
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
File: TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json)
Hash identifier: IchcN4jW0UbN2GbGA9DvJOqaToGfDY9NEwv2wBcX0FY=
Subject key identifier: 44:4B:08:64:29:58:AE:74:0B:F7:21:8C:E3:02:07:7A:BD:B1:C0:3D
Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Certificate serial: 0230
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
Manifest number: 021C
Signing time: Sat 03 Oct 2026 03:40:53 +0000
Manifest this update: Sat 03 Oct 2026 03:40:53 +0000
Manifest next update: Sat 10 Oct 2026 03:40:53 +0000
Files and hashes: 1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: ckVtfLBTkziORwK5aM7z7AG9l4n4OPA8q0XFrdeQI9Y=)
2: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: aRfQZJBeIUXkRnVBff5AI2UFIz3GN5zYE0o7KWSnJVE=)
3: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: /qNeMoHq2aNx85z5DTHQgQr12JfNKIytF+LLvQVIEvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:40:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9A6E, serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Validity
Not Before: Oct 3 03:40:53 2026 GMT
Not After : Oct 10 03:40:53 2026 GMT
Subject: CN=6ac07945-bb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:a1:aa:ae:91:0d:e8:b6:6d:27:5b:35:34:
c7:d8:ad:55:d8:ad:83:75:79:55:d7:e4:7e:a1:0e:
4e:6a:e1:70:7f:96:bf:07:de:3e:24:69:04:5a:6b:
25:57:34:56:6c:c6:98:57:03:d2:7f:d7:9c:b6:04:
7e:e2:33:c5:b4:b4:45:53:d7:a3:3f:84:bc:3f:bb:
b0:76:b2:cd:42:04:37:c5:fd:dd:d1:a9:06:98:47:
19:4b:82:ef:48:03:45:e3:b6:c4:e4:24:ab:e5:8c:
bb:59:e9:20:a7:55:8c:34:54:e0:d2:32:e5:33:99:
79:61:5a:fb:bd:e6:6a:66:24:85:f4:72:ab:84:99:
8e:c9:b2:e1:b6:1c:e5:bb:61:b9:dd:fd:f1:b7:72:
74:1c:2b:94:7d:69:f6:b3:16:38:b3:45:23:ab:cd:
af:bf:0f:41:99:7b:14:b5:52:9c:44:5d:ba:d7:de:
54:5b:b9:de:81:36:40:c1:4b:48:91:2a:68:c5:43:
2e:b8:f9:cb:83:f8:ff:2d:98:f9:32:7b:e6:78:1b:
ce:18:ef:0b:eb:3e:13:1a:56:29:32:2b:29:32:12:
7c:76:93:77:c4:54:cb:b0:7a:97:e7:c5:56:15:f1:
ae:39:54:bf:ba:83:00:d2:62:05:97:8e:42:fb:73:
9c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4B:08:64:29:58:AE:74:0B:F7:21:8C:E3:02:07:7A:BD:B1:C0:3D
X509v3 Authority Key Identifier:
keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1d:07:40:2b:f5:4a:d0:a2:92:19:c7:d6:ad:46:bc:a7:44:
54:24:aa:db:2d:b5:f9:5c:54:51:32:ad:b3:90:a8:83:66:34:
f3:c5:1e:44:77:df:44:71:38:5f:03:fa:7b:b2:cf:36:23:ea:
0b:b3:a5:e7:fe:77:70:8a:e2:84:ca:52:80:40:4b:82:9b:66:
71:b3:ad:52:02:0d:c2:c9:00:ed:92:27:b1:dd:86:fd:cb:aa:
f6:1f:1d:39:8a:67:55:23:f3:5e:73:00:41:0c:51:87:08:0d:
10:c2:88:76:79:63:ea:9f:4e:87:1e:43:be:d4:a1:11:2c:2f:
26:7e:3a:4d:92:71:0c:69:84:a3:31:b4:d7:3c:95:51:f0:f0:
1c:11:a5:5b:82:95:b0:f7:e7:4e:1d:00:08:23:26:07:eb:0e:
fc:f4:15:82:73:ea:e0:1c:9f:6e:3c:3d:1b:a0:91:27:5f:ff:
1c:6a:83:ff:39:6c:d2:eb:5e:ff:11:cc:29:d9:f0:fd:d4:9f:
69:f2:be:f8:49:de:b5:69:6b:51:9b:1f:c6:15:fa:38:d8:c7:
ce:95:86:b2:c4:f3:b6:70:c9:cb:cf:d2:c0:fb:e6:29:4a:bc:
a2:8d:d3:c8:70:fe:85:7f:7c:a7:14:31:45:fb:22:fe:4c:c3:
5c:9f:6a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:22:00 2026 by rpki-client