
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
File: tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json)
Hash identifier: ezUTzXGajwvym/HTMZeUxi6Z8mTazGgDdKEkC1GqYzc=
Subject key identifier: 82:D7:49:50:0B:3F:40:65:49:E9:65:78:86:BB:D8:14:6D:FB:A5:08
Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00
Certificate issuer: /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900
Certificate serial: 02AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
Manifest number: 029D
Signing time: Thu 03 Sep 2026 01:47:03 +0000
Manifest this update: Thu 03 Sep 2026 01:47:02 +0000
Manifest next update: Thu 10 Sep 2026 01:47:02 +0000
Files and hashes: 1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: 8uKCiQUBwM9IeAZ86s/cRNBXfRt0g2zEouxXwt7Rqrw=)
2: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: TZdE3HJfuKeAgiwJf4jZ08pWEIcR5SdkaLtt8LTpMbc=)
3: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: Nx8p40wpmQJaQ1ixRb0RaIHzHah1RRDJVUTvARd80Iw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl
rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 01:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91933FE, serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900
Validity
Not Before: Sep 3 01:47:02 2026 GMT
Not After : Sep 10 01:47:02 2026 GMT
Subject: CN=6a98d197-c673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:f7:f9:4d:2d:37:6a:4b:30:89:b0:37:7f:
d2:2b:0a:47:40:24:c0:a3:05:55:58:86:23:8b:8c:
99:bd:a8:71:dd:8d:c4:3a:ee:5d:78:85:7d:57:5d:
dc:03:52:a9:36:a2:3f:af:35:bb:c0:24:a6:62:1b:
6c:fd:11:d0:f7:b3:00:a6:b6:64:79:9d:48:ff:96:
81:d0:51:ec:f2:f4:c4:9d:e0:46:94:1c:fd:33:46:
84:cf:ec:09:94:59:56:c2:18:2a:08:d0:45:8b:93:
4b:c2:06:eb:04:85:9e:01:a8:a0:ff:26:c3:c8:ae:
36:ce:0c:e1:d1:31:ef:b3:55:f5:5e:e9:19:4b:d3:
8e:1c:0a:08:8f:ba:5d:fa:6f:3f:2f:b1:90:26:4b:
3e:02:5c:1f:98:51:c8:f1:c9:44:18:2a:ce:0d:46:
d5:53:64:31:3f:a0:ff:d6:7e:1f:6d:56:32:4b:00:
38:85:ad:9b:ad:ff:a6:7f:ed:c6:56:b1:13:7e:a6:
b5:a7:73:15:1d:c9:48:64:00:20:fb:d6:da:c4:71:
c9:db:4f:c1:0b:b9:fc:e4:d2:59:5c:a7:e4:81:92:
ce:d1:6c:81:c5:a1:3a:c4:eb:06:92:02:2f:a3:fc:
d2:7e:aa:d9:cc:b8:f9:af:e1:a2:7d:d4:de:38:e3:
da:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D7:49:50:0B:3F:40:65:49:E9:65:78:86:BB:D8:14:6D:FB:A5:08
X509v3 Authority Key Identifier:
keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1a:be:61:28:06:5e:3f:04:27:b5:c7:c1:c5:59:62:0c:fa:
f7:2e:d2:b1:5a:92:4f:a9:cd:1a:be:85:13:ab:b5:50:62:93:
f4:b5:95:96:4a:2b:2f:6a:a5:53:4d:4f:1c:61:83:b5:f4:f0:
ba:01:92:1b:c9:19:5e:d1:d7:3f:0a:e3:97:fc:93:f4:eb:ce:
56:a8:fb:25:86:3c:0d:ac:d1:94:f2:4d:97:de:10:21:f2:3c:
a3:af:42:fb:88:bf:12:ac:86:d6:95:6e:e6:e1:d8:8f:3b:41:
1c:07:fc:39:57:2d:f4:c6:22:91:37:55:1b:1d:aa:ae:a8:62:
b6:c4:af:56:5f:16:87:44:ee:b8:94:62:99:3a:e4:8f:f6:7c:
e1:bb:8c:3e:5f:20:44:b8:6c:13:49:dd:c6:4e:62:e7:32:fa:
47:16:fd:e6:36:27:2d:dd:fa:17:16:b4:56:e1:35:f7:f4:ab:
00:78:9f:38:c7:8b:6a:fb:e7:6f:11:0e:e2:ee:d0:d2:7f:19:
bd:15:fd:b9:da:cb:5e:fd:1a:84:31:f1:77:40:f4:a7:52:23:
4a:e0:4a:cf:f9:61:74:fc:bc:ca:0e:d0:6e:d7:de:ec:15:a2:
4a:bc:92:95:7b:5b:5f:d9:7b:7b:ca:04:c4:7f:46:4d:ed:42:
d0:e0:b6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:26:38 2026 by rpki-client