
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
File: tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft (raw, json)
Hash identifier: LcIva+ELEbLomqIdTia/HrFsjvP2xH6LfiGK5yqb6Bw=
Subject key identifier: 55:3A:BA:93:F6:98:F9:6B:F5:1E:5A:06:95:2A:EC:DC:1D:5B:D3:89
Authority key identifier: B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B
Certificate issuer: /CN=A91FD64D/serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B
Certificate serial: 02C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
Manifest number: 02BE
Signing time: Fri 09 Oct 2026 01:51:55 +0000
Manifest this update: Fri 09 Oct 2026 01:51:54 +0000
Manifest next update: Fri 16 Oct 2026 01:51:54 +0000
Files and hashes: 1: tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl (hash: lfodqfW8QGd90K2vyyx6UuVpLhOb3oxWIvF1A+Wwyqs=)
2: 66D00EB2449C11EE86105C41C4F9AE02.roa (hash: GxVSXWzE6du6WMtXT3WxN39pt4kQtD831phFtQ55DeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl
rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 01:51:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 713 (0x2c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD64D, serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B
Validity
Not Before: Oct 9 01:51:54 2026 GMT
Not After : Oct 16 01:51:54 2026 GMT
Subject: CN=6ac848ba-fa7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:94:75:91:1a:5b:22:3c:f1:f9:c8:1f:ce:7b:
42:9c:a1:65:09:4b:81:93:50:22:c1:80:a2:90:04:
44:9d:49:6f:57:21:c3:d0:68:ac:f4:23:73:26:d5:
aa:38:6a:ca:31:7d:54:bf:2d:58:67:39:62:10:6c:
0c:f6:69:3d:47:7e:b4:41:2b:b6:69:da:ac:e3:07:
6a:62:9b:4e:2e:fe:47:be:20:6a:c3:44:a7:f0:03:
06:9a:1a:af:50:e6:1d:0d:7d:41:36:08:68:ce:56:
dc:61:ca:08:e3:57:c0:b7:c8:5f:bb:83:99:b2:fc:
c8:83:43:20:64:0b:e4:38:1c:0f:f2:67:1c:dd:02:
e2:07:be:62:64:03:e1:39:1a:71:bf:33:34:da:55:
1d:82:55:df:72:b8:29:9d:8f:b0:bb:0a:61:02:93:
36:9c:94:59:31:70:11:fd:61:58:d9:71:bc:c0:a6:
3f:ee:64:30:a9:5e:e6:6c:b9:7d:9e:54:e0:9d:7f:
40:be:bd:df:ce:42:76:6d:5c:8e:25:b7:c2:0f:2e:
49:10:23:1f:b8:33:ea:8a:33:8d:68:b3:63:ef:b0:
7e:4a:1a:4f:76:20:ad:a8:46:c3:81:20:c8:5d:85:
8b:f6:dd:4b:80:98:a9:91:ec:b4:6b:d5:ea:0f:e9:
88:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3A:BA:93:F6:98:F9:6B:F5:1E:5A:06:95:2A:EC:DC:1D:5B:D3:89
X509v3 Authority Key Identifier:
keyid:B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:5d:35:86:92:1e:09:3e:9e:5f:d7:d4:f6:ba:1f:da:a7:23:
f3:7b:38:b5:1b:c4:96:c6:0c:d7:1f:24:7f:89:77:d2:14:21:
12:c0:da:3f:44:fb:15:e4:5a:33:fa:82:71:15:b3:92:bb:a5:
cb:b3:0b:10:75:74:68:67:eb:85:6c:de:51:17:8e:dd:60:2e:
0d:b0:c3:61:2e:52:9f:af:7a:fa:f9:fa:d3:80:00:fd:51:f8:
e7:cb:05:14:3f:ef:63:4f:10:fc:2f:bb:8e:c4:0e:78:d8:d3:
05:e5:96:f1:e6:02:5b:a5:2a:f6:74:54:6d:c0:21:30:51:89:
74:a9:56:6f:62:72:1b:65:01:a6:12:a8:b4:73:d4:06:65:32:
99:e7:0c:f1:f4:2d:69:35:13:79:2b:b6:1e:67:e6:c5:bf:99:
d8:7b:ac:fa:82:3a:07:bc:b9:5f:65:0c:00:77:75:86:ab:3c:
a1:66:dc:61:8a:77:af:17:2e:4a:b9:ec:35:23:ad:46:c7:8a:
35:95:5c:1a:50:ea:29:a6:2a:07:be:34:b6:e7:5f:c4:b1:00:
a9:c5:23:25:39:b3:f6:0f:eb:f2:8b:54:a5:76:d1:ad:fb:72:
96:7c:18:cc:4d:bc:89:ec:2e:18:2c:0d:7b:01:d0:43:1a:79:
64:1d:fc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:38:59 2026 by rpki-client