
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
File: tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft (raw, json)
Hash identifier: cnjuk+wjxIvz1qeo4UYJ5NJsNX2wzTI9x0kABN8E3dU=
Subject key identifier: A9:FB:F5:52:D5:B6:9D:2A:B4:F6:82:72:67:20:4B:51:48:8D:CC:17
Authority key identifier: B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B
Certificate issuer: /CN=A91FD64D/serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B
Certificate serial: 0271
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
Manifest number: 0266
Signing time: Fri 17 Apr 2026 01:57:42 +0000
Manifest this update: Fri 17 Apr 2026 01:57:41 +0000
Manifest next update: Fri 24 Apr 2026 01:57:41 +0000
Files and hashes: 1: tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl (hash: l9j7k/73VyMut5iNYRbUajSXOnKRxBQdF2rku2nXQY8=)
2: 66D00EB2449C11EE86105C41C4F9AE02.roa (hash: GxVSXWzE6du6WMtXT3WxN39pt4kQtD831phFtQ55DeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl
rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD64D, serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B
Validity
Not Before: Apr 17 01:57:41 2026 GMT
Not After : Apr 24 01:57:41 2026 GMT
Subject: CN=69e19395-0858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:d3:e2:07:5a:71:a6:68:cc:73:a6:d1:b9:
94:a7:a1:0b:f6:15:6b:88:d6:3b:4b:57:c1:3a:9b:
6f:c9:cb:1f:50:c8:c3:59:af:02:d7:d6:e1:a7:1c:
98:b9:7f:9d:cd:75:60:5f:54:b3:89:a4:62:53:ab:
33:78:36:04:cd:11:3b:93:83:95:c4:28:4f:36:9c:
9f:6f:13:5f:12:7a:c1:28:c1:70:ef:b4:0f:4c:47:
a9:12:c6:be:a5:72:14:10:d8:b0:16:01:4a:59:97:
03:f4:3e:a4:f6:7f:21:37:f2:a5:7f:c6:43:62:7a:
5f:40:43:4e:da:43:4f:ed:fb:77:c9:ca:17:31:53:
69:6f:0a:f6:07:54:e8:d6:d9:58:6c:f5:f5:33:81:
c6:82:3c:b3:7e:40:f8:df:d7:35:c4:57:4f:5f:31:
12:34:ea:ad:5d:0f:86:89:8f:db:42:53:3d:0d:f9:
c0:b3:e3:47:27:47:01:17:90:9d:86:50:1d:03:89:
23:10:52:1f:3f:27:07:3b:1d:57:e8:f4:58:4e:27:
f6:48:e7:bd:55:ee:86:06:07:ad:d7:7c:fa:33:b5:
5e:e8:c1:c0:5e:2f:ac:72:33:90:ba:75:13:73:c8:
17:97:bd:ae:7a:56:ca:bf:80:5d:3d:d0:ae:ca:21:
8e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FB:F5:52:D5:B6:9D:2A:B4:F6:82:72:67:20:4B:51:48:8D:CC:17
X509v3 Authority Key Identifier:
keyid:B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:60:67:58:86:52:31:f4:11:81:88:de:6a:69:54:81:99:b0:
bb:3d:c0:f9:63:4d:43:c5:0a:08:63:6f:48:90:41:1d:8c:44:
11:46:73:5c:ff:6a:69:a7:fb:7e:20:02:35:4b:df:fb:95:40:
e7:9e:f8:50:44:de:3d:7b:97:d5:bb:24:70:22:1f:99:dc:28:
d6:99:c5:11:59:7a:6f:c2:7c:00:8e:ec:71:fe:0c:61:12:98:
b3:f8:fb:76:37:51:1b:bb:71:ac:5b:1e:b5:5b:42:6b:4d:1f:
de:65:0c:66:0c:0d:8a:42:9d:34:86:14:95:6d:5b:76:60:b8:
b7:ab:4e:8c:4c:5f:5b:1a:19:38:55:b2:83:58:60:59:70:89:
65:69:51:13:be:dd:75:52:85:ea:38:a7:17:7e:6b:b5:f0:ad:
b7:e5:60:97:af:22:92:32:fd:f0:44:53:87:a4:b5:8a:ee:67:
95:59:4b:9f:d8:88:49:a5:51:c5:3c:50:91:c4:24:7d:90:f8:
1b:4c:f8:c7:61:b8:02:6a:20:ea:72:dc:12:58:05:0c:3c:ba:
e0:b1:ec:5a:f5:ce:3c:3b:2a:16:c8:cd:ed:be:9a:27:2c:04:
92:fb:92:c8:9c:b4:38:e3:98:20:4c:99:17:4d:92:02:e2:84:
47:8b:85:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:05:29 2026 by rpki-client