
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft
File: tKtoly4-518HsSc9r-d6HC28-cs.mft (raw, json)
Hash identifier: wefgTpuU1SsoRX3sHCW++ARhhJW6jZKxX/wh+oAibG8=
Subject key identifier: F6:31:B2:12:A0:69:13:C8:87:D5:C0:1A:C1:43:90:41:FC:8C:24:A5
Authority key identifier: B4:AB:68:97:2E:3E:E7:5F:07:B1:27:3D:AF:E7:7A:1C:2D:BC:F9:CB
Certificate issuer: /CN=A91A2886/serialNumber=B4AB68972E3EE75F07B1273DAFE77A1C2DBCF9CB
Certificate serial: 76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKtoly4-518HsSc9r-d6HC28-cs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft
Manifest number: 76
Signing time: Mon 05 Oct 2026 08:17:04 +0000
Manifest this update: Mon 05 Oct 2026 08:17:03 +0000
Manifest next update: Mon 12 Oct 2026 08:17:03 +0000
Files and hashes: 1: tKtoly4-518HsSc9r-d6HC28-cs.crl (hash: 3kL59yHnJbfjiysJhwGukR+wskvVh0cJPWt7jFNKZqo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.crl
rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKtoly4-518HsSc9r-d6HC28-cs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 08:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2886, serialNumber=B4AB68972E3EE75F07B1273DAFE77A1C2DBCF9CB
Validity
Not Before: Oct 5 08:17:03 2026 GMT
Not After : Oct 12 08:17:03 2026 GMT
Subject: CN=6ac35d00-c6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:3c:f6:da:c1:b0:5c:aa:6b:3f:b6:ea:2a:
52:b0:ce:01:15:7b:3a:85:91:24:a1:f6:bf:77:09:
c2:39:bd:be:72:13:fe:2a:d1:ba:88:0d:ce:6a:db:
c4:17:f7:8d:d8:59:87:b4:d4:c2:a7:78:89:89:49:
4a:61:a2:97:0e:6c:b0:96:fa:17:ec:aa:2e:04:29:
0d:13:b9:57:a0:8e:09:a2:cd:0b:59:d2:a2:e3:4a:
82:35:06:bc:4c:e0:45:ed:75:60:59:13:15:cc:98:
12:e8:e8:df:11:26:11:55:90:51:55:ce:29:cd:17:
55:26:36:d4:62:89:19:16:10:e8:ce:85:9a:58:11:
e8:a2:39:a8:98:cc:bd:eb:33:20:8e:c1:fe:6e:6d:
bb:83:07:10:f1:3e:15:5a:63:f1:21:33:04:1f:f4:
0d:10:70:f1:e1:59:b7:16:fd:70:13:f8:03:f0:7f:
ac:20:a1:6a:70:01:01:36:74:6b:9f:21:3e:18:29:
b5:50:d3:f2:96:49:90:a3:10:62:b5:8e:06:e6:40:
5d:05:21:f9:e7:48:77:12:d5:ba:d9:c4:7e:b1:ef:
d3:31:d5:e8:4a:20:89:23:f7:27:f2:75:05:76:14:
d6:41:78:32:7e:a5:d2:72:26:2f:9a:4d:69:99:bd:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:31:B2:12:A0:69:13:C8:87:D5:C0:1A:C1:43:90:41:FC:8C:24:A5
X509v3 Authority Key Identifier:
keyid:B4:AB:68:97:2E:3E:E7:5F:07:B1:27:3D:AF:E7:7A:1C:2D:BC:F9:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKtoly4-518HsSc9r-d6HC28-cs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b0:07:62:c4:1c:43:3c:07:df:e3:cf:48:cf:ef:7a:b9:aa:
