
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
File: tksRCOmO7If7awwovgFkXHCLSsU.mft (raw, json)
Hash identifier: h0IFW5PcvgLMCqqsuhgCKAYaKjWYZBzI6tigK0BnzcQ=
Subject key identifier: 69:6F:FB:D9:5B:E5:65:D2:3A:AB:30:8E:C0:96:C1:39:64:95:57:29
Authority key identifier: B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5
Certificate issuer: /CN=A91BAE17/serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5
Certificate serial: 2A5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
Manifest number: 2A46
Signing time: Thu 08 Oct 2026 15:36:22 +0000
Manifest this update: Thu 08 Oct 2026 15:36:21 +0000
Manifest next update: Thu 15 Oct 2026 15:36:21 +0000
Files and hashes: 1: tksRCOmO7If7awwovgFkXHCLSsU.crl (hash: cmn/yK03ibs+KzShB90jPMybGlsVEgU4Er79AFVStYA=)
2: 98845C5C54EC11E791C3F825C4F9AE02.roa (hash: EtduFqwWmltWsbxhdyqETTLdxGQaxld6Ct3ig7z5qNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl
rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 15:36:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10846 (0x2a5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAE17, serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5
Validity
Not Before: Oct 8 15:36:21 2026 GMT
Not After : Oct 15 15:36:21 2026 GMT
Subject: CN=6ac7b875-413c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8c:65:7f:0d:0b:d2:3a:c1:a8:75:51:e2:9b:
d4:10:be:4c:85:87:96:7e:05:66:f2:82:6a:dd:a6:
0f:0d:bf:fa:40:00:2d:88:6c:5c:0d:8e:d9:3b:3b:
3c:d0:ed:88:66:85:c1:c7:ac:37:2a:9c:30:78:b2:
98:48:6a:fd:45:90:ea:bd:44:8d:1f:f0:1a:62:1e:
c1:56:a1:9c:c8:44:52:bd:cc:a0:73:4f:56:e2:29:
6e:ac:69:ec:da:b9:70:f5:29:0c:ae:31:da:d5:27:
91:cc:0e:89:2a:53:0d:e5:ae:9a:10:0e:f7:58:e2:
c6:22:ea:18:9e:2b:26:f7:77:bb:c3:41:90:74:bd:
65:49:0c:62:58:b7:9d:40:3a:0b:1f:8a:d7:80:10:
a0:f5:fd:e5:9d:26:af:a0:2c:91:12:2d:0d:32:61:
de:f3:22:7f:f5:9a:5c:e2:6a:30:3a:54:59:7b:b4:
b4:b9:1c:18:42:1f:f9:b4:56:0a:8f:84:4d:e7:61:
db:87:be:2e:fb:ae:a2:be:2a:82:79:fb:00:78:60:
5d:3d:80:6a:cb:cd:8c:44:6d:94:6a:d3:31:31:53:
6c:77:04:1b:2e:23:6e:bc:d7:5a:6d:9f:b1:4a:39:
8f:58:f9:58:47:36:74:d3:aa:2f:65:ae:59:59:66:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6F:FB:D9:5B:E5:65:D2:3A:AB:30:8E:C0:96:C1:39:64:95:57:29
X509v3 Authority Key Identifier:
keyid:B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:79:96:7c:3a:a0:59:78:f9:c2:08:7f:0a:96:76:38:39:04:
c4:c7:4c:f0:17:8f:45:bf:0e:73:eb:36:e9:1c:13:ff:42:9a:
d9:17:cd:3b:36:20:54:f2:da:2b:d8:d8:82:4d:84:08:11:0d:
0a:27:16:9e:2d:7c:7b:2e:d5:6f:8a:4d:b6:dd:ba:92:70:df:
a9:7e:79:dd:ad:45:32:77:3c:97:bd:12:db:e8:2f:68:c1:32:
ee:c1:83:6d:b8:33:a7:e4:ee:44:57:e8:9e:4f:6d:8e:8d:dd:
41:6c:c9:cc:62:12:63:c0:fc:81:99:2b:ec:7d:84:4b:c5:df:
29:50:cc:5b:25:62:e8:ed:d1:c1:62:bb:5f:32:7c:f9:c4:83:
c7:01:4c:02:ff:f0:1b:55:5d:8a:68:4a:dc:fc:07:4e:6d:8e:
bc:91:24:6e:4f:8e:45:31:1c:4d:21:a3:dd:5f:39:47:46:c2:
ee:90:63:ac:61:03:4d:43:c9:16:92:c1:64:3a:95:46:d3:73:
57:6f:e6:fe:2d:7c:9d:3b:78:1b:c7:a3:9b:90:d7:89:3c:93:
f3:df:e5:c0:07:e5:81:b9:10:ab:1a:b6:22:e3:2f:e2:c7:f9:
a6:97:a2:5a:49:1d:46:98:91:5b:3b:21:58:44:0c:aa:f6:e0:
f6:d1:1e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 06:35:51 2026 by rpki-client