
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
File: TvuTtJvxulYAjfxgYItSFq7JmsY.mft (raw, json)
Hash identifier: CfKvfa+QdRx6KDyu+y+KLVJ8NpyZnvdZraO3BVMvxKE=
Subject key identifier: 8B:8A:CB:CB:AC:5A:6B:87:B6:33:0C:19:43:4E:1F:43:51:1F:D2:66
Authority key identifier: 4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6
Certificate issuer: /CN=A91B8070/serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
Manifest number: DC
Signing time: Fri 15 May 2026 06:51:17 +0000
Manifest this update: Fri 15 May 2026 06:51:17 +0000
Manifest next update: Fri 22 May 2026 06:51:17 +0000
Files and hashes: 1: TvuTtJvxulYAjfxgYItSFq7JmsY.crl (hash: VWfpgJwbrzQaWdyauUTeb+l/l5c4lX8zyeNGH+IEXEc=)
2: BA8DE47CDFE311F08DEF0674556F56BC.roa (hash: Zh6wXEXphp1EIjFhhkqihtiOfs2baqRkCWO1whLIxuk=)
3: 5905CBAEDFE111F083058845556F56BC.roa (hash: Ep0ZjILGTIRguDCqf/7ebqhYEj4n0HP0tW0NEv654xk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl
rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 06:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8070, serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6
Validity
Not Before: May 15 06:51:17 2026 GMT
Not After : May 22 06:51:17 2026 GMT
Subject: CN=6a06c265-1c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:82:a0:d9:93:7a:0a:f9:d6:dd:2b:97:ab:d2:
07:12:f4:a8:e0:87:e0:1d:03:7a:46:93:4b:c2:1b:
ea:b0:c9:2b:54:29:01:22:90:93:ab:e8:cc:b6:76:
5c:0c:22:a5:0f:67:1b:b2:bf:c2:59:0d:37:1d:ca:
83:a9:58:2a:25:4d:1c:0c:d3:37:70:f5:80:5c:70:
c3:fa:b2:c7:32:84:85:c6:27:03:27:99:8a:59:da:
27:0e:90:a3:e2:d8:76:c3:8b:c9:ae:06:a1:79:d8:
40:d1:88:b7:79:96:eb:f1:21:48:a9:13:f5:63:dc:
57:eb:cc:b2:3b:e0:d0:59:0c:74:f5:f7:8a:ae:d6:
15:d6:49:28:cd:a1:3b:91:71:7d:84:27:0e:be:95:
b6:9a:18:ba:d0:07:7c:63:cc:f9:a9:c1:66:a3:7a:
59:f3:7d:c6:a8:10:87:24:55:6f:f4:8e:b0:ed:fb:
4b:fa:6e:08:7a:b3:75:6d:6a:89:48:37:0f:e3:c8:
fb:d2:84:7c:36:c1:4b:27:48:5d:70:6c:bf:80:95:
c7:34:22:69:30:b9:36:bc:4d:49:57:77:43:61:19:
e0:d8:c3:6f:1d:10:a9:50:c7:92:ed:f2:8d:bc:43:
37:8e:ca:6a:f8:b9:68:c0:75:22:fe:f9:fc:d6:75:
0e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8A:CB:CB:AC:5A:6B:87:B6:33:0C:19:43:4E:1F:43:51:1F:D2:66
X509v3 Authority Key Identifier:
keyid:4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:57:7c:ae:2e:d9:49:3f:16:3b:8f:b4:f2:1a:07:8a:46:51:
