
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
File: tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft (raw, json)
Hash identifier: iohCllkVV1zZZd1i2LfDP7PmyiL362tx2Av68PLvDRo=
Subject key identifier: 06:4E:92:AC:C7:AF:A4:9E:98:5E:23:83:3C:CD:7A:A0:73:4F:EC:48
Authority key identifier: B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B
Certificate issuer: /CN=A91FD64D/serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B
Certificate serial: 02A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
Manifest number: 0298
Signing time: Mon 27 Jul 2026 03:06:00 +0000
Manifest this update: Mon 27 Jul 2026 03:05:59 +0000
Manifest next update: Mon 03 Aug 2026 03:05:59 +0000
Files and hashes: 1: tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl (hash: fS3PXiUFTK98RehyY7NXSZPqIHLq6A3VZL29c9RNKYY=)
2: 66D00EB2449C11EE86105C41C4F9AE02.roa (hash: GxVSXWzE6du6WMtXT3WxN39pt4kQtD831phFtQ55DeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl
rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:05:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675 (0x2a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD64D, serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B
Validity
Not Before: Jul 27 03:05:59 2026 GMT
Not After : Aug 3 03:05:59 2026 GMT
Subject: CN=6a66cb18-3141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:6d:88:07:68:89:ed:e1:89:af:65:b5:28:
82:a9:e3:31:c9:e8:45:ee:c3:4f:30:c2:cd:89:d7:
60:de:cd:6c:02:57:62:f3:16:bd:97:92:59:bd:81:
2a:db:6a:8a:6c:06:97:0c:63:24:2f:a9:b7:57:66:
36:70:21:10:2c:1a:8b:23:d8:57:69:5f:85:7d:e4:
88:42:7b:e5:1f:e2:71:28:b2:9d:ce:37:8d:14:70:
ba:54:ef:ac:c8:0e:d9:d4:8a:4d:3e:97:08:9c:99:
db:ba:42:9f:b4:ed:59:df:56:5e:a9:f4:b9:55:8a:
a2:ff:57:6e:58:ea:85:0c:c9:52:19:37:f0:99:76:
c7:25:38:62:de:af:6e:2a:1a:55:fc:97:b1:e7:b2:
0c:34:87:27:85:b1:e5:86:b9:dd:c5:20:86:1e:0a:
e0:61:32:6f:47:61:65:3b:3f:ea:d6:ed:34:e5:e7:
31:76:ed:9c:5a:e8:90:1e:e4:09:47:ff:a6:58:d7:
01:b9:42:46:84:ed:5e:58:85:93:70:f1:24:39:89:
f0:1d:e3:e5:70:02:f9:f0:0a:45:e8:9d:53:4b:74:
87:8c:c0:88:34:a6:23:12:47:98:3d:76:2e:fb:1a:
37:0d:9d:da:69:ea:1f:9d:f7:e4:18:19:f6:2f:ea:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4E:92:AC:C7:AF:A4:9E:98:5E:23:83:3C:CD:7A:A0:73:4F:EC:48
X509v3 Authority Key Identifier:
keyid:B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:ee:dc:be:18:f1:f0:94:8c:e1:c4:80:27:2a:37:f5:fb:09:
a3:10:15:6a:62:b7:f5:be:18:7a:2a:65:9a:fc:74:77:ce:ce:
a1:75:d3:77:f0:e8:cb:9f:34:07:8f:50:30:8f:99:69:52:ee:
31:16:7a:12:3c:d4:22:8a:fa:63:74:0c:b0:bc:f4:99:bb:de:
7b:d7:1e:aa:d9:15:de:63:e8:ed:a3:0f:66:eb:d5:af:14:4d:
4c:f5:f4:67:9e:b0:6d:08:a6:75:2b:be:94:56:8c:be:50:bb:
a2:0a:bf:16:89:64:39:0e:f4:0d:56:93:6f:71:fa:d1:34:ed:
71:83:86:62:2c:b6:6e:b8:d4:26:81:8f:56:d4:79:d5:90:3e:
bf:2f:17:c9:b5:cc:88:38:bd:22:98:15:8a:aa:b5:b1:c2:c0:
b7:4f:8e:45:47:94:14:de:f6:db:04:f8:27:97:88:03:a4:8f:
b6:b3:5c:ce:f8:ee:04:3c:36:8f:f9:26:33:26:b8:70:e0:f1:
cf:e8:b5:3e:52:ec:53:02:19:ce:62:4f:00:d4:77:81:6b:bd:
f8:57:34:d9:f7:32:26:55:ff:e9:72:c5:de:c6:91:99:99:f1:
de:f0:ea:c2:87:c0:cd:9a:80:78:cb:72:49:88:51:66:de:93:
5c:b6:5a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:14:40 2026 by rpki-client