
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
File: TK4677Gsir3bmbzO5PpakW0VezQ.mft (raw, json)
Hash identifier: 9UyZVqcEgnre8QtNzU5AeDLRV/C5QAgOTLmso1PZL0U=
Subject key identifier: 08:C8:D6:F6:99:42:42:CF:B8:33:25:C1:74:6F:32:17:89:0F:91:6E
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 36DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
Manifest number: 35E5
Signing time: Sat 28 Feb 2026 14:30:36 +0000
Manifest this update: Sat 28 Feb 2026 14:30:35 +0000
Manifest next update: Sat 07 Mar 2026 14:30:35 +0000
Files and hashes: 1: TK4677Gsir3bmbzO5PpakW0VezQ.crl (hash: IMEQfWoP5iAUM/vqq69ZbPnAIOAbZjkZG6H8rwKJB/I=)
2: 31D56A8E06C711EF9A0E1D0AC4F9AE02.roa (hash: 5+KD/HbUpLkpcs6HV5lJJIsrRNB6iK/DXAWMFWpmA48=)
3: D166652A072211EF9AC24D5BC4F9AE02.roa (hash: jnouLRxRb0iPl/2n8+jU+Gh30bE0lgA9TLtN2h8FrqE=)
4: 945922AECEBA11EDBBFD9E28C4F9AE02.roa (hash: LsJPOhg+IjFHq4u5TuKS1Cgl9ZV//qocSQmKLNrjfHY=)
5: 0D415D6212E711F183ACC54E0D3D8C67.roa (hash: yFjADGj8b5vdjeJttRhLfEYprJtN++dV66plFrGsSIg=)
6: 4DFF14DE71F211F08D45AC42C4F9AE02.roa (hash: J9Vl4wNaQZvW7IrY3A4iHXeF9rMyxRBebQD8gmdAqF0=)
7: 77D96D4A4F3411EFBA0A2659C4F9AE02.roa (hash: KO5kyx4oPYD6fcEJBxLZwcnGof9xv+dWoDd139PGb/A=)
8: 8FD552C071F111F0AE49323FC4F9AE02.roa (hash: GFZWZ3rY5zt4p9q/6cuuzyfCvGg513UOOMNp5vgzTLM=)
9: 24D7D74C978011EE87BB7D53C4F9AE02.roa (hash: hczGze/n+6jjz7J+S1ccsb/kUT2mL3ytpGyW1gYxmpM=)
10: E83E047071F111F0BBD1B63FC4F9AE02.roa (hash: 5WE41zFMFc5HZkU5VkY9kQVVNvhSy9TJUUfKgnqnIio=)
11: 0FCEE1C4F76411F08B4529B5436F56BC.roa (hash: 5KGHcM6iwrBR+GMsU2qWtmHdxfeDJjvrMttwa4l3W9g=)
12: 8FF00754732F11EE90078C13C4F9AE02.roa (hash: uVN+bNlw+OOE50aRxrD+T3n1qZSGGMQ4+q09H5P1seg=)
13: 4DC27210558111EF880A8679C4F9AE02.roa (hash: h9yTe7lhrg8907g7zfUvE00jCBHzORz0gLImI24Dzc0=)
14: 0C51883C12E711F183ACC54E0D3D8C67.roa (hash: fEN8CT37RpSRAXD0LVcbVRPKDsuuSplKQs4A+XgrjDY=)
15: D630A6B206D511EFB6CFDF2DC4F9AE02.roa (hash: hMNH1yK3IUdK/bsrfxvFW1bCN5AbdrDoJdwyVBW90z0=)
16: 2EA5CD40F87911F0BB9C431B4E6F56BC.roa (hash: 4BukiagQkrgc4Q+BvGeKWl5vic7KJcUlFwCZcgflCUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14044 (0x36dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Feb 28 14:30:35 2026 GMT
Not After : Mar 7 14:30:35 2026 GMT
Subject: CN=69a2fc0c-c10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:9a:3b:d4:a1:55:2a:b8:9f:45:69:95:9c:
5e:eb:49:33:43:9b:a8:97:1d:3c:e6:5f:0b:9a:1e:
24:13:8c:f9:10:a8:00:3d:67:4d:92:b5:f0:1d:fa:
20:71:cb:92:a0:d0:59:c2:56:e2:e5:9e:a7:6c:98:
41:fa:8d:92:72:b8:1a:de:cb:bd:9d:d5:d8:1d:e6:
fb:2e:ae:cb:3d:94:5c:75:3e:1c:3b:e9:de:92:be:
34:b1:d6:18:06:47:14:b7:c6:8e:18:da:a3:8a:9d:
71:c9:b1:fd:7d:e4:05:94:7d:61:65:3c:e1:4a:0f:
