
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft
File: TLITKnI2puO1uWMMoDARSGMoVfc.mft (raw, json)
Hash identifier: bbeoI5506GRmt1PAtu1AxW6vuK+Op6WVttlSBOLCibU=
Subject key identifier: 79:FC:AA:69:32:B7:55:56:66:22:A9:89:66:77:FD:64:89:60:3E:29
Authority key identifier: 4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7
Certificate issuer: /CN=A91F8F9B/serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft
Manifest number: 0167
Signing time: Fri 17 Jul 2026 05:56:47 +0000
Manifest this update: Fri 17 Jul 2026 05:56:46 +0000
Manifest next update: Fri 24 Jul 2026 05:56:46 +0000
Files and hashes: 1: TLITKnI2puO1uWMMoDARSGMoVfc.crl (hash: FyYJuTvg8DW50nZXQXBxYIzbfEqvehbfBTwuFx0GDaM=)
2: 71DBC7BE5DBF11EFB8714857C4F9AE02.roa (hash: DxEefx3v0VIE+PRbAwkcYP/T2AQ/uh/zxBc6m9wV8g4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl
rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 05:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8F9B, serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7
Validity
Not Before: Jul 17 05:56:46 2026 GMT
Not After : Jul 24 05:56:46 2026 GMT
Subject: CN=6a59c41f-2657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5d:69:d3:04:22:7e:f8:ad:ca:45:8f:78:85:
af:87:a1:93:92:8b:1a:e0:c6:0f:68:4e:de:13:3b:
49:8a:50:c2:7f:d7:16:72:cf:8c:b7:d4:80:e6:b8:
86:d9:7a:67:2e:ed:cc:7a:81:26:4a:a9:a6:0b:f8:
95:90:59:23:08:04:65:9c:fb:fa:a2:5c:f1:e3:3d:
68:d3:24:c8:9b:c9:47:25:2d:c3:ab:08:ba:81:f2:
be:26:ae:fc:ca:a0:74:1a:33:f7:29:b8:05:25:3d:
d0:b9:a2:4e:08:09:b2:a6:ad:3e:91:db:e2:9f:0f:
38:13:d7:e0:60:31:36:3d:ac:40:1d:ad:ff:d0:ae:
cd:b3:35:04:60:f1:78:7a:ae:c9:8b:1f:ac:9f:f2:
3a:de:28:f8:b6:13:4e:d6:58:bb:15:f7:ee:96:d5:
69:5d:5c:e0:a1:35:2b:96:da:b6:f1:dc:46:96:1f:
d1:9d:3a:9e:5b:84:b3:5c:d9:82:80:87:21:92:30:
41:fe:0b:b7:bd:91:41:63:60:e6:8f:31:74:65:d8:
b9:be:67:18:55:3b:66:18:09:e0:83:2d:1f:ed:82:
3a:87:dc:e7:db:4c:79:c1:e4:a4:ec:eb:2d:5d:95:
ef:18:4c:a5:f5:99:fb:e5:0e:4e:f2:58:a2:87:d2:
83:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FC:AA:69:32:B7:55:56:66:22:A9:89:66:77:FD:64:89:60:3E:29
X509v3 Authority Key Identifier:
keyid:4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2c:7d:1d:c5:9e:76:2d:9c:fc:fc:12:32:d3:69:30:bf:b4:
9a:7a:48:2c:72:bf:54:21:43:6a:2f:45:80:57:0f:ea:6e:c4:
2f:a5:80:dc:f3:c0:4e:88:82:13:73:ae:e2:b3:fb:9b:10:69:
18:5e:eb:86:a1:27:b5:c9:02:f4:99:de:b9:1a:9a:50:f8:e7:
8b:5e:d4:aa:f5:43:63:68:d1:bc:e9:f7:a8:e7:e6:47:52:f9:
c4:c5:7c:98:b0:07:0b:48:7d:e6:c5:8f:cf:90:c8:97:a7:d2:
97:53:ed:55:3b:5a:ce:de:18:aa:6b:58:64:16:65:58:bb:66:
96:7c:a3:16:24:c5:cc:8c:1f:0b:29:e9:2e:ff:1f:b3:a7:08:
30:29:a8:50:7b:52:26:56:06:38:2a:40:1c:a3:c5:93:92:98:
74:9a:8c:1a:5e:ac:1e:15:c7:c1:39:e4:e6:e7:36:fc:0f:24:
b1:ff:97:08:d6:0c:ae:ed:36:83:64:fd:97:e5:93:eb:33:d3:
41:0d:96:97:77:fa:25:17:b4:3c:b8:04:b5:45:b9:30:d8:66:
69:e7:cd:c5:5a:14:25:6c:f8:d5:73:00:bd:80:ac:1c:32:d0:
7a:14:7b:c3:15:97:f5:c6:c8:4f:65:84:1a:01:4a:f5:c2:9c:
1d:4a:4c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:15:52 2026 by rpki-client