
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
File: TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json)
Hash identifier: bvYdSZCBeY2QVdMS9F+Dcliiq8Qvr6xjhyubadn3Z6M=
Subject key identifier: B8:17:74:FB:7E:19:A1:F1:A3:B5:C6:8F:4C:64:28:7E:5D:74:D2:F4
Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Certificate serial: 01F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
Manifest number: 01E2
Signing time: Thu 11 Jun 2026 05:48:17 +0000
Manifest this update: Thu 11 Jun 2026 05:48:17 +0000
Manifest next update: Thu 18 Jun 2026 05:48:17 +0000
Files and hashes: 1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: m8pmB1uTpDDTAsrv3WHvQmLFItYyZk/IhTpdWDETFvY=)
2: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: /qNeMoHq2aNx85z5DTHQgQr12JfNKIytF+LLvQVIEvI=)
3: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: aRfQZJBeIUXkRnVBff5AI2UFIz3GN5zYE0o7KWSnJVE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 05:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9A6E, serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Validity
Not Before: Jun 11 05:48:17 2026 GMT
Not After : Jun 18 05:48:17 2026 GMT
Subject: CN=6a2a4c21-403a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:75:53:8c:d6:9a:b5:41:cc:32:88:2f:01:
0b:f8:56:bf:55:1f:73:c6:f8:81:63:17:26:be:38:
13:ab:40:84:8e:2e:68:12:66:c4:e4:c6:76:41:54:
b9:04:1d:c0:a9:a6:46:6a:4a:ee:5f:ac:4f:2c:bc:
eb:80:76:3b:2b:16:c4:64:43:64:df:c1:d9:ab:75:
69:18:29:fc:b1:61:6a:4a:42:6a:6b:cd:d4:81:d3:
71:2b:c1:70:5c:3c:da:a4:3b:6c:41:39:9d:c5:ab:
92:8b:4a:2e:66:d7:34:e4:1a:62:2b:61:b9:b7:bd:
7d:8c:80:61:49:73:b2:9d:33:4c:06:6c:74:d6:47:
72:a6:bc:10:27:c2:98:4d:aa:55:a3:3e:77:26:7e:
81:74:f5:9b:27:20:9e:5a:94:60:c0:94:9c:1b:9d:
fb:20:f9:89:04:b6:fd:4b:a9:03:8c:b9:a1:57:b2:
94:d4:3b:79:9d:aa:c9:c5:86:ce:56:e3:b4:35:3c:
e2:1e:5e:aa:a9:32:51:7d:cb:c8:af:2a:c5:91:89:
e8:87:6f:9d:a1:90:93:8a:3d:03:3e:e6:76:b4:2f:
6c:57:b7:50:7f:74:bc:38:34:14:02:74:4e:b8:72:
9a:8b:d5:df:0b:fa:94:d7:5b:d1:79:7c:1d:de:03:
a4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:17:74:FB:7E:19:A1:F1:A3:B5:C6:8F:4C:64:28:7E:5D:74:D2:F4
X509v3 Authority Key Identifier:
keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:96:3b:31:e0:4e:f1:b9:e3:6d:78:57:75:fd:2b:47:3e:a8:
46:83:e0:14:d9:e6:7e:d5:af:b9:e5:16:18:a3:37:c9:1d:82:
54:d5:23:52:7e:67:a3:98:6c:c6:d2:c1:67:81:af:16:81:38:
6d:ac:6e:70:7c:c0:bc:64:d9:2f:63:c1:a0:aa:4a:7b:0a:57:
f9:f9:bb:df:82:32:b4:7c:3b:51:e7:f6:ab:d1:23:b6:30:de:
61:c6:f0:15:52:2d:d0:85:2d:ae:96:1e:1b:1e:cb:3e:c3:fe:
7f:98:23:6a:51:44:ee:a2:ba:e4:62:9c:24:24:2c:db:6e:6d:
70:e5:cb:f0:8f:ca:14:d0:9c:76:a0:94:1b:37:bd:fa:2d:44:
32:d1:e7:5c:cd:5d:a1:4e:4e:56:8a:08:e8:b1:02:d6:a3:f6:
61:27:b0:44:03:89:41:80:d4:8a:7f:10:e2:d9:23:12:36:d6:
32:b4:91:15:1c:d2:5b:c3:e2:b2:15:99:79:52:5e:57:62:84:
6c:ab:8a:d7:de:44:44:f4:17:25:e5:6d:7e:7b:7b:e9:05:dd:
1e:b2:c2:7a:d5:91:2c:18:c5:27:b6:23:a2:1a:7c:83:b4:ab:
76:2b:64:cd:4d:57:64:a5:0c:fc:9c:a5:43:94:d5:9b:a0:8c:
38:de:ee:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:10:37 2026 by rpki-client