
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
File: TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft (raw, json)
Hash identifier: PK0gNwQSUrzj1fMOCqNq/KW6t5uJ3dXajBxHfsz530o=
Subject key identifier: D7:B6:86:0A:E3:DE:8D:A6:28:19:BC:60:12:8F:AC:7F:CE:69:47:BE
Authority key identifier: 4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C
Certificate issuer: /CN=A91EF590/serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C
Certificate serial: 07F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
Manifest number: 07DE
Signing time: Wed 20 May 2026 21:23:14 +0000
Manifest this update: Wed 20 May 2026 21:23:13 +0000
Manifest next update: Wed 27 May 2026 21:23:13 +0000
Files and hashes: 1: TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl (hash: luTrNMssqLRDpKGQe78cfE7qjE91UICDThSKqH9a/Fo=)
2: 3B85CDCC5AC611F0A650577AC4F9AE02.roa (hash: MeswJw3AHNnj/Kfl6uQ6n3GXjLaJwS53BSqpTy4iSHk=)
3: 3C4D39C05AC611F0A650577AC4F9AE02.roa (hash: Zdf9TWMHjctU5OVteJHuNVfi9I0rsmnesXZnDlf1ckk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl
rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:23:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2032 (0x7f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF590, serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C
Validity
Not Before: May 20 21:23:13 2026 GMT
Not After : May 27 21:23:13 2026 GMT
Subject: CN=6a0e2642-4e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:07:f3:b9:50:c1:e2:88:04:85:88:2f:cc:a3:
2b:4e:51:43:d4:77:95:fc:64:cf:47:f0:30:73:81:
ae:9e:04:c8:f2:80:ed:65:c6:86:30:b0:ae:55:7f:
ac:4b:e2:f5:73:ea:dd:fb:c0:b7:60:17:e1:05:c0:
67:8f:f2:0d:b8:a2:1e:51:5d:61:71:61:fb:26:cf:
cd:3b:ba:91:f4:f1:72:11:df:cb:d2:96:57:6e:a5:
9c:36:82:71:50:d6:a1:fa:c6:b4:48:aa:73:4a:fd:
34:15:c5:da:ee:9d:10:eb:e7:fc:ca:54:ca:cd:47:
09:5b:ec:6e:77:38:bd:52:9b:f7:e8:1b:85:1d:fb:
00:fa:69:7d:d7:dc:f5:8d:59:11:74:80:4b:5e:7e:
a8:cf:3e:98:48:56:f4:b9:73:96:0c:c9:20:7a:f5:
b0:35:41:ff:03:5e:4a:7b:c3:0b:fe:bd:88:9c:6d:
7f:05:a9:c5:3e:51:34:99:31:df:33:c1:f1:0f:a3:
a5:50:2f:57:27:9e:d5:d2:4a:2d:29:7e:96:97:ab:
d3:16:45:28:99:c4:64:98:68:02:26:1b:75:5f:3f:
bb:d7:f1:12:ed:63:18:a3:51:b7:9c:b3:d0:68:4f:
22:70:f5:92:53:ea:d2:d6:85:ec:70:56:dc:23:bd:
65:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B6:86:0A:E3:DE:8D:A6:28:19:BC:60:12:8F:AC:7F:CE:69:47:BE
X509v3 Authority Key Identifier:
keyid:4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:cf:e4:dd:9d:22:09:52:31:76:71:11:32:41:85:54:07:f6:
7a:e7:54:a4:90:e2:3f:de:18:2b:5c:33:04:0e:2a:77:f8:5b:
d2:ad:45:b6:e5:7c:d0:2d:fd:de:dd:41:32:08:c8:20:84:0b:
b6:f0:4a:ab:e7:6a:df:c7:53:f4:e9:56:74:74:0a:9e:a4:07:
e7:4e:77:b8:aa:11:24:27:f1:4e:a3:4b:b3:32:06:10:8b:e1:
b1:24:8e:7a:55:d0:c5:93:02:72:10:0b:2e:b1:52:0f:aa:82:
43:82:f6:74:47:c9:79:1e:aa:b5:88:d2:05:f6:18:15:e7:58:
32:cb:ad:37:67:48:0e:1b:6f:bf:24:2b:d6:28:e2:f0:2f:b6:
c8:18:c5:9b:7d:8f:b3:cf:91:a4:73:fb:d5:4e:ba:aa:68:4a:
51:0a:fe:41:8d:c7:b2:7c:c2:5d:4c:80:f6:87:26:ae:4c:02:
45:4f:e4:9b:35:8d:26:1f:2b:3c:c1:31:da:18:7a:fd:84:59:
5c:a7:8e:24:98:35:e5:c1:42:6a:30:b8:dc:2a:1a:e9:91:08:
80:97:4f:f0:b7:ea:55:b1:c3:1d:d1:7c:9e:d9:31:41:d2:12:
5e:7a:8a:c3:d0:85:47:e8:bb:e8:26:82:6b:4a:52:a1:8c:f1:
9c:68:4b:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY1OTAxMTAvBgNVBAUTKDRENzFBN0ExOEE4MkFERDA0NEJDMjhFRjVERjIxOTZC
MEZEMjFENUMwHhcNMjYwNTIwMjEyMzEzWhcNMjYwNTI3MjEyMzEzWjAYMRYwFAYD
VQQDEw02YTBlMjY0Mi00ZTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyAfzuVDB4ogEhYgvzKMrTlFD1HeV/GTPR/Awc4GungTI8oDtZcaGMLCuVX+s
S+L1c+rd+8C3YBfhBcBnj/INuKIeUV1hcWH7Js/NO7qR9PFyEd/L0pZXbqWcNoJx
UNah+sa0SKpzSv00FcXa7p0Q6+f8ylTKzUcJW+xudzi9Upv36BuFHfsA+ml919z1
jVkRdIBLXn6ozz6YSFb0uXOWDMkgevWwNUH/A15Ke8ML/r2InG1/BanFPlE0mTHf
M8HxD6OlUC9XJ57V0kotKX6Wl6vTFkUomcRkmGgCJht1Xz+71/ES7WMYo1G3nLPQ
aE8icPWSU+rS1oXscFbcI71lRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNe2hgrj
3o2mKBm8YBKPrH/OaUe+MB8GA1UdIwQYMBaAFE1xp6GKgq3QRLwo713yGWsP0h1c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU5MC8yRjdCMTdDNDM5
MEQxMUVCODhCQzYxNjVDNEY5QUUwMi9UWEdub1lxQ3JkQkV2Q2p2WGZJWmF3X1NI
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RYR25vWXFDcmRCRXZDanZYZklaYXdfU0hWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjU5MC8yRjdCMTdDNDM5MEQxMUVCODhCQzYxNjVDNEY5QUUwMi9UWEdub1lxQ3Jk
QkV2Q2p2WGZJWmF3X1NIVncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPs/k3Z0iCVIxdnERMkGFVAf2eudUpJDiP94YK1wzBA4qd/hb0q1FtuV80C39
3t1BMgjIIIQLtvBKq+dq38dT9OlWdHQKnqQH5053uKoRJCfxTqNLszIGEIvhsSSO
elXQxZMCchALLrFSD6qCQ4L2dEfJeR6qtYjSBfYYFedYMsutN2dIDhtvvyQr1iji
8C+2yBjFm32Ps8+RpHP71U66qmhKUQr+QY3HsnzCXUyA9ocmrkwCRU/kmzWNJh8r
PMEx2hh6/YRZXKeOJJg15cFCajC43Coa6ZEIgJdP8LfqVbHDHdF8ntkxQdISXnqK
w9CFR+i76CaCa0pSoYzxnGhLnA==
-----END CERTIFICATE-----
Generated at Thu May 21 11:15:21 2026 by rpki-client