
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
File: tv1vS0-3wyR8WZKZsui6-1qLunI.mft (raw, json)
Hash identifier: xLoOJw2cPUFLglpc3sUtqZ4A7tVtR+Pxpp6k62YCd4c=
Subject key identifier: 3E:22:85:65:7C:42:0C:6A:5A:03:8D:F6:E0:BA:B9:CC:59:DD:09:90
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Certificate issuer: /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial: 0740
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
Manifest number: 0728
Signing time: Wed 20 May 2026 21:54:45 +0000
Manifest this update: Wed 20 May 2026 21:54:45 +0000
Manifest next update: Wed 27 May 2026 21:54:45 +0000
Files and hashes: 1: tv1vS0-3wyR8WZKZsui6-1qLunI.crl (hash: ZmSQEUZoe1A4laOQ6zZsDXI8h8iP6ybKlc/iU6DKo5s=)
2: 35341F3E4EAE11EF811DC17BC4F9AE02.roa (hash: NWWfC45uzKuvZ4dw6yp0ErfNgMsQne0/8ctWSm0IyCU=)
3: A40873CE7FB811EB82018D29C4F9AE02.roa (hash: DwkOyNqHpDdS7Fd7fdK5+12iodhZ87+NZFCN1mCEus8=)
4: EC427D64B16311ECA18ED12FC4F9AE02.roa (hash: cQH/POh8o+aP5ihP0cfrYaYM446EMCWcB+KlRcczvBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:54:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1856 (0x740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Validity
Not Before: May 20 21:54:45 2026 GMT
Not After : May 27 21:54:45 2026 GMT
Subject: CN=6a0e2da5-2da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6c:2a:cc:f4:1a:dd:01:93:fe:ff:9f:6c:c9:
dd:a4:4b:1e:c4:48:80:dd:6b:0e:1d:59:45:60:4e:
c3:b0:c5:57:5a:5c:c5:4e:75:74:3f:7b:c2:ba:8c:
34:cc:d4:3d:47:9b:a4:6b:23:73:7e:0d:9e:e3:d6:
52:c8:13:ff:45:76:84:c0:68:25:0e:bd:ff:2c:ba:
0c:cf:a4:cb:11:10:f5:67:07:19:b2:b8:e6:b7:63:
60:60:18:f1:94:56:d0:c1:99:74:45:91:38:91:d0:
1d:aa:66:de:41:7b:28:13:18:87:b3:0b:98:ea:0e:
71:db:d1:06:7f:65:5e:66:54:d1:fe:9a:ed:7f:de:
13:7f:bd:15:5d:05:cd:89:95:a8:ad:60:c3:ee:09:
e6:c8:93:d1:29:6a:b3:d2:48:52:d7:7d:bb:3c:82:
0d:e4:d0:ac:64:33:bb:ab:8d:e1:7b:6f:12:53:76:
2b:16:21:3a:0e:2e:1e:43:ca:44:0a:b2:08:dc:d5:
01:66:6e:08:ca:89:43:4a:61:cb:6e:b2:91:6d:1d:
aa:39:5e:56:8e:02:80:10:2c:c1:99:31:96:3f:9e:
6a:a3:2d:5a:c6:ad:92:c4:2e:5f:f5:70:5a:4c:2c:
34:ee:4f:7f:a3:51:e5:5d:46:86:39:01:3b:47:03:
50:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:22:85:65:7C:42:0C:6A:5A:03:8D:F6:E0:BA:B9:CC:59:DD:09:90
X509v3 Authority Key Identifier:
keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:4e:02:2f:39:01:b9:d3:ff:41:f7:51:de:9e:78:07:be:be:
61:9a:30:a9:e0:b0:f7:93:92:96:2c:95:81:b1:80:2c:b0:e5:
6d:70:c1:6a:68:92:ea:e5:4c:e2:7a:49:b6:20:26:c5:0c:b8:
37:e6:fc:82:15:16:12:13:9f:d1:29:cf:33:48:5f:b8:a5:91:
d8:36:b4:6d:d7:f2:78:09:cc:7a:1f:07:4d:b5:97:80:3c:06:
90:07:b7:69:3d:35:3d:e9:c9:e6:56:9f:cf:28:81:63:fc:c7:
8a:20:08:e8:65:72:11:e0:d7:0b:6d:df:58:96:f4:b2:eb:4f:
c6:3d:bb:9d:e5:b4:cd:ed:5f:ca:32:24:09:66:cf:ce:be:99:
10:28:9f:d9:30:6d:f9:9f:96:cb:96:45:6c:9c:66:b8:ea:ff:
8c:c6:06:2c:c9:78:60:ab:80:62:38:06:7b:4b:90:f0:c8:3b:
77:82:22:9f:84:f9:e9:77:bd:8d:6f:06:52:c9:b9:f4:93:a3:
89:59:92:2f:15:ae:25:2a:3d:5e:78:bc:4b:f7:a6:3e:b3:0a:
16:ca:29:2a:00:42:26:e2:ca:84:f5:f1:ca:a5:d8:e5:61:11:
0e:7d:6a:2e:fd:52:8b:f5:67:9a:1e:42:b0:86:31:52:66:ee:
b5:92:c5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:20:50 2026 by rpki-client