
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft
File: tKtoly4-518HsSc9r-d6HC28-cs.mft (raw, json)
Hash identifier: TAnjohmdSGjF5HTQRZFyjfr6ulFFDA8DPf0fouExwOc=
Subject key identifier: C8:0C:EB:87:68:55:F8:01:58:CF:2B:66:65:5F:D4:AF:A6:42:A6:98
Authority key identifier: B4:AB:68:97:2E:3E:E7:5F:07:B1:27:3D:AF:E7:7A:1C:2D:BC:F9:CB
Certificate issuer: /CN=A91A2886/serialNumber=B4AB68972E3EE75F07B1273DAFE77A1C2DBCF9CB
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKtoly4-518HsSc9r-d6HC28-cs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft
Manifest number: 2C
Signing time: Mon 11 May 2026 08:56:04 +0000
Manifest this update: Mon 11 May 2026 08:56:03 +0000
Manifest next update: Mon 18 May 2026 08:56:03 +0000
Files and hashes: 1: tKtoly4-518HsSc9r-d6HC28-cs.crl (hash: 5YrY8p7mQbus5P31cZMjdkdzdryWnJxIINYl6bT8Ibs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.crl
rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKtoly4-518HsSc9r-d6HC28-cs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2886, serialNumber=B4AB68972E3EE75F07B1273DAFE77A1C2DBCF9CB
Validity
Not Before: May 11 08:56:03 2026 GMT
Not After : May 18 08:56:03 2026 GMT
Subject: CN=6a0199a4-22df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:40:84:51:bc:f4:03:35:37:37:b6:6b:32:5d:
d9:93:52:2e:69:06:d7:60:97:c6:55:0e:4c:7b:a5:
b7:9d:74:39:36:d7:03:72:de:fd:00:c9:3f:91:b8:
09:e6:ea:24:8f:e9:f1:c7:0f:84:22:3f:b5:95:74:
24:b7:be:14:ef:4b:9d:8c:a3:ce:1d:5a:b3:88:6a:
19:32:d4:f2:7f:dd:70:c7:58:4d:68:b7:b9:ee:d0:
aa:18:1f:61:67:6c:f1:0a:f3:e4:30:52:67:35:3f:
e3:15:dc:df:58:28:8d:d1:e6:f6:e2:5d:e4:80:be:
aa:f8:06:bd:ff:d2:e1:6c:45:b4:23:b9:0e:5a:32:
fe:90:96:0f:07:35:c8:f9:bd:b2:df:58:a1:a7:49:
7d:b4:ab:0e:19:17:bc:af:e0:a5:75:c8:3c:e4:53:
19:0b:df:6b:fd:aa:3a:7a:01:17:29:e5:da:1d:d8:
e9:92:6f:d9:f3:21:75:9a:cb:0c:16:49:6c:0e:95:
91:ab:d2:ad:3c:25:ff:7c:4c:2f:cf:85:34:40:6a:
aa:3e:9d:7b:1c:03:de:c7:5d:c2:3f:8b:7a:4d:fe:
f7:46:b9:60:d6:94:f2:2b:3e:e4:12:b8:4f:b8:1a:
8d:32:35:7e:cd:d9:00:24:4f:72:30:b4:37:93:d7:
dd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0C:EB:87:68:55:F8:01:58:CF:2B:66:65:5F:D4:AF:A6:42:A6:98
X509v3 Authority Key Identifier:
keyid:B4:AB:68:97:2E:3E:E7:5F:07:B1:27:3D:AF:E7:7A:1C:2D:BC:F9:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKtoly4-518HsSc9r-d6HC28-cs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:4d:58:ac:9e:50:5f:5f:b7:51:de:a6:87:0b:77:78:94:5c:
70:57:e0:b0:3c:7e:a3:a9:cf:af:83:bc:ba:9b:08:0d:2c:63:
54:52:67:41:32:6b:4c:af:75:cb:cc:86:4b:e3:a5:a2:bd:35:
ef:53:6d:c3:9c:37:cf:7e:48:35:e2:3e:75:28:a6:9c:5f:06:
1a:35:dc:72:5f:9d:6b:17:21:53:2e:e8:06:f4:cd:c0:4d:59:
b1:b5:c5:51:ea:6d:a9:c8:5e:af:6f:ba:d4:3e:48:6e:d7:a5:
fc:7a:40:a0:67:1d:dc:a7:6a:0f:51:fd:1a:2f:14:c3:6d:8d:
37:df:1d:d0:df:10:37:9d:bc:e0:d5:e6:c0:1e:65:37:22:89:
bf:ee:53:a2:d1:d8:04:87:6e:35:51:f0:23:c2:0a:f5:1c:62:
d1:01:ff:34:89:c3:3d:59:24:32:3e:05:e1:c6:7d:16:6c:d1:
47:a5:63:bb:92:42:e9:c7:24:ad:1e:82:03:64:81:af:11:fb:
38:7b:e6:c5:c0:9f:61:ce:1c:82:9e:e3:a0:b1:03:ee:b8:4c:
de:28:5b:48:08:81:d8:31:41:ba:e0:ac:59:0d:41:ee:dc:5e:
be:19:e2:54:56:11:56:40:2b:00:cb:a0:b0:62:ee:1f:90:18:
ab:56:24:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:14:45 2026 by rpki-client