
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
File: TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json)
Hash identifier: j91R/w1yyaPeF1XtSzNtNEkgi7XMhjWUW3+WmRNZCQc=
Subject key identifier: E6:03:AB:18:9F:4C:67:44:6B:04:23:F7:C2:7E:BF:B2:7B:F5:50:E0
Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Certificate serial: 01C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
Manifest number: 01B5
Signing time: Fri 13 Mar 2026 03:13:07 +0000
Manifest this update: Fri 13 Mar 2026 03:13:06 +0000
Manifest next update: Fri 20 Mar 2026 03:13:06 +0000
Files and hashes: 1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: vIQ2ExLqMESPcQORPEmtQaHIHp71SO7z3g7ZESsWp5Y=)
2: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: aRfQZJBeIUXkRnVBff5AI2UFIz3GN5zYE0o7KWSnJVE=)
3: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: /qNeMoHq2aNx85z5DTHQgQr12JfNKIytF+LLvQVIEvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 03:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9A6E, serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Validity
Not Before: Mar 13 03:13:06 2026 GMT
Not After : Mar 20 03:13:06 2026 GMT
Subject: CN=69b380c2-3d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:90:c5:a8:f2:8a:5d:ba:12:8a:4a:c0:32:
61:73:06:ae:7d:fd:a6:0f:85:06:08:5d:8f:dc:77:
78:fb:0e:7d:f4:39:d8:56:04:b4:0e:99:2b:06:19:
62:52:a9:43:f2:8a:7b:d8:87:02:42:58:43:dc:e6:
2a:80:b3:5d:ee:6d:98:eb:51:bb:5f:5f:f4:12:b6:
5b:c5:53:39:0c:9b:d4:67:7f:f3:4b:07:b2:a5:dd:
41:fa:4e:4a:7d:ed:a3:55:b3:9d:ac:0b:58:18:19:
11:b2:12:7b:98:ce:a1:81:f6:f3:c0:13:e2:05:93:
45:9e:72:77:60:9e:e9:15:f8:eb:c5:c8:11:0a:7f:
44:c2:aa:28:b8:46:1e:e0:ec:6f:de:1a:8e:03:ca:
3c:10:74:54:6a:3d:a6:25:b4:10:51:a4:97:3c:7f:
83:f6:26:ba:44:bd:0c:0c:6c:8c:8e:c6:ea:aa:9e:
0e:26:24:be:66:bb:70:30:ff:09:f1:17:dc:07:58:
9c:65:5f:b6:b5:af:94:32:41:39:9c:f5:31:af:06:
dc:94:78:a8:d9:ee:40:38:d4:67:c3:4a:02:49:f8:
2b:2c:91:3e:b8:28:c3:15:e2:f6:e6:c2:29:d0:4b:
d2:15:10:0e:2c:c2:92:45:fb:89:ac:44:59:52:ca:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:03:AB:18:9F:4C:67:44:6B:04:23:F7:C2:7E:BF:B2:7B:F5:50:E0
X509v3 Authority Key Identifier:
keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:51:dc:a8:51:42:62:f5:38:27:82:1d:74:cc:d3:13:42:8a:
fe:13:8e:4b:5d:7f:b1:b4:92:af:b3:b3:27:08:6e:3c:71:06:
a1:ac:a4:4b:42:fd:fd:c1:90:18:18:95:f5:51:71:24:02:80:
fe:7b:51:01:a0:14:a7:d5:d8:7a:b1:02:0e:c0:9b:09:9f:d9:
66:de:46:01:af:2b:8b:00:e2:f7:ad:55:a2:67:11:db:01:e5:
55:a8:39:08:e5:70:3f:f7:a2:fc:7a:d1:df:58:d7:74:ca:19:
da:e9:f0:af:69:a6:63:33:4e:8c:3c:2c:0d:08:65:1d:f1:b1:
b6:cd:3f:07:ba:ac:00:46:a0:d7:c9:52:7b:dc:0b:15:0e:6a:
85:b1:03:cf:fd:03:5b:e1:12:ff:b9:33:89:c8:44:34:26:5d:
4e:10:91:3e:09:c4:0e:78:af:32:57:b0:57:41:6a:df:81:c5:
72:70:a5:4a:54:a5:8f:c8:88:74:1c:01:27:11:f6:04:b1:de:
87:20:d6:be:f4:06:e5:14:e6:72:0f:94:75:5f:00:27:00:14:
ba:cb:70:8d:95:d2:07:3e:e8:87:dc:d6:c5:81:9c:57:e6:3f:
04:61:c6:e6:e5:47:f7:02:e1:82:ca:d2:28:f1:67:92:ca:8f:
b6:a7:6f:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDlBNkUxMTAvBgNVBAUTKDRDQUQyNzJCQUQxRDg3MDlCMTZFOTk3NTAwNkUxMjI1
NTIwNUM4RjYwHhcNMjYwMzEzMDMxMzA2WhcNMjYwMzIwMDMxMzA2WjAYMRYwFAYD
VQQDEw02OWIzODBjMi0zZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvQyQxajyil26EopKwDJhcwauff2mD4UGCF2P3Hd4+w599DnYVgS0DpkrBhli
UqlD8op72IcCQlhD3OYqgLNd7m2Y61G7X1/0ErZbxVM5DJvUZ3/zSweypd1B+k5K
fe2jVbOdrAtYGBkRshJ7mM6hgfbzwBPiBZNFnnJ3YJ7pFfjrxcgRCn9EwqoouEYe
4Oxv3hqOA8o8EHRUaj2mJbQQUaSXPH+D9ia6RL0MDGyMjsbqqp4OJiS+ZrtwMP8J
8RfcB1icZV+2ta+UMkE5nPUxrwbclHio2e5AONRnw0oCSfgrLJE+uCjDFeL25sIp
0EvSFRAOLMKSRfuJrERZUspgRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOYDqxif
TGdEawQj98J+v7J79VDgMB8GA1UdIwQYMBaAFEytJyutHYcJsW6ZdQBuEiVSBcj2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RS9GNTFGRjg4NjlB
RjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3bXhicGwxQUc0U0pWSUZ5
UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLMG5LNjBkaHdteGJwbDFBRzRTSlZJRnlQWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OUE2RS9GNTFGRjg4NjlBRjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3
bXhicGwxQUc0U0pWSUZ5UFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVVHcqFFCYvU4J4IddMzTE0KK/hOOS11/sbSSr7OzJwhuPHEGoaykS0L9/cGQ
GBiV9VFxJAKA/ntRAaAUp9XYerECDsCbCZ/ZZt5GAa8riwDi961VomcR2wHlVag5
COVwP/ei/HrR31jXdMoZ2unwr2mmYzNOjDwsDQhlHfGxts0/B7qsAEag18lSe9wL
FQ5qhbEDz/0DW+ES/7kzichENCZdThCRPgnEDnivMlewV0Fq34HFcnClSlSlj8iI
dBwBJxH2BLHehyDWvvQG5RTmcg+UdV8AJwAUustwjZXSBz7oh9zWxYGcV+Y/BGHG
5uVH9wLhgsrSKPFnksqPtqdvJQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 13:18:35 2026 by rpki-client