
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
File: TK4677Gsir3bmbzO5PpakW0VezQ.mft (raw, json)
Hash identifier: krqbU+Q20BgzprJQ5XFAV7EAcZUOLRWv3GojB42Tv/8=
Subject key identifier: 6F:E0:1D:6D:22:01:BD:7C:0B:C1:64:98:CE:1A:DD:C0:83:B8:61:0F
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 3784
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
Manifest number: 3663
Signing time: Sun 20 Sep 2026 14:28:48 +0000
Manifest this update: Sun 20 Sep 2026 14:28:48 +0000
Manifest next update: Sun 27 Sep 2026 14:28:48 +0000
Files and hashes: 1: TK4677Gsir3bmbzO5PpakW0VezQ.crl (hash: DOLdk9sxjMmDsP1IImMD75Z4qPC8fiUKqaChpAUFjSg=)
2: 24D7D74C978011EE87BB7D53C4F9AE02.roa (hash: E8tgGZnAJ0DYVToULPFkfN33B2nidUXrmWqnz+uCtOk=)
3: 0C51883C12E711F183ACC54E0D3D8C67.roa (hash: l7LBi/Y1FpDZmmeBXMO7I7E/b5ECT7acllocUhgV2ZA=)
4: 031323B06EBE11F196174E6566A30FBC.roa (hash: NXB/rg2055CKSN9ZF6BUpnYzbi4UYOhQlvoMPnUpbg0=)
5: 4DFF14DE71F211F08D45AC42C4F9AE02.roa (hash: RV3R+8uCKWnB9ll+ltJkxV+x3kpjR9QPpPUyngdFPaM=)
6: 9ED84B886EC111F19289006667A30FBC.roa (hash: hd1ZU6/Fnutera66ZXCD8DJsTN9KMedFIbuKf7ICHXM=)
7: D630A6B206D511EFB6CFDF2DC4F9AE02.roa (hash: j7NSyaGCsiCQNnmyTpDrtH8dk6MerGuTvymGLl12qTI=)
8: E83E047071F111F0BBD1B63FC4F9AE02.roa (hash: IQ74hXKfS9sBj5pIuOgIRXKGZQu6lWL3dFvrJ3NA2Fw=)
9: 8FF00754732F11EE90078C13C4F9AE02.roa (hash: YKihQA85OZGMIoxiktXscM0JZAAS7N+DfWFx0LMvOUU=)
10: 945922AECEBA11EDBBFD9E28C4F9AE02.roa (hash: mwJTu9ubLJ5CecmwYFCQ6y7GrlQ3uGcRqvbvaSw7Luw=)
11: 4DC27210558111EF880A8679C4F9AE02.roa (hash: CxrN5BIIQrkUc76Mjxuam5mtgMFBui6ZyXEwqKxcF3s=)
12: 31D56A8E06C711EF9A0E1D0AC4F9AE02.roa (hash: 2Lzx/G2fSpGrGjExrZZ3r9OFOxUEm3cHovV2rhteE/0=)
13: 8FD552C071F111F0AE49323FC4F9AE02.roa (hash: 9irr6mRRCa6Oo6K8I9PdRq3pgeAMalaJw+pxtHcISBU=)
14: E73BBF76957811F1B4216A726F11F970.roa (hash: sGezONrhPqvpv1z4vFJElu1iyeEpn1z3ruGDa1oLp5I=)
15: 041DFBF46EBE11F196174E6566A30FBC.roa (hash: UdubWRqV2Ckel/l8C/+VnynljQ5Fshh1WNKa2k+xRl8=)
16: 0FCEE1C4F76411F08B4529B5436F56BC.roa (hash: YJpZIEy71VmJgEyYXAc8PneApk2Fcyu1z7/EBcc0Dg8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 14:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14212 (0x3784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Sep 20 14:28:48 2026 GMT
Not After : Sep 27 14:28:48 2026 GMT
Subject: CN=6aafeda0-576b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:a7:0d:ca:75:2c:09:fe:b0:49:62:d3:d8:
cf:23:52:68:fa:56:09:4e:b2:36:c1:99:76:cf:58:
67:47:89:78:f2:ba:68:e6:ff:bf:9e:dd:7a:fa:ce:
70:7c:97:75:c0:82:12:ad:f1:86:d4:62:01:87:a0:
48:ef:dd:78:23:27:bc:07:be:47:4d:57:bb:12:48:
81:d6:cb:40:f0:76:10:8c:f6:8b:93:d6:85:6b:d7:
cb:09:93:82:94:bd:c5:f8:cb:7d:46:dc:f3:7e:9a:
86:8e:7f:63:9b:94:54:4d:dd:1e:ea:b3:fb:92:da:
