:12:cb:46:11:f8:f3:5f:7d:96:e8:5a:e2:
13:c5:48:2b:91:8a:f6:0e:bb:cc:ea:5e:3a:cb:50:
32:2a:e0:33:9e:2f:4a:7b:7e:81:c1:30:16:1b:e2:
95:85:f0:2f:8e:1c:6c:54:50:53:e3:06:20:df:73:
40:af:7c:ef:7a:5b:8c:98:2a:0f:d9:96:a7:2e:39:
df:43:aa:65:2c:60:6b:21:19:94:ac:2d:b9:7e:bd:
88:f5:76:f7:61:b0:96:2f:b6:61:61:b2:34:f4:58:
be:fc:d2:c4:14:7a:9c:4a:b3:b9:37:75:44:47:d2:
db:67:d3:9c:a5:af:f6:4b:84:5b:9d:b6:56:1d:0a:
9a:90:38:88:78:fa:f9:de:4a:73:1b:fb:05:65:8f:
bd:87:ad:88:d7:2e:87:e7:20:33:c7:8f:26:04:1b:
55:bc:23:5c:10:77:e2:a7:5f:8c:15:32:4f:7c:9b:
4a:1d:1f:ac:06:d8:29:c3:0a:a5:c8:bd:5d:a9:5c:
9d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:39:2A:01:23:B8:22:2B:A6:48:5B:4B:4E:37:56:48:67:84:43:B4
X509v3 Authority Key Identifier:
keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0f:47:00:92:51:4b:28:ac:1d:92:71:bc:73:9d:15:24:a6:
3f:09:65:a8:35:1e:35:c2:d1:32:7f:18:1d:2b:8e:e6:6f:49:
b7:67:a8:f0:39:f2:fa:b8:ca:6b:1b:97:01:dc:22:cd:78:c6:
61:c2:86:5e:33:2f:58:2b:65:d6:49:ae:79:1a:81:56:99:93:
c5:0e:2c:f4:85:49:49:fc:8b:bf:9a:65:c7:bc:bc:9f:35:7b:
c9:41:4b:6d:2f:10:6b:be:06:43:88:cd:1e:9c:a5:9c:69:8b:
ab:5a:a5:07:ff:07:a0:67:9c:36:1a:23:eb:65:0b:e0:0b:1b:
67:e1:9c:8d:90:8a:e2:99:36:90:52:dd:cb:fd:84:28:12:8f:
6c:c4:fc:f8:e5:53:e3:81:77:00:f6:59:cd:b6:36:b2:1a:a3:
2f:52:23:9d:db:41:2d:96:cf:20:57:b7:ad:06:35:ce:74:b7:
cb:23:da:e3:5f:c9:82:82:57:90:d1:87:9c:14:f7:dc:fa:fc:
94:74:c6:a3:58:05:23:ec:6c:ec:c7:34:b5:d5:0d:45:8c:00:
c2:be:79:7b:5c:e5:bb:60:49:bd:2d:69:1e:17:d9:48:b7:af:
2a:b7:c4:de:80:24:8d:b1:9e:02:d2:07:ed:68:95:fd:1d:60:
d1:f6:8a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:29:59 2026 by rpki-client