1a:a2:64:e2:b4:e5:6b:f3:b7:02:3a:16:3f:c0:f9:
b5:9b:58:db:9d:84:a7:f3:d3:dd:ae:05:b8:df:91:
16:93:1b:eb:1c:87:fd:54:29:f8:ce:f2:a8:8f:5e:
72:59:04:7d:f8:fd:41:5a:f4:b7:f4:9a:01:66:fa:
16:3a:d0:61:bb:8d:72:55:0d:e1:12:84:4f:66:67:
15:76:49:b4:87:ec:80:2f:08:6e:78:80:18:fb:f0:
46:1c:8b:20:9e:56:8d:8b:28:12:15:60:04:cf:ce:
11:df:f2:3b:3f:db:11:14:90:b9:bc:f0:fc:62:12:
0e:1a:bd:5f:91:63:98:1b:82:8b:7e:e1:a5:fe:eb:
ef:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C8:D6:F6:99:42:42:CF:B8:33:25:C1:74:6F:32:17:89:0F:91:6E
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:70:94:c9:a5:15:41:1f:f6:5a:a9:a4:d8:19:eb:79:e9:ab:
c9:a8:53:fd:b4:db:e2:70:21:16:07:17:be:89:a7:e6:27:ba:
b9:6d:df:19:92:b6:99:e5:3e:09:3b:3b:83:91:f9:dd:3a:fa:
2a:25:23:9f:4e:0f:ac:2c:a4:6a:af:49:e3:99:d4:c3:dc:19:
9f:4b:83:a2:6f:69:d1:7f:d0:93:0f:39:de:bf:33:e4:50:af:
fb:58:43:d0:42:6f:f5:e6:fa:92:b7:78:16:a0:da:ec:d6:86:
54:b3:5f:60:bf:8f:6e:e2:51:66:3f:ac:e9:61:72:4d:fb:9f:
59:b2:36:b4:65:3f:42:87:7b:29:5a:86:4d:3f:26:e2:be:d6:
a4:cf:3c:25:18:46:7f:20:34:64:62:99:7a:71:60:3e:b1:94:
18:19:cc:19:49:b6:ba:d3:42:22:bf:d5:9d:93:42:07:4e:78:
9a:bd:26:51:7a:4a:32:f2:df:06:2d:a2:cf:f1:ea:99:c7:56:
f3:58:9c:17:32:72:57:6b:9a:52:87:76:f3:19:a7:90:15:f6:
d2:75:50:bd:87:ad:19:b6:9c:a6:12:20:36:ca:77:23:0b:0c:
d6:3d:7a:b5:27:c4:0e:5d:fe:98:cc:f6:b3:be:5d:6d:4d:ef:
4b:f5:44:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx
NkQxNTdCMzQwHhcNMjYwMjI4MTQzMDM1WhcNMjYwMzA3MTQzMDM1WjAYMRYwFAYD
VQQDDA02OWEyZmMwYy1jMTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqR6aO9ShVSq4n0VplZxe60kzQ5uolx085l8Lmh4kE4z5EKgAPWdNkrXwHfog
ccuSoNBZwlbi5Z6nbJhB+o2Scrga3su9ndXYHeb7Lq7LPZRcdT4cO+nekr40sdYY
BkcUt8aOGNqjip1xybH9feQFlH1hZTzhSg8aomTitOVr87cCOhY/wPm1m1jbnYSn
89PdrgW435EWkxvrHIf9VCn4zvKoj15yWQR9+P1BWvS39JoBZvoWOtBhu41yVQ3h
EoRPZmcVdkm0h+yALwhueIAY+/BGHIsgnlaNiygSFWAEz84R3/I7P9sRFJC5vPD8
YhIOGr1fkWOYG4KLfuGl/uvv+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAjI1vaZ
QkLPuDMlwXRvMheJD5FuMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE
ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUQ3RS9FQ0E2ODIzNDFEODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2ly
M2JtYnpPNVBwYWtXMFZlelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkHCUyaUVQR/2Wqmk2BnreemryahT/bTb4nAhFgcXvomn5ie6uW3fGZK2meU+
CTs7g5H53Tr6KiUjn04PrCykaq9J45nUw9wZn0uDom9p0X/Qkw853r8z5FCv+1hD
0EJv9eb6krd4FqDa7NaGVLNfYL+PbuJRZj+s6WFyTfufWbI2tGU/Qod7KVqGTT8m
4r7WpM88JRhGfyA0ZGKZenFgPrGUGBnMGUm2utNCIr/VnZNCB054mr0mUXpKMvLf
Bi2iz/HqmcdW81icFzJyV2uaUod28xmnkBX20nVQvYetGbacphIgNsp3IwsM1j16
tSfEDl3+mMz2s75dbU3vS/VEXg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:53 2026 by rpki-client