
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft
File: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft (raw, json)
Hash identifier: oqcJoXIf6NFLScAWwox7lZwhHg1TMv33kybMyGtvrOg=
Subject key identifier: A3:56:AE:2E:96:F0:14:E6:34:0C:A9:78:97:FB:66:0A:FC:50:D7:29
Authority key identifier: 4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC
Certificate issuer: /CN=A91CE813/serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC
Certificate serial: 0C09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft
Manifest number: 0C01
Signing time: Sat 04 Apr 2026 18:39:42 +0000
Manifest this update: Sat 04 Apr 2026 18:39:42 +0000
Manifest next update: Sat 11 Apr 2026 18:39:42 +0000
Files and hashes: 1: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl (hash: UY7e69/Lbz+gJrMHv+89E/wgEIt19C1dA3qbkPNM++c=)
2: CE560240310D11EAA04D402CC4F9AE02.roa (hash: PljJjosvkfc9yMA5ivrXI87b8hWIYGh5tqzmbfpi0f8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl
rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3081 (0xc09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE813, serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC
Validity
Not Before: Apr 4 18:39:42 2026 GMT
Not After : Apr 11 18:39:42 2026 GMT
Subject: CN=69d15aee-5ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:01:d6:5c:2f:31:6d:a9:12:e2:b9:d7:a5:16:
03:5a:49:bc:09:3f:4f:14:6d:24:5a:07:c9:03:da:
31:42:ce:90:77:e9:92:e6:8e:19:03:64:8b:d6:ad:
3a:fb:d8:34:c0:ef:bb:a0:54:da:ec:0d:5c:7a:3b:
e6:97:7b:c9:f2:fd:ee:49:b2:d1:fb:50:ac:0f:2b:
29:52:77:4a:ec:f9:19:a9:3e:7a:96:8d:ff:08:ec:
d2:ea:7e:ae:ea:17:9d:24:d4:80:06:e2:0b:e6:cf:
b0:a1:ca:ad:e3:88:57:6a:4e:dd:36:88:bb:9b:99:
2b:c8:ad:96:c1:cc:3a:b1:53:6c:1c:84:e8:20:99:
dc:77:5e:16:d6:ce:a8:e2:6d:cf:e6:f7:89:f5:0e:
7a:c0:6a:49:46:0b:02:71:9f:45:70:55:c3:ab:af:
c2:07:8c:f2:af:21:2b:e4:bb:98:55:34:8d:a3:c7:
63:90:e9:d4:4b:87:25:46:8d:b0:39:02:f0:dd:05:
ae:d8:2b:71:57:79:91:d0:25:70:8e:7d:87:02:86:
d8:20:1b:c1:e9:51:70:f3:90:d3:36:a0:e0:f1:3e:
34:ce:b1:62:1d:b9:c1:4c:53:07:22:4b:ec:04:e4:
53:f1:0f:b7:f9:b9:14:63:8b:10:eb:e8:97:bb:1b:
fd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:56:AE:2E:96:F0:14:E6:34:0C:A9:78:97:FB:66:0A:FC:50:D7:29
X509v3 Authority Key Identifier:
keyid:4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:46:16:c5:3d:c6:d1:e0:1b:eb:0a:5e:8d:24:12:8b:ce:b3:
04:79:0d:2a:1c:49:d0:e6:e8:44:61:d2:65:7f:c0:8d:ff:c3:
fc:f8:4c:10:45:95:1d:f6:72:1b:f3:33:9b:60:ee:94:0d:92:
ee:3b:1d:b4:79:e8:5a:e1:d2:4d:39:cd:68:cd:f0:59:a5:d2:
c7:12:94:21:d3:57:3c:d6:64:95:04:37:f7:7b:8f:45:a6:19:
90:1e:95:50:ba:4a:f4:13:83:05:a2:53:75:43:6a:2d:a8:4c:
99:f1:22:79:59:c1:20:68:9f:91:8d:28:d2:3d:bc:25:28:a4:
be:62:b3:5b:1a:ae:78:d6:51:ec:25:e8:ec:6e:23:f1:a2:19:
f2:a4:ef:57:11:a9:10:2b:91:81:2a:33:ad:db:c0:b9:11:da:
a8:54:60:96:aa:45:e7:77:74:dc:d6:76:95:b4:54:4a:69:d5:
2f:0e:d7:a0:93:ab:ce:bc:9a:33:28:7e:5e:ea:cf:39:97:96:
df:81:9b:ee:a1:39:11:51:c3:b0:be:82:53:2f:c0:3d:3a:af:
97:4e:f2:cd:db:a1:d0:7a:63:e3:32:48:06:8c:74:4c:41:25:
22:ae:63:bb:23:4a:f4:60:23:aa:83:ca:1f:91:f5:ef:be:e4:
00:35:d4:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U4MTMxMTAvBgNVBAUTKDRDQTI3NzIyN0I2MUM1Q0RERjBCNUJGRkM5MzA3NjBE
MDYyNjQzRkMwHhcNMjYwNDA0MTgzOTQyWhcNMjYwNDExMTgzOTQyWjAYMRYwFAYD
VQQDEw02OWQxNWFlZS01ZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlwHWXC8xbakS4rnXpRYDWkm8CT9PFG0kWgfJA9oxQs6Qd+mS5o4ZA2SL1q06
+9g0wO+7oFTa7A1cejvml3vJ8v3uSbLR+1CsDyspUndK7PkZqT56lo3/COzS6n6u
6hedJNSABuIL5s+wocqt44hXak7dNoi7m5kryK2Wwcw6sVNsHIToIJncd14W1s6o
4m3P5veJ9Q56wGpJRgsCcZ9FcFXDq6/CB4zyryEr5LuYVTSNo8djkOnUS4clRo2w
OQLw3QWu2CtxV3mR0CVwjn2HAobYIBvB6VFw85DTNqDg8T40zrFiHbnBTFMHIkvs
BORT8Q+3+bkUY4sQ6+iXuxv94wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKNWri6W
8BTmNAypeJf7Zgr8UNcpMB8GA1UdIwQYMBaAFEyidyJ7YcXN3wtb/8kwdg0GJkP8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgxMy8xNTAxOERBNjMx
MEMxMUVBQjhDOEZFMjhDNEY5QUUwMi9US0ozSW50aHhjM2ZDMXZfeVRCMkRRWW1R
X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLSjNJbnRoeGMzZkMxdl95VEIyRFFZbVFfdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTgxMy8xNTAxOERBNjMxMEMxMUVBQjhDOEZFMjhDNEY5QUUwMi9US0ozSW50aHhj
M2ZDMXZfeVRCMkRRWW1RX3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATEYWxT3G0eAb6wpejSQSi86zBHkNKhxJ0OboRGHSZX/Ajf/D/PhMEEWVHfZy
G/Mzm2DulA2S7jsdtHnoWuHSTTnNaM3wWaXSxxKUIdNXPNZklQQ393uPRaYZkB6V
ULpK9BODBaJTdUNqLahMmfEieVnBIGifkY0o0j28JSikvmKzWxqueNZR7CXo7G4j
8aIZ8qTvVxGpECuRgSozrdvAuRHaqFRglqpF53d03NZ2lbRUSmnVLw7XoJOrzrya
Myh+XurPOZeW34Gb7qE5EVHDsL6CUy/APTqvl07yzduh0Hpj4zJIBox0TEElIq5j
uyNK9GAjqoPKH5H1777kADXURw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:27:57 2026 by rpki-client