
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
File: tksRCOmO7If7awwovgFkXHCLSsU.mft (raw, json)
Hash identifier: /00wR7cX2vJX+6fJ/wx7KJ7n41AiXUQBl0cpI8iwbmw=
Subject key identifier: BF:09:33:0B:36:9B:9A:62:4E:9D:89:6C:72:FF:11:AC:2B:9F:A5:15
Authority key identifier: B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5
Certificate issuer: /CN=A91BAE17/serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5
Certificate serial: 2A39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
Manifest number: 2A21
Signing time: Tue 28 Jul 2026 15:40:27 +0000
Manifest this update: Tue 28 Jul 2026 15:40:27 +0000
Manifest next update: Tue 04 Aug 2026 15:40:27 +0000
Files and hashes: 1: tksRCOmO7If7awwovgFkXHCLSsU.crl (hash: o7fy47JPWcLCBhhy5bioJKXNl5WbirlxTDo+r8HUqSs=)
2: 98845C5C54EC11E791C3F825C4F9AE02.roa (hash: EtduFqwWmltWsbxhdyqETTLdxGQaxld6Ct3ig7z5qNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl
rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:40:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10809 (0x2a39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAE17, serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5
Validity
Not Before: Jul 28 15:40:27 2026 GMT
Not After : Aug 4 15:40:27 2026 GMT
Subject: CN=6a68cd6b-1ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:7c:0e:c7:63:c5:29:1e:83:0c:f7:88:8a:
6c:f7:e7:04:64:c7:fe:8c:8d:3b:1d:ae:54:ae:db:
a6:9a:25:45:cb:0f:b6:8c:43:31:7f:05:03:65:19:
d5:a8:bf:ec:78:b0:b0:c8:98:ec:b5:de:b9:c1:40:
ac:37:85:3a:b2:69:c4:7e:8b:d9:3c:82:e9:2d:77:
2f:ff:7c:b0:06:20:47:3c:ac:d4:64:26:cb:81:5a:
1d:29:c0:06:bd:00:83:fd:c3:bb:7a:36:99:e8:80:
c1:74:59:7f:e5:a2:c1:5b:ba:cb:f3:1d:94:2f:ee:
16:09:19:63:a7:90:46:2a:c0:7c:58:19:ad:e5:4d:
e8:35:5a:f0:0f:19:15:66:91:0a:49:48:ef:70:ff:
e4:98:e4:a8:c7:60:3f:98:47:d0:4c:a8:01:d2:82:
93:e4:e6:77:89:2a:2d:bf:25:ca:a6:94:29:83:7a:
7f:52:3d:c7:77:0c:90:12:e4:23:d4:cf:81:77:57:
51:1c:44:30:d4:1f:ee:83:3d:e6:4e:01:f2:4f:be:
66:6f:43:4a:d7:08:b8:d3:26:29:ee:c8:24:52:5b:
a6:8f:7e:9a:70:7f:89:0a:f1:4d:ba:30:fb:a9:66:
91:26:b2:74:86:d1:85:83:f8:4a:a4:88:cf:af:74:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:09:33:0B:36:9B:9A:62:4E:9D:89:6C:72:FF:11:AC:2B:9F:A5:15
X509v3 Authority Key Identifier:
keyid:B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:24:40:48:5d:52:89:47:4a:94:18:97:08:58:2e:26:2f:cd:
14:08:8c:e6:27:88:61:fb:ea:70:82:89:41:99:a5:65:3d:56:
e6:e5:28:2c:97:8f:88:37:59:da:84:1a:f2:ce:24:5d:34:6f:
58:70:d1:f6:22:ae:06:74:84:71:e8:3d:5b:af:36:9b:ac:6a:
eb:7b:23:ed:c3:6f:2b:a4:1d:3e:fa:92:fe:99:90:c4:8e:57:
76:8d:af:37:3a:38:5d:27:b0:37:c0:ea:f4:75:45:39:76:c8:
a9:2d:33:4f:aa:5f:a8:f5:f4:fc:5d:2a:e3:01:c6:1b:0e:29:
5a:33:aa:f5:6e:40:75:a8:bb:1b:c3:14:13:a0:af:a5:00:3c:
f8:2e:c9:b7:2e:e0:dc:34:e9:22:ad:79:60:f0:7e:ec:3d:e6:
1b:4e:f3:74:0e:0b:92:a8:46:05:15:16:b8:13:55:1f:8a:05:
90:ed:f3:92:25:5d:ef:1c:a0:82:2f:dc:02:19:33:67:cc:69:
6e:5f:69:6d:e9:b9:ac:f4:8b:f3:95:05:ff:9a:1e:ea:e7:76:
80:95:6f:6d:6c:9c:68:2c:f0:a8:96:fa:18:bc:94:f3:35:12:
27:70:8e:a1:5c:cd:03:9e:36:a2:eb:c7:66:d9:9a:d7:22:6d:
a8:c9:36:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:13 2026 by rpki-client