
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
File: TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json)
Hash identifier: GkO8Kp2+VXo7ArewFbTFStzVDJPCj6l4O3KCGTUwX6Y=
Subject key identifier: C6:28:B0:A9:54:D4:D8:85:A6:BC:D5:93:2D:55:21:8D:50:81:02:41
Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Certificate serial: 01F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
Manifest number: 01E3
Signing time: Sat 13 Jun 2026 03:38:45 +0000
Manifest this update: Sat 13 Jun 2026 03:38:45 +0000
Manifest next update: Sat 20 Jun 2026 03:38:45 +0000
Files and hashes: 1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: +QsSIVhWE/KGd6pPS5F4Pipoi/H/chElUg9UzeffcrM=)
2: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: aRfQZJBeIUXkRnVBff5AI2UFIz3GN5zYE0o7KWSnJVE=)
3: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: /qNeMoHq2aNx85z5DTHQgQr12JfNKIytF+LLvQVIEvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:38:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503 (0x1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9A6E, serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Validity
Not Before: Jun 13 03:38:45 2026 GMT
Not After : Jun 20 03:38:45 2026 GMT
Subject: CN=6a2cd0c5-ba90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:fa:4e:b0:54:ac:d8:80:9a:10:45:e2:d1:
25:32:fb:2b:73:b1:49:40:d9:de:c8:0c:93:ae:15:
bd:5e:d0:88:66:ec:59:c3:d1:49:90:cf:2b:4c:fa:
8e:9f:c0:47:da:05:c0:dc:ef:d0:c2:4c:48:59:dd:
d8:28:47:ee:7a:a1:18:a3:66:38:71:99:7b:7b:62:
fd:c2:d0:d7:06:9f:0a:c8:0a:39:4a:10:57:db:1f:
f7:93:dd:79:94:e6:d5:b8:1f:d7:c0:ae:2e:6f:4c:
84:27:31:39:14:4b:c4:57:fc:a8:9c:4f:6e:d6:b6:
5e:31:92:e8:97:63:ff:d4:aa:ea:19:92:9c:e2:85:
dc:18:57:4b:a8:80:e1:06:69:56:46:23:71:9d:9b:
ec:50:2b:e2:b1:73:3c:c9:15:6a:bb:3e:d8:76:20:
99:36:e8:06:dc:bc:e1:5a:3d:6d:41:e8:c8:2b:75:
50:27:17:e3:c0:79:76:79:a8:6b:7e:62:0d:a3:ea:
cf:e0:82:78:39:ad:47:72:03:11:58:50:df:af:21:
7d:1c:18:d3:02:9a:af:73:6c:ce:8b:f8:90:77:0d:
24:92:35:b6:63:2c:09:84:ec:42:7b:85:5a:0e:3b:
70:0d:38:54:9c:81:7c:d0:05:b6:8c:d0:5b:9d:fc:
b0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:28:B0:A9:54:D4:D8:85:A6:BC:D5:93:2D:55:21:8D:50:81:02:41
X509v3 Authority Key Identifier:
keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dc:78:bf:4c:c9:03:f2:ce:25:7e:24:bb:41:1d:5e:5c:1c:16:
78:04:cd:86:d0:71:9a:d0:e0:75:31:8b:69:a0:fe:54:7c:c4:
32:2d:d1:7d:0a:80:8f:4e:a8:d3:79:c6:e9:4e:c1:af:48:1a:
96:95:25:e4:47:82:5d:7a:6b:6d:12:b3:ad:62:ad:c8:c9:02:
42:15:9a:70:fc:56:ba:7f:d3:00:be:47:38:32:38:a3:2c:5b:
03:ae:ec:df:73:3b:7e:aa:ca:16:ea:42:bc:5b:d0:ae:31:cb:
cc:36:ec:ac:87:9f:a0:a0:59:0c:ec:73:be:4a:e3:ad:bc:09:
58:8d:46:37:48:eb:2a:ce:5a:dc:64:69:06:7b:29:1e:c3:c3:
5e:09:c0:d8:e6:1c:3d:f8:f2:88:42:c6:63:83:a3:f2:af:01:
88:af:5b:87:bf:a4:f3:c0:0f:19:d2:c1:56:72:37:cf:b1:08:
0a:e6:04:1d:f5:57:1f:ba:a6:53:55:9c:ab:b5:ce:60:cb:be:
30:36:c9:e6:fd:d8:a0:11:6c:30:59:ef:51:e1:65:f6:9b:8a:
9a:31:4e:ed:4e:53:6f:f3:8b:32:75:ea:1b:24:0f:fd:9d:c6:
6e:69:82:57:40:54:47:71:ba:c3:8c:d6:90:f6:93:da:06:b3:
48:a8:cd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:50:04 2026 by rpki-client