
$ rpki-client -vvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
File: tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json)
Hash identifier: 1UZQCDQoZgvXGD3h2QYE0LeayrpTyC1rsWdwbMcRPH0=
Subject key identifier: 14:E4:E7:3C:20:B7:23:EA:50:1F:16:17:37:7A:88:7F:D2:B3:03:DD
Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00
Certificate issuer: /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900
Certificate serial: 0292
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
Manifest number: 0284
Signing time: Tue 21 Jul 2026 02:58:06 +0000
Manifest this update: Tue 21 Jul 2026 02:58:06 +0000
Manifest next update: Tue 28 Jul 2026 02:58:06 +0000
Files and hashes: 1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: GAc5vQumhrb9e/whYuZorxy0KquoSt7D9aV643rNfC0=)
2: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: S3mtiXgsL+/eI/0ypZKkTLQQz8Kl0Q3Gz9IYr9ftMk4=)
3: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: eZ7E672T6C2NAQF7FO/EpOxkj6QwEhrMyFrT7Izg/p4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl
rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 02:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91933FE, serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900
Validity
Not Before: Jul 21 02:58:06 2026 GMT
Not After : Jul 28 02:58:06 2026 GMT
Subject: CN=6a5ee03e-0bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:ab:a5:5a:f4:78:c8:6d:ef:14:53:82:8c:
af:75:5c:3f:ad:b2:3d:93:db:a9:12:9f:ea:1e:32:
95:26:fb:7d:70:63:c6:79:03:0e:69:1e:ab:c5:7a:
43:dd:b9:d0:01:a6:96:9d:a7:b6:03:a1:5c:07:01:
29:45:76:c6:94:be:f9:12:62:72:4e:c8:cc:db:39:
02:fb:42:19:98:e7:52:b8:29:c9:f6:3c:78:92:43:
54:e2:4a:2f:b5:6b:e8:76:a4:e0:46:ac:1b:22:ee:
93:8f:2d:d3:ed:c8:1d:fa:74:0b:db:6f:91:68:ac:
f5:86:59:db:23:27:36:06:38:e2:38:2a:b5:9d:69:
09:05:98:e5:db:72:a8:76:91:c3:be:50:2d:4a:f8:
30:cd:e7:62:24:f1:23:ed:d5:f8:af:e3:9b:10:f5:
f2:ed:28:ec:db:5b:1d:f3:1f:74:d8:9e:94:b1:f8:
aa:4f:05:78:c1:95:56:09:20:97:60:21:19:fe:bd:
88:56:54:5a:b2:a4:f0:58:0a:66:02:3a:32:79:0b:
cb:52:26:cb:37:82:2d:fd:7c:53:4d:de:4b:f2:05:
13:5c:0d:0a:45:3e:bc:00:89:91:02:61:b5:98:10:
ad:af:c0:bf:42:8b:66:ed:6f:9a:bf:b2:41:e1:46:
8c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E4:E7:3C:20:B7:23:EA:50:1F:16:17:37:7A:88:7F:D2:B3:03:DD
X509v3 Authority Key Identifier:
keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bf:e2:7b:66:a0:be:28:7f:e4:39:b5:23:91:6e:ba:9a:22:
0e:72:a7:80:a3:64:60:62:51:d4:47:57:c9:3b:a9:1b:df:1e:
ee:94:d7:81:7f:3a:7b:85:c4:89:30:55:42:6a:42:2f:9b:17:
c1:b4:3d:c5:1f:71:b6:02:e7:bd:07:32:2c:ee:fc:94:e4:0b:
54:8d:c1:e2:a0:c4:08:7d:66:ee:34:e3:e2:2d:5f:04:d9:8a:
8e:57:de:fa:10:96:b1:c7:ce:b2:79:e7:e7:1f:12:5a:e1:d9:
29:22:07:76:22:98:bd:d4:34:ee:a3:cf:fe:fe:88:c5:fa:9e:
12:fe:8b:3e:82:0a:6f:55:8f:35:32:6b:aa:cc:5e:09:e1:40:
f3:d6:bc:5e:ae:20:8d:88:92:4f:2c:be:9f:14:07:9c:56:24:
c5:ed:7b:23:e7:d0:f8:47:a9:3b:a6:68:a9:0a:27:14:12:0e:
02:69:23:ed:83:f2:10:3b:88:66:ab:f6:d2:74:8b:fc:53:ff:
b9:88:ce:e3:17:c8:69:13:e9:45:34:34:a8:be:60:d9:7f:9c:
64:ec:f3:21:b6:91:96:7e:ef:e3:ac:af:b3:d0:ab:28:58:83:
cc:05:8c:5e:b3:16:ea:db:36:8a:10:70:eb:56:85:8b:76:15:
9a:bf:09:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTMzRkUxMTAvBgNVBAUTKEI1NTFBMTYwRDNCRURDQTU2MkU5RERGREU0MDkzMzcy
NEI2OUI5MDAwHhcNMjYwNzIxMDI1ODA2WhcNMjYwNzI4MDI1ODA2WjAYMRYwFAYD
VQQDEw02YTVlZTAzZS0wYmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApSurpVr0eMht7xRTgoyvdVw/rbI9k9upEp/qHjKVJvt9cGPGeQMOaR6rxXpD
3bnQAaaWnae2A6FcBwEpRXbGlL75EmJyTsjM2zkC+0IZmOdSuCnJ9jx4kkNU4kov
tWvodqTgRqwbIu6Tjy3T7cgd+nQL22+RaKz1hlnbIyc2BjjiOCq1nWkJBZjl23Ko
dpHDvlAtSvgwzediJPEj7dX4r+ObEPXy7Sjs21sd8x902J6UsfiqTwV4wZVWCSCX
YCEZ/r2IVlRasqTwWApmAjoyeQvLUibLN4It/XxTTd5L8gUTXA0KRT68AImRAmG1
mBCtr8C/Qotm7W+av7JB4UaM5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBTk5zwg
tyPqUB8WFzd6iH/SswPdMB8GA1UdIwQYMBaAFLVRoWDTvtylYund/eQJM3JLabkA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzNGRS9EMzFBNjc3QUFC
NjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNLVmk2ZDM5NUFremNrdHB1
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RWR2hZTk8tM0tWaTZkMzk1QWt6Y2t0cHVRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzNGRS9EMzFBNjc3QUFCNjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNL
Vmk2ZDM5NUFremNrdHB1UUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX7/ie2agvih/5Dm1I5FuupoiDnKngKNkYGJR1EdXyTupG98e7pTXgX86e4XE
iTBVQmpCL5sXwbQ9xR9xtgLnvQcyLO78lOQLVI3B4qDECH1m7jTj4i1fBNmKjlfe
+hCWscfOsnnn5x8SWuHZKSIHdiKYvdQ07qPP/v6IxfqeEv6LPoIKb1WPNTJrqsxe
CeFA89a8Xq4gjYiSTyy+nxQHnFYkxe17I+fQ+EepO6ZoqQonFBIOAmkj7YPyEDuI
Zqv20nSL/FP/uYjO4xfIaRPpRTQ0qL5g2X+cZOzzIbaRln7v46yvs9CrKFiDzAWM
XrMW6ts2ihBw61aFi3YVmr8JpQ==
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:24:03 2026 by rpki-client