
$ rpki-client -vvf rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
File: TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft (raw, json)
Hash identifier: LaL64nBE+ex6w0aiojhIt/NDRUz/mIXwUy8Sw+W1VsU=
Subject key identifier: 79:86:A2:E2:88:E8:9F:60:A0:99:72:16:73:C6:1C:0B:1B:55:53:CE
Authority key identifier: 4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23
Certificate issuer: /CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
Certificate serial: 0ACB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
Manifest number: 0ABE
Signing time: Tue 12 May 2026 19:31:26 +0000
Manifest this update: Tue 12 May 2026 19:31:25 +0000
Manifest next update: Tue 19 May 2026 19:31:25 +0000
Files and hashes: 1: TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl (hash: AaAr9IqEEDUcUEmrqaTjjYgJCavEwjKaqBHzjtpRWDA=)
2: 4A7F0102747811EAB3C2634EC4F9AE02.roa (hash: wN/p9bhtqtpFWg4aKbj5Ar4CaOQGWg/xpy0UF+hPVkM=)
3: 039A4408614511F0B95C3C38C4F9AE02.roa (hash: ui+G6/PG/zN3KIP4zZsPKAuoPMyNoDO6ihyKtKXhFfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl
rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2763 (0xacb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915203C, serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
Validity
Not Before: May 12 19:31:25 2026 GMT
Not After : May 19 19:31:25 2026 GMT
Subject: CN=6a03800e-11c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:17:f2:01:b4:3a:5e:df:2e:7e:7e:43:1c:5e:
da:96:92:b0:e4:a6:7a:12:7d:ad:81:91:cf:6a:50:
d7:f0:ce:c2:43:58:4b:71:9b:ff:46:17:1d:db:b5:
07:68:e7:4e:24:c9:44:bb:1d:9b:2e:6d:73:4e:6a:
f4:12:1f:62:0c:bb:8a:08:79:65:32:62:10:45:1e:
0e:bb:67:1a:01:ab:0e:26:25:91:b3:ff:c7:3d:88:
3d:de:ca:9d:c8:69:ed:86:e6:28:92:58:89:f8:82:
5a:65:20:b8:0d:83:ad:bf:d6:33:4b:85:79:e6:5c:
f1:ff:77:5e:c1:e1:aa:72:95:f9:da:9e:b2:13:0e:
a0:7e:9b:73:6a:ba:cf:2a:a2:2e:50:ee:29:97:fd:
b9:ae:e7:0d:37:96:f4:7e:16:47:bf:b0:d4:35:ee:
f8:0c:e2:fd:e6:6a:01:92:35:07:7a:c2:29:a9:3b:
5d:f1:b5:99:27:1a:44:b1:4b:4c:2b:ba:7f:3e:f6:
a8:2d:c9:2c:87:5c:21:19:cd:55:bb:ae:28:a5:ec:
3e:e1:0d:7c:e7:59:f8:19:13:9c:4a:e5:0a:aa:42:
7b:c2:6e:20:e6:77:e0:e9:85:73:1c:80:c0:09:be:
2f:7c:95:3c:d2:0e:35:26:50:96:12:d7:70:1c:5b:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:86:A2:E2:88:E8:9F:60:A0:99:72:16:73:C6:1C:0B:1B:55:53:CE
X509v3 Authority Key Identifier:
keyid:4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ca:d5:f0:0b:ab:04:9d:ff:51:ea:bd:cc:0e:58:8d:20:31:
9b:ff:c6:30:e6:d5:ab:2d:52:62:2d:50:66:d7:83:8a:73:69:
fa:a9:80:a6:bf:64:71:39:e8:40:23:b6:25:8b:ab:0c:15:51:
3e:12:29:e9:fc:36:bf:f7:3a:d3:4e:7f:6e:5e:2b:82:a6:06:
fe:21:0f:f4:a5:1f:d7:90:9f:6a:03:be:ec:7e:82:1d:7c:b2:
1b:9f:db:f4:40:9b:e7:33:8b:89:ba:28:b2:c2:85:d4:2d:28:
58:fa:4a:7d:4b:9c:29:07:e1:29:f4:9c:81:bd:7d:50:17:52:
03:ce:a5:30:1d:7c:06:bc:83:d2:de:42:bf:a6:96:5f:b5:79:
5e:98:0b:d8:b9:2b:f1:99:cb:39:a5:5a:6d:ef:f8:36:30:43:
3c:c2:68:cd:bb:8a:9b:07:f6:03:33:3c:01:e4:da:95:32:c2:
3f:75:e8:d1:39:c8:18:95:88:6c:e4:2a:75:0b:4f:68:99:cf:
25:53:99:07:3e:e7:ed:73:14:15:f3:2d:11:f9:3c:8a:33:87:
20:3b:d3:57:ed:0e:65:c5:33:a3:04:97:b9:fe:5e:51:08:e1:
d6:e9:97:35:b8:27:2b:22:59:81:d0:10:8a:99:d8:cb:59:da:
2b:a6:a4:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTIwM0MxMTAvBgNVBAUTKDRFNDQ2MENGNjNCMjRCN0MzNUI5RURBRUM5N0U2M0E3
MkM0QkRFMjMwHhcNMjYwNTEyMTkzMTI1WhcNMjYwNTE5MTkzMTI1WjAYMRYwFAYD
VQQDEw02YTAzODAwZS0xMWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAihfyAbQ6Xt8ufn5DHF7alpKw5KZ6En2tgZHPalDX8M7CQ1hLcZv/Rhcd27UH
aOdOJMlEux2bLm1zTmr0Eh9iDLuKCHllMmIQRR4Ou2caAasOJiWRs//HPYg93sqd
yGnthuYokliJ+IJaZSC4DYOtv9YzS4V55lzx/3deweGqcpX52p6yEw6gfptzarrP
KqIuUO4pl/25rucNN5b0fhZHv7DUNe74DOL95moBkjUHesIpqTtd8bWZJxpEsUtM
K7p/PvaoLcksh1whGc1Vu64opew+4Q1851n4GROcSuUKqkJ7wm4g5nfg6YVzHIDA
Cb4vfJU80g41JlCWEtdwHFtezQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHmGouKI
6J9goJlyFnPGHAsbVVPOMB8GA1UdIwQYMBaAFE5EYM9jskt8Nbntrsl+Y6csS94j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjAzQy80NkM4OEM4Mjc0
NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMzdzF1ZTJ1eVg1anB5eEwz
aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RrUmd6Mk95UzN3MXVlMnV5WDVqcHl4TDNpTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MjAzQy80NkM4OEM4Mjc0NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMz
dzF1ZTJ1eVg1anB5eEwzaU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPMrV8AurBJ3/Ueq9zA5YjSAxm//GMObVqy1SYi1QZteDinNp+qmApr9kcTno
QCO2JYurDBVRPhIp6fw2v/c6005/bl4rgqYG/iEP9KUf15CfagO+7H6CHXyyG5/b
9ECb5zOLiboossKF1C0oWPpKfUucKQfhKfScgb19UBdSA86lMB18BryD0t5Cv6aW
X7V5XpgL2Lkr8ZnLOaVabe/4NjBDPMJozbuKmwf2AzM8AeTalTLCP3Xo0TnIGJWI
bOQqdQtPaJnPJVOZBz7n7XMUFfMtEfk8ijOHIDvTV+0OZcUzowSXuf5eUQjh1umX
NbgnKyJZgdAQipnYy1naK6akow==
-----END CERTIFICATE-----
Generated at Wed May 13 12:12:09 2026 by rpki-client