
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
File: tPvjSrdmEqnSCuUrCttB_PgKEv8.mft (raw, json)
Hash identifier: BAkc1IzdaFLhkZh8+ApgUmC4iAV2TQG1C6Q9FnxFvRs=
Subject key identifier: C2:CB:4D:05:D5:49:B7:53:B9:05:A5:EC:BD:09:E1:43:5F:4E:07:25
Authority key identifier: B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF
Certificate issuer: /CN=A91BF6CD/serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
Manifest number: AC
Signing time: Tue 21 Jul 2026 08:53:50 +0000
Manifest this update: Tue 21 Jul 2026 08:53:49 +0000
Manifest next update: Tue 28 Jul 2026 08:53:49 +0000
Files and hashes: 1: tPvjSrdmEqnSCuUrCttB_PgKEv8.crl (hash: BAhr6uXTYY2PU+FmkAmdcbUd5GFJE7htNDcpK/LPaUA=)
2: 3E99E81C816E11F0A5992F28C4F9AE02.roa (hash: PtxDOStSKg5v1Xktyj+xGCbDFKA4GPkHNsN6+Bx9sn0=)
3: 3E1ABB8C816E11F0A5992F28C4F9AE02.roa (hash: uyOU7OWturYo16z8/9jzgKBsXU3ESi7wumKHXnMPiW4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl
rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF6CD, serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF
Validity
Not Before: Jul 21 08:53:49 2026 GMT
Not After : Jul 28 08:53:49 2026 GMT
Subject: CN=6a5f339e-54d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:c0:59:39:79:16:28:3d:c7:13:82:07:2d:
e3:c8:31:ea:ac:e9:ec:9a:b9:a9:15:fe:c8:0d:5a:
d0:6c:5d:89:66:ae:5f:d5:a1:13:fc:c5:e5:fd:6b:
8e:65:34:25:3d:72:dd:82:e6:3b:95:2e:98:ba:1b:
bc:77:72:14:d9:83:f8:65:06:8a:40:0a:49:51:61:
38:d0:f1:fe:63:68:75:d0:93:ed:73:84:15:bf:e4:
9c:18:9b:dc:a0:37:85:d6:05:4e:cb:c1:43:57:5a:
08:d9:ff:7b:d2:10:57:b7:53:97:1d:f6:d5:96:f8:
f0:9c:a7:43:5d:25:a1:86:02:b2:f6:50:87:51:50:
a3:72:88:6a:57:13:06:1b:4b:c7:75:a5:74:64:c1:
e4:cf:c6:f6:84:3f:58:4f:32:a6:7d:64:f2:7e:bd:
fb:2f:9b:06:6e:41:ae:56:59:ac:78:2b:8c:1c:e5:
7c:da:d7:c2:09:8a:ec:91:56:60:94:ec:f6:d6:8d:
e1:30:cc:8b:13:f0:0a:a1:38:f4:8b:d9:17:ff:8e:
b4:3e:35:a0:e7:15:2e:6e:53:79:61:50:2d:02:93:
7f:07:74:b8:b3:c5:62:17:17:b8:23:9a:cf:39:be:
0e:2d:8d:fd:ee:5d:69:d1:2c:c6:17:73:28:77:2a:
e3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CB:4D:05:D5:49:B7:53:B9:05:A5:EC:BD:09:E1:43:5F:4E:07:25
X509v3 Authority Key Identifier:
keyid:B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:ec:2b:1c:ae:eb:d3:58:45:7b:4b:ea:35:60:e3:9e:cf:c1:
ee:c2:3d:99:0d:1d:f8:d2:69:16:5b:be:d1:b4:f2:ea:7b:31:
74:76:38:94:8d:24:46:3a:ab:ab:59:ab:09:18:96:1f:00:a3:
e9:4c:60:3e:a9:0a:2a:fd:0b:6b:a6:98:28:2c:78:72:44:96:
25:d8:0e:b8:de:1b:c5:d7:2d:29:c0:9e:9e:c1:bb:ee:4e:77:
0f:7a:9b:16:ec:b2:45:9e:e9:14:27:8a:fb:6f:51:05:a7:f3:
16:4a:95:12:38:56:e2:10:7c:21:07:71:00:c1:f1:18:77:c7:
84:26:db:af:95:f5:77:33:39:d8:13:db:02:af:9b:9e:4d:f5:
92:ca:2b:16:ad:2a:b6:a7:d3:fb:b8:9f:e1:4f:1c:52:00:f0:
7c:75:38:62:30:5f:99:2a:8a:8a:84:cc:2a:12:ff:07:de:c9:
ae:ed:ff:7a:22:00:66:7c:1e:54:9d:4f:7f:f2:2c:7e:a3:1f:
55:0f:3d:7f:cb:a4:73:ac:7e:e4:45:2d:75:8a:86:9e:23:ba:
fa:4b:b0:0e:97:c5:46:37:b4:7f:63:f9:9b:c2:b0:5f:64:5b:
16:15:0a:e7:53:3e:ff:2d:57:99:54:ac:4d:b9:09:07:a3:d0:
90:10:7d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:51 2026 by rpki-client