dc:52:a2:96:88:a7:0b:74:d0:b5:45:5a:97:0a:4e:c7:a0:38:
9b:6b:c4:03:f6:ee:73:79:ac:fa:b3:90:85:ac:98:3f:0d:52:
2f:d5:6d:0d:ab:c3:86:4f:0f:9c:c8:08:e1:59:7c:25:dd:c2:
f8:1d:a4:05:67:a2:d0:7c:20:08:de:59:ef:e4:24:9a:f3:2f:
77:d6:cf:de:a0:a2:34:0f:46:71:8c:8b:4a:d1:13:23:5d:3b:
4d:29:9b:34:a4:ed:2e:69:de:9c:3b:ea:b7:b1:29:37:6e:98:
13:20:59:f5:35:ed:1d:e0:67:f1:86:ec:c2:d8:42:d5:fd:cc:
f9:4b:e3:7f:46:51:db:85:24:34:ca:22:16:7e:dd:e4:b0:b2:
db:cd:14:78:a9:ed:af:c0:4f:ce:b7:bb:3a:29:7f:c7:73:1b:
5b:d0:e8:cf:89:29:d4:09:9b:f8:15:59:38:af:67:3a:09:1f:
b1:fc:99:51:b8:8c:dd:a6:8b:b2:9d:1c:c0:ec:45:3e:bd:6e:
a4:0d:aa:30:77:47:e2:ce:e6:06:ba:4c:bc:27:3b:ea:7e:31:
ac:f1:dd:6e:64:2e:54:2a:cf:df:20:f9:ab:03:1a:0d:86:b5:
70:c1:32:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjgwNzAxMTAvBgNVBAUTKDRFRkI5M0I0OUJGMUJBNTYwMDhERkM2MDYwOEI1MjE2
QUVDOTlBQzYwHhcNMjYwNTE1MDY1MTE3WhcNMjYwNTIyMDY1MTE3WjAYMRYwFAYD
VQQDEw02YTA2YzI2NS0xYzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6YKg2ZN6CvnW3SuXq9IHEvSo4IfgHQN6RpNLwhvqsMkrVCkBIpCTq+jMtnZc
DCKlD2cbsr/CWQ03HcqDqVgqJU0cDNM3cPWAXHDD+rLHMoSFxicDJ5mKWdonDpCj
4th2w4vJrgahedhA0Yi3eZbr8SFIqRP1Y9xX68yyO+DQWQx09feKrtYV1kkozaE7
kXF9hCcOvpW2mhi60Ad8Y8z5qcFmo3pZ833GqBCHJFVv9I6w7ftL+m4IerN1bWqJ
SDcP48j70oR8NsFLJ0hdcGy/gJXHNCJpMLk2vE1JV3dDYRng2MNvHRCpUMeS7fKN
vEM3jspq+LlowHUi/vn81nUOWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIuKy8us
WmuHtjMMGUNOH0NRH9JmMB8GA1UdIwQYMBaAFE77k7Sb8bpWAI38YGCLUhauyZrG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODA3MC9BRTM2NDY5NjEz
ODQxMUYwQkM1RjQ1NDdDNEY5QUUwMi9UdnVUdEp2eHVsWUFqZnhnWUl0U0ZxN0pt
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R2dVR0SnZ4dWxZQWpmeGdZSXRTRnE3Sm1zWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODA3MC9BRTM2NDY5NjEzODQxMUYwQkM1RjQ1NDdDNEY5QUUwMi9UdnVUdEp2eHVs
WUFqZnhnWUl0U0ZxN0ptc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYVd8ri7ZST8WO4+08hoHikZR3FKiloinC3TQtUValwpOx6A4m2vEA/buc3ms
+rOQhayYPw1SL9VtDavDhk8PnMgI4Vl8Jd3C+B2kBWei0HwgCN5Z7+QkmvMvd9bP
3qCiNA9GcYyLStETI107TSmbNKTtLmnenDvqt7EpN26YEyBZ9TXtHeBn8YbswthC
1f3M+Uvjf0ZR24UkNMoiFn7d5LCy280UeKntr8BPzre7Oil/x3MbW9Doz4kp1Amb
+BVZOK9nOgkfsfyZUbiM3aaLsp0cwOxFPr1upA2qMHdH4s7mBrpMvCc76n4xrPHd
bmQuVCrP3yD5qwMaDYa1cMEy7A==
-----END CERTIFICATE-----
Generated at Sun May 17 02:06:24 2026 by rpki-client