
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
File: tv1vS0-3wyR8WZKZsui6-1qLunI.mft (raw, json)
Hash identifier: RREePkVGjMmTlya2rFI21MQUyM9fsNSSSzCIz25yPHA=
Subject key identifier: 5F:FB:FE:A9:B0:70:82:A8:4E:18:41:16:68:74:3D:4A:84:0A:57:81
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Certificate issuer: /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial: 0724
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
Manifest number: 070F
Signing time: Sat 04 Apr 2026 21:43:57 +0000
Manifest this update: Sat 04 Apr 2026 21:43:57 +0000
Manifest next update: Sat 11 Apr 2026 21:43:57 +0000
Files and hashes: 1: tv1vS0-3wyR8WZKZsui6-1qLunI.crl (hash: 5ahAFvneSH4PiYco6/8AhfB5gPwsDF2G95J5NpkFkyg=)
2: A40873CE7FB811EB82018D29C4F9AE02.roa (hash: t6apfvlYJvqq9FJWUtI8eDXqztkm176ohKOkUYdVlcw=)
3: EC427D64B16311ECA18ED12FC4F9AE02.roa (hash: TxcCtN38H5OlPjI5RyHb05Zr5Rw/P1AwnEYA5q9hLys=)
4: 35341F3E4EAE11EF811DC17BC4F9AE02.roa (hash: 48dDt0a+xzb3indd8/ODeap3gsGRYkl9Ae79hCnDlqg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1828 (0x724)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Validity
Not Before: Apr 4 21:43:57 2026 GMT
Not After : Apr 11 21:43:57 2026 GMT
Subject: CN=69d1861d-0abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:2b:45:08:62:8c:4e:6e:33:04:c8:1a:e2:
be:28:6e:0f:69:fa:ca:a6:ae:fe:f5:4a:26:2c:2b:
1f:15:fe:c6:c8:bb:2b:e8:eb:7f:c0:43:08:04:d9:
15:9a:8e:ad:a4:ae:ad:e6:e1:12:aa:ec:05:da:ff:
6a:1d:e2:0b:01:a3:94:35:49:d1:e5:2c:db:ab:72:
2f:9e:33:9d:d7:ba:e4:a9:a9:d1:7d:57:2e:1f:73:
df:03:0c:3b:c7:21:40:e1:20:30:99:6a:84:55:92:
11:42:d9:ee:cd:2b:cd:fb:89:62:22:8d:a5:fe:52:
c2:c0:5b:70:a8:03:e6:74:9d:00:62:5f:08:e0:a2:
bc:d3:25:47:c4:57:81:02:4b:15:c3:76:06:a7:37:
d7:1a:cd:b3:17:79:d5:5c:95:4e:15:8a:a2:06:b3:
3d:22:4e:59:39:19:0b:42:49:4e:3c:9e:a1:25:26:
4b:44:c2:ed:3f:aa:76:57:ac:1a:c7:cc:c3:df:b2:
35:c4:77:1a:cc:c0:86:6a:88:07:a3:8f:cc:08:e9:
1e:4c:d6:1d:82:f9:23:d3:10:68:ba:50:df:1a:52:
f2:0c:f2:62:ea:f8:2c:66:80:f0:1e:f3:57:c1:ed:
db:ed:83:61:e8:33:00:f1:93:d8:6c:03:29:14:63:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FB:FE:A9:B0:70:82:A8:4E:18:41:16:68:74:3D:4A:84:0A:57:81
X509v3 Authority Key Identifier:
keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:85:49:56:76:4a:15:98:53:5f:8b:95:3d:a5:23:87:25:a8:
8d:55:01:92:fc:5d:2b:4d:a5:ff:81:ba:1f:00:f6:1a:28:d1:
1d:49:8d:be:74:43:82:65:d5:28:0a:af:62:7f:ce:31:eb:75:
ac:8e:49:92:7f:22:6a:77:99:c3:5c:80:b9:78:d1:dc:b7:59:
fb:3f:44:b4:31:57:2b:9b:4c:2c:ab:b1:2c:60:a0:5f:d5:b9:
a3:b4:d0:eb:4b:96:5b:50:81:19:55:8a:db:ae:ac:b4:6a:23:
87:10:36:aa:30:96:72:49:4f:0b:a1:c2:ac:77:b1:47:b2:17:
fc:82:d5:4e:54:d9:c4:d0:4b:b0:77:c0:dc:01:f9:68:1a:46:
d3:fd:0f:3e:fd:5d:5f:47:09:5c:ce:16:18:df:cc:aa:ab:5d:
ec:49:d1:1f:ae:91:a3:85:57:a8:f0:34:b7:49:c8:50:0f:60:
25:e1:5a:09:af:95:8f:29:df:88:6c:db:ac:ff:b3:cb:79:ed:
f9:b4:65:89:e9:d3:14:2e:87:9b:69:96:28:35:c0:d4:b9:78:
3b:55:30:9f:00:85:1c:21:2a:9b:28:f4:2a:02:fd:0c:a4:4e:
cc:39:70:5a:83:28:e1:ff:6d:9b:3d:25:82:51:af:e1:e9:44:
1f:e9:42:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICByQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UzQzQxMTAvBgNVBAUTKEI2RkQ2RjRCNEZCN0MzMjQ3QzU5OTI5OUIyRThCQUZC
NUE4QkJBNzIwHhcNMjYwNDA0MjE0MzU3WhcNMjYwNDExMjE0MzU3WjAYMRYwFAYD
VQQDEw02OWQxODYxZC0wYWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnrMrRQhijE5uMwTIGuK+KG4PafrKpq7+9UomLCsfFf7GyLsr6Ot/wEMIBNkV
mo6tpK6t5uESquwF2v9qHeILAaOUNUnR5Szbq3IvnjOd17rkqanRfVcuH3PfAww7
xyFA4SAwmWqEVZIRQtnuzSvN+4liIo2l/lLCwFtwqAPmdJ0AYl8I4KK80yVHxFeB
AksVw3YGpzfXGs2zF3nVXJVOFYqiBrM9Ik5ZORkLQklOPJ6hJSZLRMLtP6p2V6wa
x8zD37I1xHcazMCGaogHo4/MCOkeTNYdgvkj0xBoulDfGlLyDPJi6vgsZoDwHvNX
we3b7YNh6DMA8ZPYbAMpFGPu1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF/7/qmw
cIKoThhBFmh0PUqECleBMB8GA1UdIwQYMBaAFLb9b0tPt8MkfFmSmbLouvtai7py
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC82REQ5RjMzNDdG
OTcxMUVCQUREQzVGMTVDNEY5QUUwMi90djF2UzAtM3d5UjhXWktac3VpNi0xcUx1
bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3R2MXZTMC0zd3lSOFdaS1pzdWk2LTFxTHVuSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTNDNC82REQ5RjMzNDdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi90djF2UzAtM3d5
UjhXWktac3VpNi0xcUx1bkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAoVJVnZKFZhTX4uVPaUjhyWojVUBkvxdK02l/4G6HwD2GijRHUmNvnRDgmXV
KAqvYn/OMet1rI5Jkn8ianeZw1yAuXjR3LdZ+z9EtDFXK5tMLKuxLGCgX9W5o7TQ
60uWW1CBGVWK266stGojhxA2qjCWcklPC6HCrHexR7IX/ILVTlTZxNBLsHfA3AH5
aBpG0/0PPv1dX0cJXM4WGN/Mqqtd7EnRH66Ro4VXqPA0t0nIUA9gJeFaCa+Vjynf
iGzbrP+zy3nt+bRlienTFC6Hm2mWKDXA1Ll4O1UwnwCFHCEqmyj0KgL9DKROzDlw
WoMo4f9tmz0lglGv4elEH+lCPQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 01:14:40 2026 by rpki-client