
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json)
Hash identifier: mxXph3MWzsxoeERUmKX5CALcW7Jd23OqqmJ9cme5g+M=
Subject key identifier: B7:1B:5E:1F:F7:C9:89:51:D7:A6:B2:54:11:2D:AC:B0:5D:AC:EA:F4
Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08
Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208
Certificate serial: 28D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
Manifest number: 28B5
Signing time: Fri 24 Jul 2026 15:41:22 +0000
Manifest this update: Fri 24 Jul 2026 15:41:21 +0000
Manifest next update: Fri 31 Jul 2026 15:41:21 +0000
Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: FeqixqQtaUfSVlWEHD3Cq5aqbohTaof+7Rp8ssTIppc=)
2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: UmJO0KSnCSvHXcJ5e26UAgnZ2y1lkvWGmHME2yVB9kg=)
3: 1149FE16984211F0B5591074C4F9AE02.roa (hash: LsrfohQQqBt1OXduUHyIG+bruizijWoUQfCjHYmeZgg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl
rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 15:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10450 (0x28d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208
Validity
Not Before: Jul 24 15:41:21 2026 GMT
Not After : Jul 31 15:41:21 2026 GMT
Subject: CN=6a6387a2-e539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:59:c5:2b:af:92:43:ec:8c:98:f7:c2:0e:
60:c3:77:07:e3:05:59:c2:e1:ff:d6:9c:b0:0b:08:
42:fc:29:74:04:f5:a4:62:9d:af:f8:97:8e:1d:a6:
2c:b8:21:62:c4:a6:d2:ce:d4:32:a8:43:e0:40:7f:
e2:f3:cf:ee:a2:13:ad:6b:c5:a6:d4:07:59:6b:30:
83:c6:0b:d9:0f:38:c4:79:54:ca:39:51:14:c9:77:
46:b3:f7:2c:9e:dc:85:88:71:72:86:0f:07:52:06:
98:af:4f:6c:e2:d2:99:f0:54:c8:a1:30:a5:0d:1a:
a0:6a:62:84:1e:82:6d:d8:b9:46:04:a9:a0:28:58:
7e:8b:af:1d:d1:82:00:7c:1a:04:a7:29:b5:19:ac:
dc:2f:39:c5:d6:9c:35:28:32:ce:5f:8d:66:04:d2:
ea:49:b0:82:7b:84:b4:4a:b9:ae:d4:d0:ce:cd:fb:
ea:77:6a:c1:37:a1:ed:5c:99:d2:06:5f:ae:22:55:
fd:22:a2:ec:de:63:da:e3:30:68:64:af:9a:e1:c7:
34:d3:7c:2d:c1:47:04:ce:9f:e5:01:6d:41:ff:2e:
5b:24:7a:51:c0:7e:5f:ab:b7:c6:b4:f2:1a:9d:36:
f6:15:6f:f9:1b:92:32:b7:ab:01:01:a7:b0:d9:f7:
0f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1B:5E:1F:F7:C9:89:51:D7:A6:B2:54:11:2D:AC:B0:5D:AC:EA:F4
X509v3 Authority Key Identifier:
keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:38:a4:52:e4:91:13:67:42:8b:f6:9d:2b:fa:c6:c2:90:71:
e9:7e:fd:f5:2a:8f:24:a8:8f:bc:65:eb:a9:3c:43:2f:82:c7:
7c:be:46:24:76:c8:e9:96:d1:ce:90:78:22:5b:91:aa:79:b8:
76:ec:0b:85:ac:b8:45:bd:ad:75:16:3e:b7:d4:74:c8:d8:be:
27:20:fa:a2:25:aa:5d:7c:b2:91:ea:57:7e:c7:9c:7b:67:98:
61:b5:d4:c3:13:e6:76:1c:42:f7:9a:f4:fb:63:ea:85:16:cd:
c0:0f:e5:83:47:2a:cf:95:f2:31:b9:cd:6f:7f:f6:49:fb:cd:
51:71:e7:0f:8a:ef:8f:04:a8:1b:88:e4:3c:4c:f0:5d:9e:c9:
8a:91:09:a1:8a:70:d1:15:8d:7e:74:6a:a6:84:5d:fa:16:13:
f6:87:cb:77:8e:1c:d3:d5:1b:f4:c1:51:9c:90:4d:12:99:69:
76:1e:42:cd:5b:cf:3a:9d:4f:c3:30:f6:64:9a:72:ce:1c:1f:
e3:48:37:d7:a4:77:bb:1d:45:ad:71:3d:50:99:bb:b5:3b:dd:
0b:3d:0f:cb:32:5f:5c:a3:d8:7a:2d:55:a8:c6:4f:c7:c1:c3:
f2:e5:94:de:8e:93:23:95:bb:76:23:f4:66:57:cf:49:ce:45:
1e:48:95:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:20:50 2026 by rpki-client