b8:a6:bd:bb:1e:7e:22:49:0e:d4:f7:f6:f6:6c:5d:8c:c2:f6:
33:c1:d5:38:41:06:a3:69:40:92:8a:04:4c:6e:70:d0:d6:f4:
b6:f5:b1:f0:17:d3:13:b7:97:b5:d6:81:a5:dd:2f:ee:8c:07:
0b:b3:a3:2e:e1:0e:a5:d5:7c:68:08:a8:17:06:ed:68:52:50:
ae:77:b0:d0:4d:6c:b6:93:e6:9c:6f:bf:f8:ac:a0:1a:ef:0c:
83:33:57:45:8d:63:ad:d3:b8:f8:ce:94:5b:5b:c9:7c:a5:fc:
33:93:23:50:4f:cd:b0:ba:a6:33:db:ed:4b:83:ef:2e:1c:cb:
48:f4:c9:38:b9:32:a8:c2:3a:89:37:33:4c:2a:bb:fd:2b:c1:
a2:85:19:aa:0c:f3:74:c3:83:02:51:34:e8:be:f4:03:6b:c4:
95:8e:68:07:11:88:54:33:c2:f9:c7:35:97:f0:8e:c6:5e:66:
47:27:b2:2f:6e:df:2e:21:15:69:ed:9a:71:ea:58:72:28:36:
0c:aa:ba:13:2b:80:86:dc:f3:af:38:d4:b9:4c:bd:10:86:95:
71:45:f5:21:75:52:dc:82:d3:48:c6:c7:24:8e:5c:2b:ad:43:
90:30:9d:c0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
Mjg4NjExMC8GA1UEBRMoQjRBQjY4OTcyRTNFRTc1RjA3QjEyNzNEQUZFNzdBMUMy
REJDRjlDQjAeFw0yNjEwMDUwODE3MDNaFw0yNjEwMTIwODE3MDNaMBgxFjAUBgNV
BAMTDTZhYzM1ZDAwLWM2YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCkWTz22sGwXKprP7bqKlKwzgEVezqFkSSh9r93CcI5vb5yE/4q0bqIDc5q28QX
943YWYe01MKneImJSUphopcObLCW+hfsqi4EKQ0TuVegjgmizQtZ0qLjSoI1BrxM
4EXtdWBZExXMmBLo6N8RJhFVkFFVzinNF1UmNtRiiRkWEOjOhZpYEeiiOaiYzL3r
MyCOwf5ubbuDBxDxPhVaY/EhMwQf9A0QcPHhWbcW/XAT+APwf6wgoWpwAQE2dGuf
IT4YKbVQ0/KWSZCjEGK1jgbmQF0FIfnnSHcS1brZxH6x79Mx1ehKIIkj9yfydQV2
FNZBeDJ+pdJyJi+aTWmZvWSPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9jGyEqBp
E8iH1cAawUOQQfyMJKUwHwYDVR0jBBgwFoAUtKtoly4+518HsSc9r+d6HC28+csw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyODg2LzZDNTU0NTM0MTBB
MzExRjFCRTcyQjVBRjM5M0Q4QzY3L3RLdG9seTQtNTE4SHNTYzlyLWQ2SEMyOC1j
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdEt0b2x5NC01MThIc1NjOXItZDZIQzI4LWNzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy
ODg2LzZDNTU0NTM0MTBBMzExRjFCRTcyQjVBRjM5M0Q4QzY3L3RLdG9seTQtNTE4
SHNTYzlyLWQ2SEMyOC1jcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB7sAdixBxDPAff489Iz+96uaq4pr27Hn4iSQ7U9/b2bF2MwvYzwdU4QQajaUCS
igRMbnDQ1vS29bHwF9MTt5e11oGl3S/ujAcLs6Mu4Q6l1XxoCKgXBu1oUlCud7DQ
TWy2k+acb7/4rKAa7wyDM1dFjWOt07j4zpRbW8l8pfwzkyNQT82wuqYz2+1Lg+8u
HMtI9Mk4uTKowjqJNzNMKrv9K8GihRmqDPN0w4MCUTTovvQDa8SVjmgHEYhUM8L5
xzWX8I7GXmZHJ7Ivbt8uIRVp7Zpx6lhyKDYMqroTK4CG3POvONS5TL0QhpVxRfUh
dVLcgtNIxsckjlwrrUOQMJ3A
-----END CERTIFICATE-----
Generated at Tue Oct 6 19:44:30 2026 by rpki-client