
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft
File: TLITKnI2puO1uWMMoDARSGMoVfc.mft (raw, json)
Hash identifier: Cs05WXQ/Rn1jaHUgw0cffS85Rc7O5qlOkoX6WH6y5rY=
Subject key identifier: 7F:C3:66:7A:B6:B6:E0:80:6E:22:77:62:CD:FF:0E:7E:3A:A4:81:AB
Authority key identifier: 4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7
Certificate issuer: /CN=A91F8F9B/serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft
Manifest number: 013A
Signing time: Fri 17 Apr 2026 05:05:37 +0000
Manifest this update: Fri 17 Apr 2026 05:05:36 +0000
Manifest next update: Fri 24 Apr 2026 05:05:36 +0000
Files and hashes: 1: TLITKnI2puO1uWMMoDARSGMoVfc.crl (hash: i/6En5RlVuj8QT8idgDVqjSXkK01QrVaONf4cMi93Co=)
2: 71DBC7BE5DBF11EFB8714857C4F9AE02.roa (hash: DxEefx3v0VIE+PRbAwkcYP/T2AQ/uh/zxBc6m9wV8g4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl
rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8F9B, serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7
Validity
Not Before: Apr 17 05:05:36 2026 GMT
Not After : Apr 24 05:05:36 2026 GMT
Subject: CN=69e1bfa1-9230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:01:47:41:1c:ee:7e:70:d1:76:fa:58:bb:28:
29:4b:43:62:92:07:4d:29:0d:6b:cb:ba:5a:74:53:
36:19:97:3c:88:a6:a9:49:5e:12:93:b2:51:6d:be:
7e:82:c8:d0:3f:07:59:c9:2e:a4:e8:05:c0:75:de:
6c:0e:e2:1b:4b:32:5c:56:75:a1:22:50:8c:8f:0d:
0a:70:3b:e9:3a:b4:b2:cf:1b:76:18:3a:06:9b:fa:
2a:3b:64:d1:09:32:bb:26:0d:64:3b:48:96:d2:b4:
92:f4:c1:39:b3:26:24:52:1e:dd:b0:72:b6:d4:9f:
ee:01:b8:43:bb:a5:66:9d:7c:8e:ac:f2:af:80:be:
ca:35:09:45:38:87:be:07:ea:2a:52:ec:c8:12:e0:
af:6c:a3:a0:61:d9:2b:ea:c6:cb:69:cc:4b:94:28:
37:71:fa:6d:ac:19:ba:92:3a:53:b1:d1:49:7e:a7:
f0:a2:df:ba:c8:d5:54:3d:cc:65:a7:76:a0:0c:85:
e6:ce:e7:08:92:e8:af:76:d3:13:2c:5b:6a:05:66:
3f:32:7f:73:12:b1:aa:11:1a:25:fe:1f:65:32:20:
af:36:ac:d5:02:13:9b:f9:f0:ff:3b:ec:08:6d:1c:
9d:61:bb:1b:c9:c7:5a:91:7f:ca:e8:fe:04:6e:c9:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C3:66:7A:B6:B6:E0:80:6E:22:77:62:CD:FF:0E:7E:3A:A4:81:AB
X509v3 Authority Key Identifier:
keyid:4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:43:e0:32:70:c7:b3:e4:50:ed:d8:07:59:73:e0:a8:13:be:
9d:20:81:af:0e:bb:32:12:15:16:c0:90:95:cd:e1:86:78:45:
74:23:b4:52:3a:69:5d:da:e2:fc:d6:07:26:50:09:13:3a:6c:
05:0f:00:38:df:95:d0:ca:3d:15:e9:49:e5:12:94:29:3b:5e:
cc:92:ad:ce:2c:f8:66:43:74:84:e4:f0:c7:9a:e0:49:e7:e5:
57:fd:10:41:67:72:f9:d9:ed:e3:74:33:7d:f4:e8:0d:72:a5:
a9:f0:2b:7e:37:22:70:42:0d:c7:e8:1c:95:56:a1:f3:31:b9:
8b:52:08:68:51:ae:80:b8:6d:ca:47:23:db:ea:d7:e8:59:c3:
35:1b:57:4f:bc:d2:a7:0a:e0:f6:f4:b8:cc:aa:17:81:95:87:
6d:70:0c:b2:84:b4:d9:17:14:9e:c0:4b:47:25:fc:78:82:be:
79:f6:32:67:5d:d1:74:88:e6:70:75:e0:91:8b:e9:ef:59:f7:
d8:21:36:36:a0:70:a6:26:98:68:cc:90:1f:c6:23:f2:f8:c0:
91:ad:25:88:be:96:6a:8b:52:ff:4a:79:1e:f8:6a:6e:db:50:
86:8a:4f:c3:37:8b:74:f4:df:8f:4f:d3:c1:03:ef:46:1c:f3:
a7:e8:7b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:25:55 2026 by rpki-client