
$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
File: TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft (raw, json)
Hash identifier: MXguPKYfjJNY/8fi0P5U2RSuNS10cuQ7Ptaql/0SikQ=
Subject key identifier: 19:4A:96:6B:2F:FC:FC:18:B4:6F:B1:31:A3:3A:81:0C:61:9C:85:61
Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7
Certificate issuer: /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
Certificate serial: 04F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
Manifest number: 04E7
Signing time: Wed 19 Aug 2026 00:05:53 +0000
Manifest this update: Wed 19 Aug 2026 00:05:53 +0000
Manifest next update: Wed 26 Aug 2026 00:05:53 +0000
Files and hashes: 1: TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl (hash: mpEDZsLEpCljj27r97fsyHY+U7MpBVRc27a8Ghv+SN8=)
2: E2348176D54D11EF8A899250C4F9AE02.roa (hash: 9llJReApVBmo5bvUcRrTyqYgxX0J7Rw+SzZuoT8YjSw=)
3: 75FC6CC2753711EC9091CB62C4F9AE02.roa (hash: UZnHMueWtrpb+JywnXsopY8oC5x4rGsb8m2Kk1OPC6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl
rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:05:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1269 (0x4f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
Validity
Not Before: Aug 19 00:05:53 2026 GMT
Not After : Aug 26 00:05:53 2026 GMT
Subject: CN=6a84f361-8c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8a:68:d4:4f:e5:9e:99:bb:0a:22:0f:1f:c7:
ac:e9:8e:9d:50:a6:9c:21:6c:9f:1b:d9:71:cc:18:
ff:a6:6b:0a:71:33:e4:a3:38:f7:c0:58:c7:a6:bd:
a0:71:e0:da:74:68:d8:9d:ce:d4:03:87:e8:9b:ac:
f2:0a:27:6f:8d:72:1a:d2:22:46:76:f1:88:7f:11:
62:b5:a2:bf:02:98:e4:14:b0:1d:5d:67:24:c4:cb:
cf:2a:0b:e8:68:b2:0c:c1:b6:7f:5e:11:17:a0:74:
f3:17:8d:8b:09:1a:27:44:69:5b:4c:9b:56:b8:26:
5c:64:bd:60:84:bd:78:9a:50:6c:a3:ea:18:de:e2:
be:6e:9b:e6:1e:6d:da:06:15:7e:18:a3:29:9a:c8:
d3:0f:4a:bd:a9:48:80:84:3c:6e:c3:08:85:fe:30:
b7:81:d8:5b:ae:9b:5a:a2:fb:67:18:10:45:76:f7:
82:2d:e7:da:71:00:0d:db:c0:9b:e1:9c:71:34:07:
4c:74:7c:85:ac:7f:61:a4:a6:8f:7d:62:32:06:5a:
81:ec:11:6d:fc:fb:16:c6:7c:81:02:1b:5e:b3:76:
0d:ff:2e:38:d8:c1:93:1a:78:b1:63:41:dc:02:6e:
43:43:c9:da:72:4f:45:77:2f:10:06:95:fa:4c:57:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4A:96:6B:2F:FC:FC:18:B4:6F:B1:31:A3:3A:81:0C:61:9C:85:61
X509v3 Authority Key Identifier:
keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:fb:00:b9:19:15:9a:0f:b2:86:a4:88:c9:c3:02:17:88:3d:
c0:7d:41:40:66:ea:e6:bc:c6:39:2b:b4:a5:9f:68:60:b9:41:
7d:2a:9b:bf:3f:76:a1:23:e8:19:fd:6b:d2:75:34:f2:4f:9a:
08:7f:65:d9:96:b3:3b:28:58:5b:14:c3:4b:d9:7e:be:db:d5:
d6:26:f3:3b:a7:34:b2:11:ac:7b:93:ce:46:b4:05:43:ce:a3:
d3:41:c6:b9:18:46:22:49:15:dd:49:ac:60:96:ea:40:81:fc:
e2:a2:5b:16:b5:e7:13:1a:c5:c8:e0:a6:18:45:64:ef:a5:aa:
0b:95:e9:82:c4:a2:25:da:3f:ca:dc:4a:5a:a1:a8:57:e7:a3:
f0:dd:89:01:86:f2:fe:63:58:84:c8:6d:c8:98:cd:36:d6:12:
9c:46:ed:4c:f0:b5:5c:e5:e9:84:18:d3:fa:f8:a0:06:89:f7:
ec:f8:c6:ce:19:72:15:5f:aa:9b:5c:93:16:4b:ac:74:b5:6e:
5b:ac:a9:27:df:60:8b:cf:e4:86:01:19:0d:ee:f8:c8:11:87:
67:29:35:97:cf:2f:93:a8:5a:fe:5c:63:44:16:4e:a9:60:6c:
3f:04:17:98:5f:74:d5:c5:84:f4:b6:3c:be:17:95:43:05:07:
d5:ed:ea:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:42 2026 by rpki-client