
$ rpki-client -vvf rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
File: TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft (raw, json)
Hash identifier: Z5ay5UFvb34WxY09tN2aKnWEeNI2gk2aNMoYds4fC1o=
Subject key identifier: E1:67:15:0B:EA:99:69:B6:7C:6E:0F:2F:14:24:C0:F5:C0:BC:43:D6
Authority key identifier: 4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23
Certificate issuer: /CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
Certificate serial: 0AE0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
Manifest number: 0AD3
Signing time: Mon 22 Jun 2026 19:26:27 +0000
Manifest this update: Mon 22 Jun 2026 19:26:27 +0000
Manifest next update: Mon 29 Jun 2026 19:26:27 +0000
Files and hashes: 1: TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl (hash: J1xAqyKZV1BWGxy12C90c3VPgzAfRKjigVSVasj2Wkw=)
2: 039A4408614511F0B95C3C38C4F9AE02.roa (hash: ui+G6/PG/zN3KIP4zZsPKAuoPMyNoDO6ihyKtKXhFfo=)
3: 4A7F0102747811EAB3C2634EC4F9AE02.roa (hash: wN/p9bhtqtpFWg4aKbj5Ar4CaOQGWg/xpy0UF+hPVkM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl
rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 19:26:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2784 (0xae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915203C, serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
Validity
Not Before: Jun 22 19:26:27 2026 GMT
Not After : Jun 29 19:26:27 2026 GMT
Subject: CN=6a398c63-65c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:dc:2c:24:4e:0a:25:76:f8:2f:2e:e7:f4:
87:63:8c:f3:37:a6:64:56:4a:32:27:66:43:23:d4:
1d:b8:81:97:2e:08:b7:fb:23:a1:24:53:07:96:e2:
60:b4:55:e0:a2:6d:fa:b7:b3:7f:1f:4f:83:b4:83:
44:0e:3d:d6:53:70:14:87:9c:87:6c:e2:1a:74:36:
fa:c5:f8:a0:af:f3:e7:db:06:6a:79:77:81:59:41:
c6:10:b5:43:34:5e:4d:2d:bb:00:5a:03:0c:b2:98:
ef:8c:36:3f:c2:d1:8d:34:9d:0c:cb:05:f3:86:21:
99:0d:fb:3a:14:af:b7:88:29:99:41:73:f4:f4:3e:
aa:76:92:64:87:15:b9:99:f9:62:60:01:70:2f:ec:
59:28:cc:30:48:da:72:71:34:80:2d:e9:b5:5e:31:
32:21:30:8e:e8:2f:46:96:14:8e:74:2a:b3:8a:06:
95:a5:14:d4:f2:94:ae:23:f0:f0:c8:46:ea:f6:3c:
20:07:a5:4f:6e:03:af:b8:b5:b5:7b:a8:43:46:94:
f4:bd:4d:1f:40:09:c1:13:bf:cb:1e:3b:ce:64:b4:
56:2c:33:70:9d:b5:9e:25:c1:40:e0:77:ac:62:a3:
24:69:c6:3b:ee:f4:48:87:8d:c8:65:e9:a7:00:a2:
9b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:67:15:0B:EA:99:69:B6:7C:6E:0F:2F:14:24:C0:F5:C0:BC:43:D6
X509v3 Authority Key Identifier:
keyid:4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:a0:2d:43:00:b7:f4:64:78:d6:b6:ec:12:0c:5e:70:17:29:
be:61:a1:29:96:b7:8a:8b:7e:9e:ff:cf:89:10:6f:6f:8a:f2:
a0:52:ad:47:15:71:70:69:95:60:bc:45:1e:8a:a9:7b:e7:64:
e4:6d:b8:58:f6:60:54:34:29:18:c9:be:40:6e:cc:94:e9:bd:
72:c9:c4:27:39:d4:e3:56:ff:3d:af:cc:4a:08:a5:a2:2b:c2:
97:fb:ae:a2:f0:87:10:8f:28:62:72:05:17:4c:63:7f:3a:66:
87:ef:dd:07:f9:13:1c:c1:65:a1:00:59:91:e7:a9:97:de:1d:
10:db:ce:98:9c:0e:50:12:21:75:15:e7:1c:f2:f5:b6:10:5d:
39:4a:6d:89:b7:11:84:05:10:9d:a8:c3:f9:4c:7b:f3:8b:ae:
ec:16:67:a0:44:55:86:ee:f8:b0:bc:65:71:9f:70:1d:4e:c1:
c4:df:08:d1:b8:cc:15:16:41:09:da:d4:f1:cf:d9:7b:44:01:
b2:fd:c9:4f:27:89:a9:0e:d6:2f:8d:a3:8d:9d:e8:4d:e3:04:
17:6a:14:2f:9b:d3:99:17:20:8f:7c:b3:29:f4:18:a1:32:f1:
a1:6d:65:66:61:87:98:54:ac:af:a1:91:5a:fb:3b:47:fc:f8:
98:90:8a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:33 2026 by rpki-client