b9:6e:25:f5:5c:94:aa:a2:75:f0:e7:ae:2d:8f:6b:
bc:ac:16:76:59:e8:5d:b6:7f:cc:b8:c1:7d:06:03:
7c:ae:3a:5c:e4:42:dc:2b:54:d2:55:12:e5:eb:80:
5f:4d:37:d9:80:d7:7a:98:df:0c:4b:92:cd:41:b5:
cf:be:30:31:38:13:b0:7f:09:4f:88:31:c5:11:fa:
5e:b2:e5:d8:13:2c:a0:9a:9a:e2:78:a1:1f:10:68:
bb:49:9d:2e:ac:76:bd:9b:33:6f:2f:f0:ea:77:7d:
9b:17:c9:a9:b3:6c:ba:86:5f:b8:42:1e:47:3d:6b:
60:c1:26:a7:9e:06:a4:96:68:a3:fd:96:a4:18:63:
49:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E0:1D:6D:22:01:BD:7C:0B:C1:64:98:CE:1A:DD:C0:83:B8:61:0F
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:85:8b:9b:9d:ec:4c:a5:33:62:77:04:05:37:5a:24:7d:07:
8f:4e:91:b0:2b:0b:5d:db:90:fa:ab:f8:ec:f4:11:fa:af:b9:
13:e1:41:86:a7:88:e2:0b:1b:54:12:50:cd:36:d0:15:8f:ea:
9a:47:23:86:7b:1d:4d:5d:f1:68:44:c7:ec:27:e1:16:1f:b6:
84:21:af:46:2b:a6:3d:c4:a1:66:ac:cc:19:98:49:87:9c:1f:
82:7e:d3:f6:96:a6:08:e1:6e:96:80:a8:a1:c7:d2:2d:84:0b:
54:3b:45:f7:23:8e:66:be:4e:12:fc:cc:44:cc:b9:25:55:53:
75:98:21:fa:08:f8:c1:fd:35:39:1c:a3:95:73:8e:76:37:56:
23:70:a6:9f:5e:77:75:a7:5b:ef:5a:3d:dc:4c:47:0e:db:30:
66:ff:be:5a:98:a9:df:46:ea:b1:54:f5:7f:92:f8:51:27:40:
dc:f9:c2:8d:4e:a8:ed:74:94:1c:9d:03:83:77:b5:57:1a:88:
55:37:0f:e5:8a:75:b5:b0:4a:f1:61:8c:86:21:e3:af:fe:e4:
b0:81:25:dc:a0:6e:0d:62:39:a9:f5:73:50:97:19:ac:30:94:
59:6e:2c:cc:12:74:b4:0f:74:ab:9f:08:6d:1e:bc:cd:ae:01:
1c:58:3b:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICN4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx
NkQxNTdCMzQwHhcNMjYwOTIwMTQyODQ4WhcNMjYwOTI3MTQyODQ4WjAYMRYwFAYD
VQQDEw02YWFmZWRhMC01NzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArwWnDcp1LAn+sEli09jPI1Jo+lYJTrI2wZl2z1hnR4l48rpo5v+/nt16+s5w
fJd1wIISrfGG1GIBh6BI7914Iye8B75HTVe7EkiB1stA8HYQjPaLk9aFa9fLCZOC
lL3F+Mt9RtzzfpqGjn9jm5RUTd0e6rP7ktq5biX1XJSqonXw564tj2u8rBZ2Wehd
tn/MuMF9BgN8rjpc5ELcK1TSVRLl64BfTTfZgNd6mN8MS5LNQbXPvjAxOBOwfwlP
iDHFEfpesuXYEyygmprieKEfEGi7SZ0urHa9mzNvL/Dqd32bF8mps2y6hl+4Qh5H
PWtgwSanngaklmij/ZakGGNJoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/gHW0i
Ab18C8FkmM4a3cCDuGEPMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE
ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUQ3RS9FQ0E2ODIzNDFEODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2ly
M2JtYnpPNVBwYWtXMFZlelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi4WLm53sTKUzYncEBTdaJH0Hj06RsCsLXduQ+qv47PQR+q+5E+FBhqeI4gsb
VBJQzTbQFY/qmkcjhnsdTV3xaETH7CfhFh+2hCGvRiumPcShZqzMGZhJh5wfgn7T
9pamCOFuloCoocfSLYQLVDtF9yOOZr5OEvzMRMy5JVVTdZgh+gj4wf01ORyjlXOO
djdWI3Cmn153dadb71o93ExHDtswZv++Wpip30bqsVT1f5L4USdA3PnCjU6o7XSU
HJ0Dg3e1VxqIVTcP5Yp1tbBK8WGMhiHjr/7ksIEl3KBuDWI5qfVzUJcZrDCUWW4s
zBJ0tA90q58IbR68za4BHFg7Ig==
-----END CERTIFICATE-----
Generated at Mon Sep 21 11:52:43 2026 by rpki-client