
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
File: TK4677Gsir3bmbzO5PpakW0VezQ.mft (raw, json)
Hash identifier: 6eJY87ZyAxMOhQEc9tcf9/Tp0TRclJG0ybNb0pDB8RM=
Subject key identifier: D5:D3:72:8C:C3:34:4B:0A:68:19:32:40:15:03:39:54:85:48:FD:ED
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 3762
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
Manifest number: 3642
Signing time: Wed 22 Jul 2026 14:30:22 +0000
Manifest this update: Wed 22 Jul 2026 14:30:22 +0000
Manifest next update: Wed 29 Jul 2026 14:30:22 +0000
Files and hashes: 1: TK4677Gsir3bmbzO5PpakW0VezQ.crl (hash: nvRXgiVJdTmU0be6ujHqIUnZiB07dXVK1/d+muHFO24=)
2: 77D96D4A4F3411EFBA0A2659C4F9AE02.roa (hash: yyOi/VAw5sRVCQX5TpgvFtNkRFTz06wlp/omi2nfwPw=)
3: 9ED84B886EC111F19289006667A30FBC.roa (hash: hd1ZU6/Fnutera66ZXCD8DJsTN9KMedFIbuKf7ICHXM=)
4: 4DFF14DE71F211F08D45AC42C4F9AE02.roa (hash: RV3R+8uCKWnB9ll+ltJkxV+x3kpjR9QPpPUyngdFPaM=)
5: 031323B06EBE11F196174E6566A30FBC.roa (hash: NXB/rg2055CKSN9ZF6BUpnYzbi4UYOhQlvoMPnUpbg0=)
6: 0FCEE1C4F76411F08B4529B5436F56BC.roa (hash: YJpZIEy71VmJgEyYXAc8PneApk2Fcyu1z7/EBcc0Dg8=)
7: D630A6B206D511EFB6CFDF2DC4F9AE02.roa (hash: j7NSyaGCsiCQNnmyTpDrtH8dk6MerGuTvymGLl12qTI=)
8: E83E047071F111F0BBD1B63FC4F9AE02.roa (hash: IQ74hXKfS9sBj5pIuOgIRXKGZQu6lWL3dFvrJ3NA2Fw=)
9: 24D7D74C978011EE87BB7D53C4F9AE02.roa (hash: E8tgGZnAJ0DYVToULPFkfN33B2nidUXrmWqnz+uCtOk=)
10: 8FF00754732F11EE90078C13C4F9AE02.roa (hash: YKihQA85OZGMIoxiktXscM0JZAAS7N+DfWFx0LMvOUU=)
11: 31D56A8E06C711EF9A0E1D0AC4F9AE02.roa (hash: 2Lzx/G2fSpGrGjExrZZ3r9OFOxUEm3cHovV2rhteE/0=)
12: 041DFBF46EBE11F196174E6566A30FBC.roa (hash: UdubWRqV2Ckel/l8C/+VnynljQ5Fshh1WNKa2k+xRl8=)
13: 0C51883C12E711F183ACC54E0D3D8C67.roa (hash: l7LBi/Y1FpDZmmeBXMO7I7E/b5ECT7acllocUhgV2ZA=)
14: 4DC27210558111EF880A8679C4F9AE02.roa (hash: CxrN5BIIQrkUc76Mjxuam5mtgMFBui6ZyXEwqKxcF3s=)
15: 8FD552C071F111F0AE49323FC4F9AE02.roa (hash: 9irr6mRRCa6Oo6K8I9PdRq3pgeAMalaJw+pxtHcISBU=)
16: 945922AECEBA11EDBBFD9E28C4F9AE02.roa (hash: mwJTu9ubLJ5CecmwYFCQ6y7GrlQ3uGcRqvbvaSw7Luw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14178 (0x3762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Jul 22 14:30:22 2026 GMT
Not After : Jul 29 14:30:22 2026 GMT
Subject: CN=6a60d3fe-edba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:67:0e:dc:c0:13:8c:da:53:48:fc:11:ad:
be:e2:a8:7e:fb:62:31:6c:55:6f:74:ae:7c:31:67:
40:0e:3a:b2:4c:c6:c5:14:87:55:20:7c:c5:45:5e:
cd:4c:b3:5c:f2:69:92:9c:d7:b9:c6:31:4a:5c:bf:
bd:1c:a6:e0:09:cb:6b:a3:07:66:ff:f8:5c:83:b6:
a1:23:8f:19:91:38:7b:0a:1b:78:89:38:76:7c:ba:
b8:ab:d8:4c:2d:a6:fe:6b:80:38:9b:f7:c6:d7:d0:
ff:79:35:05:c0:db:de:5b:53:e3:83:ea:84:a6:16:
e2:f3:18:a6:84:f3:63:62:a3:9c:d2:6e:1a:58:4f:
ee:5e:7d:26:79:5f:c8:44:2f:c3:bd:89:bc:88:8b:
77:35:d6:ca:4c:41:0d:25:3a:0a:38:07:8f:ad:3c:
47:23:d8:14:35:24:12:d3:06:92:f8:83:5a:d8:b2:
ef:61:fd:93:03:2d:f9:41:ec:39:a9:6a:be:25:f8:
2d:14:7e:72:7b:0f:c6:d1:a6:cf:96:dc:e1:e1:d8:
42:63:ce:f8:e1:80:e0:b0:be:e0:31:05:ff:24:5c:
b0:42:cb:ed:69:a3:18:bb:00:34:18:ed:a5:d8:fe:
fe:cd:6b:72:2a:54:c8:a9:2c:55:49:02:0c:60:ac:
d8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D3:72:8C:C3:34:4B:0A:68:19:32:40:15:03:39:54:85:48:FD:ED
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:47:5d:60:d5:3f:bd:79:a4:db:3a:23:55:b2:38:50:cb:90:
f5:51:6a:3e:a3:f2:a5:80:8f:6f:2f:ca:68:87:38:a8:7b:0b:
9a:c4:65:db:11:bc:5d:2e:27:c8:d5:a0:28:36:63:24:07:c4:
40:36:0a:93:6d:71:7e:20:fb:de:60:5a:59:95:59:71:b0:23:
33:44:eb:41:56:ce:5d:86:86:e6:d9:fd:44:5e:12:62:da:2d:
40:8d:01:f1:da:99:31:e7:c1:58:4b:36:9d:7e:0a:74:b7:56:
57:6e:d7:7e:24:a2:33:ee:f6:16:83:3b:b2:fa:14:da:70:3e:
8a:e0:aa:64:4f:51:c2:d5:71:30:21:cd:2b:1f:ef:13:06:38:
3a:84:88:c8:3f:44:38:30:c9:b5:f6:c8:89:b5:fc:72:d8:dc:
f6:de:95:5f:cc:64:6f:e6:ad:ec:95:f0:ec:c1:b3:c1:0f:8e:
a2:bf:80:b6:34:43:71:64:54:34:c1:e7:b1:69:09:7a:ba:f1:
55:31:a2:14:32:a7:c4:5c:05:c1:41:0d:aa:cf:8f:69:53:c4:
1b:7b:47:77:29:92:06:a6:59:8e:3a:90:a4:8d:5a:8e:02:30:
f9:dd:2a:d0:ee:9d:ac:9e:76:85:92:ac:2d:22:ac:9c:d4:c4:
45:e4:2c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:11:36 2026 by rpki-client